# Flog Txt Version 1
# Analyzer Version: 3.2.1
# Analyzer Build Date: Feb  5 2020 10:35:20
# Log Creation Date: 06.02.2020 10:30:12.625

Process:
	id = "1"
	image_name = "vbcudt.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vbcudt.exe"
	page_root = "0x3505b000"
	os_pid = "0xb5c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x444"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vbcudt.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x74c

	[0047.164] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76f20000
	[0047.165] GetProcAddress (hModule=0x76f20000, lpProcName="WriteFile") returned 0x76f435a0
	[0047.165] GetProcAddress (hModule=0x76f20000, lpProcName="WriteConsoleW") returned 0x76f33d40
	[0047.165] GetProcAddress (hModule=0x76f20000, lpProcName="WaitForSingleObject") returned 0x76f42b20
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="VirtualQuery") returned 0x76f3bd40
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="VirtualFree") returned 0x76f31260
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="VirtualAlloc") returned 0x76f367a0
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="SwitchToThread") returned 0x76f2b6c0
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="SetWaitableTimer") returned 0x76f28890
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76f39b70
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="SetProcessPriorityBoost") returned 0x76f6c880
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="SetEvent") returned 0x76f33f00
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="SetErrorMode") returned 0x76f3bdc0
	[0047.166] GetProcAddress (hModule=0x76f20000, lpProcName="SetConsoleCtrlHandler") returned 0x76f36f00
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="LoadLibraryA") returned 0x76f37070
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="LoadLibraryW") returned 0x76f36f80
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="GetSystemInfo") returned 0x76f36f70
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="GetStdHandle") returned 0x76f3d750
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="GetQueuedCompletionStatus") returned 0x76f2a4d0
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="GetProcessAffinityMask") returned 0x76f22e70
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="GetProcAddress") returned 0x76f43690
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="GetEnvironmentStringsW") returned 0x76f36d00
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="GetConsoleMode") returned 0x76f42e60
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="FreeEnvironmentStringsW") returned 0x76f36d20
	[0047.167] GetProcAddress (hModule=0x76f20000, lpProcName="ExitProcess") returned 0x771640f0
	[0047.168] GetProcAddress (hModule=0x76f20000, lpProcName="DuplicateHandle") returned 0x76f35d10
	[0047.168] GetProcAddress (hModule=0x76f20000, lpProcName="CreateThread") returned 0x76f36580
	[0047.168] GetProcAddress (hModule=0x76f20000, lpProcName="CreateIoCompletionPort") returned 0x76f25650
	[0047.168] GetProcAddress (hModule=0x76f20000, lpProcName="CreateEventA") returned 0x76f31120
	[0047.168] GetProcAddress (hModule=0x76f20000, lpProcName="CloseHandle") returned 0x76f42f80
	[0047.168] GetProcAddress (hModule=0x76f20000, lpProcName="AddVectoredExceptionHandler") returned 0x77223ad0
	[0047.168] LoadLibraryA (lpLibFileName="winmm.dll") returned 0x7fef7450000
	[0047.168] GetProcAddress (hModule=0x7fef7450000, lpProcName="timeEndPeriod") returned 0x7fef745a768
	[0047.168] GetProcAddress (hModule=0x7fef7450000, lpProcName="timeBeginPeriod") returned 0x7fef745a648
	[0047.169] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x7fefdbd0000
	[0047.169] GetProcAddress (hModule=0x7fefdbd0000, lpProcName="WSAGetOverlappedResult") returned 0x7fefdbf7a50
	[0047.169] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x22ff30 | out: lpflOldProtect=0x22ff30*=0x2) returned 1
	[0047.370] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x22ff30 | out: lpflOldProtect=0x22ff30*=0x4) returned 1
	[0047.453] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76f20000
	[0047.454] GetProcAddress (hModule=0x76f20000, lpProcName="AddDllDirectory") returned 0x0
	[0047.454] GetProcAddress (hModule=0x76f20000, lpProcName="AddVectoredContinueHandler") returned 0x77223ae0
	[0047.454] GetProcAddress (hModule=0x76f20000, lpProcName="GetQueuedCompletionStatusEx") returned 0x76f6c050
	[0047.455] GetProcAddress (hModule=0x76f20000, lpProcName="LoadLibraryExW") returned 0x76f36640
	[0047.455] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7fefddc0000
	[0049.069] GetProcAddress (hModule=0x7fefddc0000, lpProcName="SystemFunction036") returned 0x7fefddc1044
	[0049.070] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77140000
	[0049.070] GetProcAddress (hModule=0x77140000, lpProcName="NtWaitForSingleObject") returned 0x77191350
	[0049.070] GetProcAddress (hModule=0x77140000, lpProcName="wine_get_version") returned 0x0
	[0049.071] SetErrorMode (uMode=0x2) returned 0x0
	[0049.071] SetErrorMode (uMode=0x8003) returned 0x2
	[0049.071] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x456600) returned 0x8784f0
	[0049.072] RtlAddVectoredContinueHandler (First=0x1, Handler=0x456610) returned 0x878730
	[0049.072] RtlAddVectoredContinueHandler (First=0x0, Handler=0x456620) returned 0x878760
	[0049.072] SetConsoleCtrlHandler (HandlerRoutine=0x456630, Add=1) returned 1
	[0049.073] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0049.079] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x22fe88, lpSystemAffinityMask=0x22fe80 | out: lpProcessAffinityMask=0x22fe88, lpSystemAffinityMask=0x22fe80) returned 1
	[0049.079] GetSystemInfo (in: lpSystemInfo=0x22fef0 | out: lpSystemInfo=0x22fef0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7fffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0049.080] SetProcessPriorityBoost (hProcess=0xffffffffffffffff, bDisablePriorityBoost=1) returned 1
	[0049.101] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0049.378] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000000000
	[0049.703] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000000000
	[0049.742] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x3000, flProtect=0x4) returned 0x2080000
	[0049.745] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0049.759] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x330000
	[0049.993] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x340000
	[0050.279] SystemFunction036 (in: RandomBuffer=0x737fe0, RandomBufferLength=0x80 | out: RandomBuffer=0x737fe0) returned 1
	[0050.581] GetEnvironmentStringsW () returned 0x87e130*
	[0050.589] FreeEnvironmentStringsW (penv=0x87e130) returned 1
	[0050.651] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x22fe88, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x22fe88*=0x48) returned 1
	[0050.651] VirtualQuery (in: lpAddress=0x22fea8, lpBuffer=0x22fea8, dwLength=0x30 | out: lpBuffer=0x22fea8*(BaseAddress=0x22f000, AllocationBase=0x30000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0050.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002e380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c
	[0051.000] CloseHandle (hObject=0x4c) returned 1
	[0051.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002e700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50
	[0051.241] CloseHandle (hObject=0x50) returned 1
	[0051.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002ea80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60
	[0051.731] CloseHandle (hObject=0x60) returned 1
	[0052.147] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x60
	[0053.825] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76f20000
	[0053.834] GetProcAddress (hModule=0x76f20000, lpProcName="GetStdHandle") returned 0x76f3d750
	[0053.835] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0053.843] GetProcAddress (hModule=0x76f20000, lpProcName="SetHandleInformation") returned 0x76f25bb0
	[0053.843] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0053.848] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0053.848] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0053.848] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0053.848] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0053.996] VirtualAlloc (lpAddress=0x0, dwSize=0x15f8f8, flAllocationType=0x3000, flProtect=0x4) returned 0x3080000
	[0054.004] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x390000
	[0054.475] LoadLibraryW (lpLibFileName="ws2_32.dll") returned 0x7fefdbd0000
	[0054.475] GetProcAddress (hModule=0x7fefdbd0000, lpProcName="WSAStartup") returned 0x7fefdbd4980
	[0054.476] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xc00002bdb0 | out: lpWSAData=0xc00002bdb0) returned 0
	[0054.969] SetEvent (hEvent=0x70) returned 1
	[0054.970] GetProcAddress (hModule=0x76f20000, lpProcName="CancelIoEx") returned 0x76f6c5c0
	[0054.977] GetProcAddress (hModule=0x76f20000, lpProcName="SetFileCompletionNotificationModes") returned 0x76f70550
	[0054.978] GetProcAddress (hModule=0x7fefdbd0000, lpProcName="WSAEnumProtocolsW") returned 0x7fefdbf8af0
	[0054.978] WSAEnumProtocolsW (in: lpiProtocols=0xc000072ef8, lpProtocolBuffer=0xc000072f00, lpdwBufferLength=0xc000072ef4 | out: lpProtocolBuffer=0xc000072f00, lpdwBufferLength=0xc000072ef4) returned 4
	[0055.319] SetEvent (hEvent=0x70) returned 1
	[0055.330] GetProcAddress (hModule=0x76f20000, lpProcName="GetConsoleMode") returned 0x76f42e60
	[0055.330] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc000077edc | out: lpMode=0xc000077edc) returned 0
	[0055.339] SetEvent (hEvent=0x68) returned 1
	[0055.663] SetEvent (hEvent=0x5c) returned 1
	[0055.865] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc000077edc | out: lpMode=0xc000077edc) returned 0
	[0055.865] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc000077edc | out: lpMode=0xc000077edc) returned 0
	[0055.873] GetProcAddress (hModule=0x76f20000, lpProcName="GetCommandLineW") returned 0x76f3c480
	[0055.873] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vbcudt.exe\" "
	[0056.113] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x38b0000
	[0057.241] GetProcAddress (hModule=0x76f20000, lpProcName="GetEnvironmentVariableW") returned 0x76f390a0
	[0057.241] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc0000800d0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0057.317] GetProcAddress (hModule=0x76f20000, lpProcName="GetFileAttributesExW") returned 0x76f2b7a0
	[0057.317] GetFileAttributesExW (in: lpFileName="sc.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.com"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.325] GetProcAddress (hModule=0x76f20000, lpProcName="CreateFileW") returned 0x76f31870
	[0057.325] CreateFileW (lpFileName="sc.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.670] SetEvent (hEvent=0x70) returned 1
	[0057.670] GetFileAttributesExW (in: lpFileName="sc.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.670] CreateFileW (lpFileName="sc.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.670] GetFileAttributesExW (in: lpFileName="sc.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.bat"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.670] CreateFileW (lpFileName="sc.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.670] GetFileAttributesExW (in: lpFileName="sc.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.671] CreateFileW (lpFileName="sc.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.671] GetFileAttributesExW (in: lpFileName="sc.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.vbs"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.671] CreateFileW (lpFileName="sc.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.671] GetFileAttributesExW (in: lpFileName="sc.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.vbe"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.671] CreateFileW (lpFileName="sc.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.671] GetFileAttributesExW (in: lpFileName="sc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.js"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.672] CreateFileW (lpFileName="sc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.672] GetFileAttributesExW (in: lpFileName="sc.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.jse"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.672] CreateFileW (lpFileName="sc.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.672] GetFileAttributesExW (in: lpFileName="sc.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.wsf"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.672] CreateFileW (lpFileName="sc.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.672] GetFileAttributesExW (in: lpFileName="sc.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.wsh"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.673] CreateFileW (lpFileName="sc.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.673] GetFileAttributesExW (in: lpFileName="sc.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.msc"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.673] CreateFileW (lpFileName="sc.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.673] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0xc0000801a0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0057.674] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\sc.com" (normalized: "c:\\windows\\system32\\sc.com"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0057.675] CreateFileW (lpFileName="C:\\Windows\\system32\\sc.com" (normalized: "c:\\windows\\system32\\sc.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.675] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\sc.exe" (normalized: "c:\\windows\\system32\\sc.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000077620 | out: lpFileInformation=0xc000077620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3082c03, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3082c03, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf1bb2260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0057.690] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc000080270, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0057.690] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\sc.exe" (normalized: "c:\\windows\\system32\\sc.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000077410 | out: lpFileInformation=0xc000077410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3082c03, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3082c03, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf1bb2260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0057.690] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0058.009] SetEvent (hEvent=0x70) returned 1
	[0058.009] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00007781c | out: lpMode=0xc00007781c) returned 0
	[0058.009] GetProcAddress (hModule=0x76f20000, lpProcName="CreatePipe") returned 0x76f24a10
	[0058.010] CreatePipe (in: hReadPipe=0xc0000778b0, hWritePipe=0xc0000778b8, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0xc0000778b0*=0x8c, hWritePipe=0xc0000778b8*=0x90) returned 1
	[0058.012] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xc00007785c | out: lpMode=0xc00007785c) returned 0
	[0058.012] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xc00007785c | out: lpMode=0xc00007785c) returned 0
	[0058.012] CreatePipe (in: hReadPipe=0xc0000778b0, hWritePipe=0xc0000778b8, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0xc0000778b0*=0x94, hWritePipe=0xc0000778b8*=0x98) returned 1
	[0058.012] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0xc00007785c | out: lpMode=0xc00007785c) returned 0
	[0058.013] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0xc00007785c | out: lpMode=0xc00007785c) returned 0
	[0058.013] GetProcAddress (hModule=0x76f20000, lpProcName="GetEnvironmentStringsW") returned 0x76f36d00
	[0058.013] GetEnvironmentStringsW () returned 0x884750*
	[0058.025] GetProcAddress (hModule=0x76f20000, lpProcName="FreeEnvironmentStringsW") returned 0x76f36d20
	[0058.025] FreeEnvironmentStringsW (penv=0x884750) returned 1
	[0058.033] GetProcAddress (hModule=0x76f20000, lpProcName="GetCurrentProcess") returned 0x76f35cf0
	[0058.033] GetCurrentProcess () returned 0xffffffffffffffff
	[0058.033] GetProcAddress (hModule=0x76f20000, lpProcName="DuplicateHandle") returned 0x76f35d10
	[0058.033] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x84, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000e780, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000e780*=0x9c) returned 1
	[0058.033] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x90, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000e788, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000e788*=0xa0) returned 1
	[0058.033] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x98, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000e790, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000e790*=0xa4) returned 1
	[0058.034] GetProcAddress (hModule=0x76f20000, lpProcName="CreateProcessW") returned 0x76f41bb0
	[0058.034] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\sc.exe", lpCommandLine="sc queryex type= service", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0xc0000ca000, lpCurrentDirectory=0x0, lpStartupInfo=0xc0000777e0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x9c, hStdOutput=0xa0, hStdError=0xa4), lpProcessInformation=0xc0000777a0 | out: lpCommandLine="sc queryex type= service", lpProcessInformation=0xc0000777a0*(hProcess=0xac, hThread=0xa8, dwProcessId=0x8e0, dwThreadId=0xad0)) returned 1
	[0058.475] GetProcAddress (hModule=0x76f20000, lpProcName="CloseHandle") returned 0x76f42f80
	[0058.476] CloseHandle (hObject=0xa8) returned 1
	[0058.476] CloseHandle (hObject=0xa4) returned 1
	[0058.477] CloseHandle (hObject=0xa0) returned 1
	[0058.477] CloseHandle (hObject=0x9c) returned 1
	[0058.477] CloseHandle (hObject=0x84) returned 1
	[0058.559] CloseHandle (hObject=0x90) returned 1
	[0058.559] CloseHandle (hObject=0x98) returned 1
	[0058.560] SetEvent (hEvent=0x5c) returned 1
	[0058.561] GetProcAddress (hModule=0x76f20000, lpProcName="WaitForSingleObject") returned 0x76f42b20
	[0058.561] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0059.318] GetProcAddress (hModule=0x76f20000, lpProcName="GetExitCodeProcess") returned 0x76f312b0
	[0059.318] GetExitCodeProcess (in: hProcess=0xac, lpExitCode=0xc000077a1c | out: lpExitCode=0xc000077a1c*=0x0) returned 1
	[0059.319] GetProcAddress (hModule=0x76f20000, lpProcName="GetProcessTimes") returned 0x76f24380
	[0059.319] GetProcessTimes (in: hProcess=0xac, lpCreationTime=0xc00000e7e0, lpExitTime=0xc00000e7e8, lpKernelTime=0xc00000e7f0, lpUserTime=0xc00000e7f8 | out: lpCreationTime=0xc00000e7e0, lpExitTime=0xc00000e7e8, lpKernelTime=0xc00000e7f0, lpUserTime=0xc00000e7f8) returned 1
	[0059.319] CloseHandle (hObject=0xac) returned 1
	[0059.320] SetEvent (hEvent=0x68) returned 1
	[0059.320] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x5) returned 0x102
	[0059.360] SetEvent (hEvent=0x70) returned 1
	[0059.360] SetEvent (hEvent=0x68) returned 1
	[0061.173] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000400000
	[0061.174] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0061.207] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x3d0000
	[0061.216] SetEvent (hEvent=0x68) returned 1
	[0061.216] SetEvent (hEvent=0x54) returned 1
	[0061.216] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0061.218] SetEvent (hEvent=0x5c) returned 1
	[0061.218] SetEvent (hEvent=0x54) returned 1
	[0061.219] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0061.221] SetEvent (hEvent=0x68) returned 1
	[0061.221] SetEvent (hEvent=0x54) returned 1
	[0061.221] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0061.223] SetEvent (hEvent=0x5c) returned 1
	[0061.223] SetEvent (hEvent=0x54) returned 1
	[0061.223] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0061.225] SetEvent (hEvent=0x68) returned 1
	[0061.227] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x370000
	[0061.230] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x0
	[0061.231] SetEvent (hEvent=0x68) returned 1
	[0061.232] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x102
	[0061.233] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0061.248] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc00036a000, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0061.249] GetFileAttributesExW (in: lpFileName="vssadmin.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.com"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.250] CreateFileW (lpFileName="vssadmin.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.250] GetFileAttributesExW (in: lpFileName="vssadmin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.250] CreateFileW (lpFileName="vssadmin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.251] GetFileAttributesExW (in: lpFileName="vssadmin.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.bat"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.251] CreateFileW (lpFileName="vssadmin.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.251] GetFileAttributesExW (in: lpFileName="vssadmin.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.251] CreateFileW (lpFileName="vssadmin.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.251] GetFileAttributesExW (in: lpFileName="vssadmin.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.vbs"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.251] CreateFileW (lpFileName="vssadmin.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.251] GetFileAttributesExW (in: lpFileName="vssadmin.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.vbe"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.252] CreateFileW (lpFileName="vssadmin.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.252] GetFileAttributesExW (in: lpFileName="vssadmin.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.js"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.252] CreateFileW (lpFileName="vssadmin.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.252] GetFileAttributesExW (in: lpFileName="vssadmin.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.jse"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.252] CreateFileW (lpFileName="vssadmin.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.252] GetFileAttributesExW (in: lpFileName="vssadmin.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.wsf"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.253] CreateFileW (lpFileName="vssadmin.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.253] GetFileAttributesExW (in: lpFileName="vssadmin.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.wsh"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.253] CreateFileW (lpFileName="vssadmin.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.253] GetFileAttributesExW (in: lpFileName="vssadmin.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.msc"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.253] CreateFileW (lpFileName="vssadmin.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.253] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0xc00036a0d0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0061.254] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.com" (normalized: "c:\\windows\\system32\\vssadmin.com"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0061.254] CreateFileW (lpFileName="C:\\Windows\\system32\\vssadmin.com" (normalized: "c:\\windows\\system32\\vssadmin.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.254] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe" (normalized: "c:\\windows\\system32\\vssadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0xc00006b6e8 | out: lpFileInformation=0xc00006b6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f501b5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd2f501b5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xfa124bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28e00)) returned 1
	[0061.262] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc00036a1a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0061.262] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe" (normalized: "c:\\windows\\system32\\vssadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0xc00006b558 | out: lpFileInformation=0xc00006b558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f501b5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd2f501b5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xfa124bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28e00)) returned 1
	[0061.262] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0061.262] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0xc00006b964 | out: lpMode=0xc00006b964) returned 0
	[0061.263] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94
	[0061.263] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0xc00006b924 | out: lpMode=0xc00006b924) returned 0
	[0061.263] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c
	[0061.263] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xc00006b924 | out: lpMode=0xc00006b924) returned 0
	[0061.263] GetEnvironmentStringsW () returned 0x884750*
	[0061.263] FreeEnvironmentStringsW (penv=0x884750) returned 1
	[0061.264] GetCurrentProcess () returned 0xffffffffffffffff
	[0061.264] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc0003e5d00, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc0003e5d00*=0x98) returned 1
	[0061.264] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x94, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc0003e5d08, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc0003e5d08*=0x90) returned 1
	[0061.264] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x8c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc0003e5d10, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc0003e5d10*=0x84) returned 1
	[0061.264] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0xc000384000, lpCurrentDirectory=0x0, lpStartupInfo=0xc00006b928*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x98, hStdOutput=0x90, hStdError=0x84), lpProcessInformation=0xc00006b8e8 | out: lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessInformation=0xc00006b8e8*(hProcess=0xa0, hThread=0x9c, dwProcessId=0xb10, dwThreadId=0xb50)) returned 1
	[0061.474] SetEvent (hEvent=0x70) returned 1
	[0061.474] CloseHandle (hObject=0x9c) returned 1
	[0061.474] CloseHandle (hObject=0x84) returned 1
	[0061.474] CloseHandle (hObject=0x90) returned 1
	[0061.474] CloseHandle (hObject=0x98) returned 1
	[0061.474] CloseHandle (hObject=0xac) returned 1
	[0061.475] CloseHandle (hObject=0x94) returned 1
	[0061.475] CloseHandle (hObject=0x8c) returned 1
	[0061.475] SetEvent (hEvent=0x54) returned 1
	[0061.482] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.482] GetProcAddress (hModule=0x76f20000, lpProcName="FindFirstFileW") returned 0x76f3bd80
	[0061.482] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0xc000173a38 | out: lpFindFileData=0xc000173a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.487] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.487] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0xc000425a38 | out: lpFindFileData=0xc000425a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.492] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.492] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0xc000429a38 | out: lpFindFileData=0xc000429a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.492] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.493] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xc00038da38 | out: lpFindFileData=0xc00038da38*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x884750
	[0061.493] GetProcAddress (hModule=0x76f20000, lpProcName="FindNextFileW") returned 0x76f31910
	[0061.493] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0061.493] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa36d330, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa36d330, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0061.495] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0061.495] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038dad8 | out: lpFindFileData=0xc00038dad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0061.495] GetProcAddress (hModule=0x76f20000, lpProcName="FindClose") returned 0x76f3bd60
	[0061.495] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0061.495] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0xc00038dbb0 | out: lpFileInformation=0xc00038dbb0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0061.640] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0061.685] SetEvent (hEvent=0x54) returned 1
	[0061.685] CreateFileW (lpFileName="C:\\Boot\\" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.685] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0xc00038d928 | out: lpFindFileData=0xc00038d928*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0061.689] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0061.689] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0061.689] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1
	[0061.689] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1
	[0061.689] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0061.690] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0061.691] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0062.117] CreateFileW (lpFileName="C:\\Boot\\Fonts\\" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.117] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.132] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.132] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0063.132] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0063.132] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0063.132] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0063.132] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0063.132] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.132] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.133] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1
	[0063.134] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1
	[0063.192] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1
	[0063.192] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1
	[0063.193] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1
	[0063.194] CreateFileW (lpFileName="C:\\Boot\\Fonts\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\fonts\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.342] SetEvent (hEvent=0x70) returned 1
	[0063.343] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.343] WriteFile (in: hFile=0x84, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.345] CloseHandle (hObject=0x84) returned 1
	[0063.349] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x88e9bd20, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x88e9bd20, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0063.349] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.349] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.349] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.350] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.350] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.350] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.350] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1
	[0063.356] SetEvent (hEvent=0x90) returned 1
	[0063.356] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\cs-cz\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.357] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.357] WriteFile (in: hFile=0x84, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.359] CloseHandle (hObject=0x84) returned 1
	[0063.360] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x88fed390, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x88fed390, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0063.360] CreateFileW (lpFileName="C:\\Boot\\da-DK\\" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.360] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.361] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.361] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.361] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.361] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.361] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0063.376] CreateFileW (lpFileName="C:\\Boot\\da-DK\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\da-dk\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.376] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.376] WriteFile (in: hFile=0x84, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.379] CloseHandle (hObject=0x84) returned 1
	[0063.379] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x890134f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x890134f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0063.380] CreateFileW (lpFileName="C:\\Boot\\de-DE\\" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.380] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.380] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.380] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.380] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.380] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.381] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1
	[0063.381] CreateFileW (lpFileName="C:\\Boot\\de-DE\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\de-de\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.381] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.381] WriteFile (in: hFile=0x84, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.384] CloseHandle (hObject=0x84) returned 1
	[0063.384] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x890134f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x890134f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0063.384] CreateFileW (lpFileName="C:\\Boot\\el-GR\\" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.384] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.385] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.385] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.385] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.385] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.385] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1
	[0063.445] CreateFileW (lpFileName="C:\\Boot\\el-GR\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\el-gr\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.446] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.446] WriteFile (in: hFile=0x84, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.448] CloseHandle (hObject=0x84) returned 1
	[0063.449] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x890cae70, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x890cae70, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0063.449] CreateFileW (lpFileName="C:\\Boot\\en-US\\" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.449] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.450] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.450] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.450] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0063.450] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.450] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.451] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1
	[0063.451] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1
	[0063.451] CreateFileW (lpFileName="C:\\Boot\\en-US\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\en-us\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.702] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.702] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.705] CloseHandle (hObject=0x84) returned 1
	[0063.706] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89240700, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89240700, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0063.706] CreateFileW (lpFileName="C:\\Boot\\es-ES\\" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.706] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.714] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.714] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.714] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.714] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.715] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0063.715] SetEvent (hEvent=0x90) returned 1
	[0063.715] CreateFileW (lpFileName="C:\\Boot\\es-ES\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\es-es\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.716] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.716] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.718] CloseHandle (hObject=0x84) returned 1
	[0063.719] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89324f40, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89324f40, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0063.719] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.719] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.720] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.720] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.720] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.720] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.720] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1
	[0063.720] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\fi-fi\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0063.721] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0063.721] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0063.724] CloseHandle (hObject=0x84) returned 1
	[0063.724] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x893525d0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x893525d0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0063.724] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.725] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0063.809] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.809] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0063.809] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0063.809] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0063.810] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1
	[0063.810] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\fr-fr\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.276] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.276] WriteFile (in: hFile=0x84, lpBuffer=0xc0002a4000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0002a4000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.278] CloseHandle (hObject=0x84) returned 1
	[0064.279] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89429350, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89429350, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.279] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.279] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.280] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.280] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.280] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.280] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.280] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1
	[0064.281] SetEvent (hEvent=0x68) returned 1
	[0064.281] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\hu-hu\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.292] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.292] WriteFile (in: hFile=0x84, lpBuffer=0xc0002a4000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0002a4000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.294] CloseHandle (hObject=0x84) returned 1
	[0064.295] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89654df0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89654df0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.295] CreateFileW (lpFileName="C:\\Boot\\it-IT\\" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.295] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.331] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.331] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.331] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.331] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.332] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0064.332] CreateFileW (lpFileName="C:\\Boot\\it-IT\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\it-it\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.333] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.333] WriteFile (in: hFile=0x84, lpBuffer=0xc0002a4000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0002a4000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.336] CloseHandle (hObject=0x84) returned 1
	[0064.336] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x896e6de0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x896e6de0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.337] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.337] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.337] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.338] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.338] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.338] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.338] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1
	[0064.338] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\ja-jp\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.339] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.339] WriteFile (in: hFile=0x84, lpBuffer=0xc0002a4000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc0002a4000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.342] CloseHandle (hObject=0x84) returned 1
	[0064.343] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x896f5840, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x896f5840, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.343] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.343] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.421] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.422] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.422] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.422] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.422] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1
	[0064.423] SetEvent (hEvent=0x68) returned 1
	[0064.423] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\ko-kr\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.423] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.424] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.426] CloseHandle (hObject=0x84) returned 1
	[0064.427] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x897a7bd0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x897a7bd0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.427] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980)) returned 1
	[0064.428] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.428] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.428] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.429] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.429] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.429] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.429] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1
	[0064.441] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\nb-no\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.442] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.442] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.444] CloseHandle (hObject=0x84) returned 1
	[0064.445] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x897d6200, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x897d6200, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.445] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.445] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.446] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.446] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.446] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.446] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.446] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0064.447] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\nl-nl\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.447] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.448] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.450] CloseHandle (hObject=0x84) returned 1
	[0064.451] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x897e2550, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x897e2550, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.451] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.451] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.452] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.452] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.452] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.452] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.452] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0064.548] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\pl-pl\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.558] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.558] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.635] CloseHandle (hObject=0x84) returned 1
	[0064.636] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x898cf260, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x898cf260, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.636] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.636] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.637] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.637] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.637] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.637] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.637] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1
	[0064.638] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\pt-br\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.638] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.638] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.641] CloseHandle (hObject=0x84) returned 1
	[0064.642] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x8998d940, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x8998d940, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.642] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.643] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.643] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.644] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.644] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.644] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.644] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1
	[0064.685] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\pt-pt\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.685] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.685] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.689] CloseHandle (hObject=0x84) returned 1
	[0064.689] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x899fb710, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x899fb710, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.690] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.690] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.691] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.691] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.691] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.691] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.691] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0064.692] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\ru-ru\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.693] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.693] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.696] CloseHandle (hObject=0x84) returned 1
	[0064.696] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89a0c880, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89a0c880, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.697] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.697] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.697] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.697] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.697] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.698] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.698] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0064.700] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\sv-se\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.700] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.700] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.703] CloseHandle (hObject=0x84) returned 1
	[0064.703] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89a20100, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89a20100, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.704] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.704] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.705] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.705] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.705] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.705] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.706] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1
	[0064.706] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\tr-tr\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.707] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.707] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.723] CloseHandle (hObject=0x84) returned 1
	[0064.723] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89a2eb60, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89a2eb60, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.724] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.724] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.725] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.725] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.725] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.725] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.725] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1
	[0064.814] SetEvent (hEvent=0x90) returned 1
	[0064.814] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\zh-cn\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.815] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.815] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.818] CloseHandle (hObject=0x84) returned 1
	[0064.818] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89b2a2d0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89b2a2d0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.819] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.819] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.819] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.819] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.819] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.820] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.820] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1
	[0064.820] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\zh-hk\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.821] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.821] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.824] CloseHandle (hObject=0x84) returned 1
	[0064.824] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89b36620, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89b36620, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.824] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.825] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.825] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.825] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0064.825] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.825] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.826] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0064.826] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\zh-tw\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.826] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038db24 | out: lpMode=0xc00038db24) returned 0
	[0064.826] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dac4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dac4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.829] CloseHandle (hObject=0x84) returned 1
	[0064.830] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0xc00038daa0 | out: lpFileInformation=0xc00038daa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89b42970, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89b42970, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.830] CreateFileW (lpFileName="C:\\Boot\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\boot\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.831] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038dc34 | out: lpMode=0xc00038dc34) returned 0
	[0064.831] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dbd4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.833] CloseHandle (hObject=0x84) returned 1
	[0064.833] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0xc00038dbb0 | out: lpFileInformation=0xc00038dbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x89b4c5b0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89b4c5b0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0064.833] CreateFileW (lpFileName="C:\\Config.Msi\\" (normalized: "c:\\config.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.834] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0xc00038d928 | out: lpFindFileData=0xc00038d928*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.835] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.835] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.835] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.835] CreateFileW (lpFileName="C:\\Config.Msi\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\config.msi\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0064.836] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038dc34 | out: lpMode=0xc00038dc34) returned 0
	[0064.836] WriteFile (in: hFile=0x84, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc00038dbd4*=0x25d, lpOverlapped=0x0) returned 1
	[0064.839] CloseHandle (hObject=0x84) returned 1
	[0064.839] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), fInfoLevelId=0x0, lpFileInformation=0xc00038dbb0 | out: lpFileInformation=0xc00038dbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x89b5b010, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x89b5b010, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.839] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0xc00038dbb0 | out: lpFileInformation=0xc00038dbb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0064.840] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x84
	[0064.840] GetProcAddress (hModule=0x76f20000, lpProcName="GetFileInformationByHandle") returned 0x76f301f0
	[0064.840] GetFileInformationByHandle (in: hFile=0x84, lpFileInformation=0xc00038db0c | out: lpFileInformation=0xc00038db0c) returned 1
	[0064.841] GetProcAddress (hModule=0x76f20000, lpProcName="GetFileInformationByHandleEx") returned 0x76f31e50
	[0064.841] GetFileInformationByHandleEx (in: hFile=0x84, FileInformationClass=0x9, lpFileInformation=0xc00038daf0, dwBufferSize=0x8 | out: lpFileInformation=0xc00038daf0) returned 1
	[0064.841] CloseHandle (hObject=0x84) returned 1
	[0064.841] CreateFileW (lpFileName="C:\\MSOCache\\" (normalized: "c:\\msocache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.841] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0xc00038d928 | out: lpFindFileData=0xc00038d928*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.842] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.842] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0064.842] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d9c8 | out: lpFindFileData=0xc00038d9c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0064.842] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0064.842] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\" (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.842] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0xc00038d818 | out: lpFindFileData=0xc00038d818*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0064.995] SetEvent (hEvent=0x70) returned 1
	[0064.995] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.054] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
	[0065.054] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
	[0065.054] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
	[0065.054] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
	[0065.054] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
	[0065.054] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
	[0065.054] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d8b8 | out: lpFindFileData=0xc00038d8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0065.056] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0065.058] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.063] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc00038d708 | out: lpFindFileData=0xc00038d708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884750
	[0065.076] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.076] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0065.076] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
	[0065.076] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1
	[0065.077] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0065.077] FindNextFileW (in: hFindFile=0x884750, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0065.077] FindClose (in: hFindFile=0x884750 | out: hFindFile=0x884750) returned 1
	[0065.077] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1
	[0065.082] SetEvent (hEvent=0x68) returned 1
	[0065.082] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1
	[0065.086] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1
	[0065.086] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0065.349] SetEvent (hEvent=0x70) returned 1
	[0065.349] SetEvent (hEvent=0x5c) returned 1
	[0065.349] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0065.451] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00038da14 | out: lpMode=0xc00038da14) returned 0
	[0065.452] WriteFile (in: hFile=0x84, lpBuffer=0xc0002c8000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038d9b4, lpOverlapped=0x0 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesWritten=0xc00038d9b4*=0x25d, lpOverlapped=0x0) returned 1
	[0065.455] CloseHandle (hObject=0x84) returned 1
	[0065.564] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8a0b03d0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x8a0b03d0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0066.829] SetEvent (hEvent=0xc8) returned 1
	[0066.829] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x102
	[0066.878] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0066.878] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x102
	[0066.959] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0066.960] SetEvent (hEvent=0x5c) returned 1
	[0066.960] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x102
	[0066.972] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0066.972] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.972] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc00038d708 | out: lpFindFileData=0xc00038d708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8847e0
	[0067.335] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.335] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
	[0067.335] SetEvent (hEvent=0x68) returned 1
	[0067.335] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0067.454] SetEvent (hEvent=0x68) returned 1
	[0067.464] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0067.466] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
	[0067.467] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0067.467] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0067.467] FindClose (in: hFindFile=0x8847e0 | out: hFindFile=0x8847e0) returned 1
	[0067.717] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0067.721] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0067.722] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1
	[0067.768] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1
	[0067.768] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4
	[0067.769] GetConsoleMode (in: hConsoleHandle=0xa4, lpMode=0xc00038da14 | out: lpMode=0xc00038da14) returned 0
	[0067.769] WriteFile (in: hFile=0xa4, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038d9b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc00038d9b4*=0x25d, lpOverlapped=0x0) returned 1
	[0067.773] CloseHandle (hObject=0xa4) returned 1
	[0067.774] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8b553ee0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x8b553ee0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0067.774] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.774] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc00038d708 | out: lpFindFileData=0xc00038d708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8847e0
	[0067.922] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.922] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
	[0067.922] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0067.922] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
	[0067.923] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0067.923] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0067.923] FindClose (in: hFindFile=0x8847e0 | out: hFindFile=0x8847e0) returned 1
	[0067.925] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1
	[0067.932] SetEvent (hEvent=0xb0) returned 1
	[0067.932] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1
	[0067.933] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0067.933] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1
	[0067.934] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0067.935] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038da14 | out: lpMode=0xc00038da14) returned 0
	[0067.935] WriteFile (in: hFile=0xa8, lpBuffer=0xc000350000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038d9b4, lpOverlapped=0x0 | out: lpBuffer=0xc000350000*, lpNumberOfBytesWritten=0xc00038d9b4*=0x25d, lpOverlapped=0x0) returned 1
	[0067.938] CloseHandle (hObject=0xa8) returned 1
	[0067.938] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8b69ff60, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x8b69ff60, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0067.939] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.939] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc00038d708 | out: lpFindFileData=0xc00038d708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8847e0
	[0067.948] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x8847e0, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0067.949] FindClose (in: hFindFile=0x8847e0 | out: hFindFile=0x8847e0) returned 1
	[0067.951] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1
	[0067.954] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1
	[0067.954] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1
	[0067.955] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1
	[0069.870] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0072.142] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0073.363] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038da14 | out: lpMode=0xc00038da14) returned 0
	[0073.364] SetEvent (hEvent=0xac) returned 1
	[0073.364] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0103.052] SetEvent (hEvent=0x5c) returned 1
	[0103.053] SetEvent (hEvent=0x90) returned 1
	[0103.053] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0103.204] SetEvent (hEvent=0x5c) returned 1
	[0103.204] SwitchToThread () returned 1
	[0103.417] SetEvent (hEvent=0x5c) returned 1
	[0103.417] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0103.541] SetEvent (hEvent=0x5c) returned 1
	[0103.541] SetEvent (hEvent=0x90) returned 1
	[0103.542] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0100 | out: pbBuffer=0xc0003a0100) returned 1
	[0103.543] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a011a | out: pbBuffer=0xc0003a011a) returned 1
	[0103.543] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0103.543] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0140 | out: pbBuffer=0xc0003a0140) returned 1
	[0103.550] VirtualAlloc (lpAddress=0xc000216000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000216000
	[0103.553] VirtualFree (lpAddress=0xc00030c000, dwSize=0x18000, dwFreeType=0x4000) returned 1
	[0103.555] VirtualFree (lpAddress=0xc0003ce000, dwSize=0x16000, dwFreeType=0x4000) returned 1
	[0103.557] VirtualFree (lpAddress=0xc000364000, dwSize=0x16000, dwFreeType=0x4000) returned 1
	[0103.575] VirtualAlloc (lpAddress=0xc000344000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000344000
	[0103.578] VirtualAlloc (lpAddress=0xc00035e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035e000
	[0103.730] VirtualFree (lpAddress=0xc000538000, dwSize=0x102000, dwFreeType=0x4000) returned 1
	[0103.752] VirtualAlloc (lpAddress=0xc000a86000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000a86000
	[0108.042] VirtualAlloc (lpAddress=0xc000b06000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b06000
	[0108.044] VirtualAlloc (lpAddress=0xc000b0a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b0a000
	[0108.045] VirtualAlloc (lpAddress=0xc000364000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000364000
	[0108.047] VirtualAlloc (lpAddress=0xc000368000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000368000
	[0108.048] VirtualAlloc (lpAddress=0xc00036c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00036c000
	[0108.847] VirtualAlloc (lpAddress=0xc000370000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000370000
	[0108.849] VirtualAlloc (lpAddress=0xc000374000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000374000
	[0108.850] VirtualAlloc (lpAddress=0xc00030c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00030c000
	[0108.852] VirtualAlloc (lpAddress=0xc000310000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000310000
	[0108.854] VirtualAlloc (lpAddress=0xc000314000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000314000
	[0108.855] VirtualAlloc (lpAddress=0xc000318000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000318000
	[0108.857] VirtualAlloc (lpAddress=0xc00031c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00031c000
	[0108.858] VirtualAlloc (lpAddress=0xc000320000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000320000
	[0108.860] VirtualAlloc (lpAddress=0xc000254000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000254000
	[0108.864] VirtualAlloc (lpAddress=0xc000258000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000258000
	[0108.866] VirtualAlloc (lpAddress=0xc00025c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00025c000
	[0108.868] VirtualAlloc (lpAddress=0xc000ebc000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ebc000
	[0108.877] VirtualFree (lpAddress=0xc001000000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0110.299] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x242000, dwFreeType=0x4000) returned 0
	[0110.299] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x242000, dwFreeType=0x4000) returned 0
	[0110.300] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x121000, dwFreeType=0x4000) returned 0
	[0110.300] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x90000, dwFreeType=0x4000) returned 0
	[0110.300] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x48000, dwFreeType=0x4000) returned 0
	[0110.300] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x24000, dwFreeType=0x4000) returned 1
	[0110.300] VirtualFree (lpAddress=0xc000fe2000, dwSize=0x21e000, dwFreeType=0x4000) returned 0
	[0110.301] VirtualFree (lpAddress=0xc000fe2000, dwSize=0x10f000, dwFreeType=0x4000) returned 0
	[0110.301] VirtualFree (lpAddress=0xc000fe2000, dwSize=0x87000, dwFreeType=0x4000) returned 0
	[0110.301] VirtualFree (lpAddress=0xc000fe2000, dwSize=0x43000, dwFreeType=0x4000) returned 0
	[0110.301] VirtualFree (lpAddress=0xc000fe2000, dwSize=0x21000, dwFreeType=0x4000) returned 0
	[0110.301] VirtualFree (lpAddress=0xc000fe2000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0110.301] VirtualFree (lpAddress=0xc000ff2000, dwSize=0x20e000, dwFreeType=0x4000) returned 0
	[0110.302] VirtualFree (lpAddress=0xc000ff2000, dwSize=0x107000, dwFreeType=0x4000) returned 0
	[0110.302] VirtualFree (lpAddress=0xc000ff2000, dwSize=0x83000, dwFreeType=0x4000) returned 0
	[0110.302] VirtualFree (lpAddress=0xc000ff2000, dwSize=0x41000, dwFreeType=0x4000) returned 0
	[0110.302] VirtualFree (lpAddress=0xc000ff2000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0110.302] VirtualFree (lpAddress=0xc000ff2000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0110.302] VirtualFree (lpAddress=0xc000ff2000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0110.303] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x206000, dwFreeType=0x4000) returned 0
	[0110.303] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x103000, dwFreeType=0x4000) returned 0
	[0110.303] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x81000, dwFreeType=0x4000) returned 0
	[0110.303] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0110.303] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0110.303] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0110.303] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0110.304] VirtualFree (lpAddress=0xc000ffa000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0110.304] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x202000, dwFreeType=0x4000) returned 0
	[0110.304] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x101000, dwFreeType=0x4000) returned 0
	[0110.304] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0110.304] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0110.305] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0110.305] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0110.305] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0110.305] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0110.305] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0110.305] VirtualFree (lpAddress=0xc001000000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0110.725] VirtualAlloc (lpAddress=0xc000402000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000402000
	[0110.726] VirtualAlloc (lpAddress=0xc000406000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000406000
	[0110.727] VirtualAlloc (lpAddress=0xc00040a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00040a000
	[0110.728] VirtualAlloc (lpAddress=0xc00040e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00040e000
	[0110.729] VirtualAlloc (lpAddress=0xc000412000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000412000
	[0110.730] VirtualAlloc (lpAddress=0xc000416000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000416000
	[0110.735] VirtualAlloc (lpAddress=0xc00094e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00094e000
	[0110.737] VirtualAlloc (lpAddress=0xc000952000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000952000
	[0110.738] VirtualAlloc (lpAddress=0xc000956000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000956000
	[0110.739] VirtualAlloc (lpAddress=0xc00095a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00095a000
	[0110.740] VirtualAlloc (lpAddress=0xc00095e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00095e000
	[0110.742] VirtualAlloc (lpAddress=0xc000962000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000962000
	[0110.866] SwitchToThread () returned 1
	[0111.272] VirtualAlloc (lpAddress=0xc000130000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000130000
	[0111.274] VirtualAlloc (lpAddress=0xc000134000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000134000
	[0111.275] VirtualAlloc (lpAddress=0xc000138000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000138000
	[0111.276] VirtualAlloc (lpAddress=0xc00013c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013c000
	[0111.277] VirtualAlloc (lpAddress=0xc000140000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000140000
	[0111.278] VirtualAlloc (lpAddress=0xc000144000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000144000
	[0111.280] VirtualAlloc (lpAddress=0xc000148000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000148000
	[0111.280] VirtualAlloc (lpAddress=0xc00014c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014c000
	[0111.284] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x102
	[0111.440] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x102
	[0111.614] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x102
	[0111.757] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0111.758] SetEvent (hEvent=0x70) returned 1
	[0111.758] SetEvent (hEvent=0xb0) returned 1
	[0111.758] SetEvent (hEvent=0xc4) returned 1
	[0111.758] VirtualAlloc (lpAddress=0xc000154000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000154000
	[0111.764] VirtualAlloc (lpAddress=0xc001312000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001312000
	[0111.769] VirtualFree (lpAddress=0xc000ba2000, dwSize=0x12000, dwFreeType=0x4000) returned 1
	[0111.942] VirtualAlloc (lpAddress=0xc0010be000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0010be000
	[0112.150] SetEvent (hEvent=0xb0) returned 1
	[0112.150] ReadFile (in: hFile=0xcc, lpBuffer=0xc000fbe000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000395cec, lpOverlapped=0x0 | out: lpBuffer=0xc000fbe000*, lpNumberOfBytesRead=0xc000395cec*=0x100000, lpOverlapped=0x0) returned 1
	[0112.885] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0113.033] VirtualAlloc (lpAddress=0xc00015c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015c000
	[0113.035] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a110 | out: pbBuffer=0xc00041a110) returned 1
	[0113.035] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214b02 | out: pbBuffer=0xc000214b02) returned 1
	[0113.035] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214b5d | out: pbBuffer=0xc000214b5d) returned 1
	[0113.035] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214b7a | out: pbBuffer=0xc000214b7a) returned 1
	[0113.036] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a150 | out: pbBuffer=0xc00041a150) returned 1
	[0113.038] VirtualAlloc (lpAddress=0xc0000aa000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000aa000
	[0113.040] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0113.040] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0113.040] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0113.040] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x40000, dwFreeType=0x4000) returned 1
	[0113.045] VirtualFree (lpAddress=0xc000bf4000, dwSize=0xc0000, dwFreeType=0x4000) returned 0
	[0113.045] VirtualFree (lpAddress=0xc000bf4000, dwSize=0x60000, dwFreeType=0x4000) returned 0
	[0113.045] VirtualFree (lpAddress=0xc000bf4000, dwSize=0x30000, dwFreeType=0x4000) returned 0
	[0113.045] VirtualFree (lpAddress=0xc000bf4000, dwSize=0x18000, dwFreeType=0x4000) returned 0
	[0113.045] VirtualFree (lpAddress=0xc000bf4000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0113.047] VirtualFree (lpAddress=0xc000c00000, dwSize=0xb4000, dwFreeType=0x4000) returned 1
	[0113.062] VirtualFree (lpAddress=0xc000baa000, dwSize=0x10a000, dwFreeType=0x4000) returned 0
	[0113.062] VirtualFree (lpAddress=0xc000baa000, dwSize=0x10a000, dwFreeType=0x4000) returned 0
	[0113.062] VirtualFree (lpAddress=0xc000baa000, dwSize=0x85000, dwFreeType=0x4000) returned 0
	[0113.062] VirtualFree (lpAddress=0xc000baa000, dwSize=0x42000, dwFreeType=0x4000) returned 1
	[0113.062] VirtualFree (lpAddress=0xc000bec000, dwSize=0xc8000, dwFreeType=0x4000) returned 0
	[0113.063] VirtualFree (lpAddress=0xc000bec000, dwSize=0x64000, dwFreeType=0x4000) returned 0
	[0113.063] VirtualFree (lpAddress=0xc000bec000, dwSize=0x32000, dwFreeType=0x4000) returned 0
	[0113.063] VirtualFree (lpAddress=0xc000bec000, dwSize=0x19000, dwFreeType=0x4000) returned 0
	[0113.063] VirtualFree (lpAddress=0xc000bec000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0113.063] VirtualFree (lpAddress=0xc000bf8000, dwSize=0xbc000, dwFreeType=0x4000) returned 0
	[0113.064] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x5e000, dwFreeType=0x4000) returned 0
	[0113.064] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x2f000, dwFreeType=0x4000) returned 0
	[0113.064] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x17000, dwFreeType=0x4000) returned 0
	[0113.064] VirtualFree (lpAddress=0xc000bf8000, dwSize=0xb000, dwFreeType=0x4000) returned 0
	[0113.064] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x5000, dwFreeType=0x4000) returned 1
	[0113.065] VirtualFree (lpAddress=0xc000bfd000, dwSize=0xb7000, dwFreeType=0x4000) returned 0
	[0113.065] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x5b000, dwFreeType=0x4000) returned 0
	[0113.065] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x2d000, dwFreeType=0x4000) returned 0
	[0113.065] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x16000, dwFreeType=0x4000) returned 0
	[0113.065] VirtualFree (lpAddress=0xc000bfd000, dwSize=0xb000, dwFreeType=0x4000) returned 0
	[0113.065] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x5000, dwFreeType=0x4000) returned 0
	[0113.066] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0117.046] VirtualFree (lpAddress=0xc000bff000, dwSize=0xb5000, dwFreeType=0x4000) returned 0
	[0117.047] VirtualFree (lpAddress=0xc000bff000, dwSize=0x5a000, dwFreeType=0x4000) returned 0
	[0117.047] VirtualFree (lpAddress=0xc000bff000, dwSize=0x2d000, dwFreeType=0x4000) returned 0
	[0117.047] VirtualFree (lpAddress=0xc000bff000, dwSize=0x16000, dwFreeType=0x4000) returned 0
	[0117.047] VirtualFree (lpAddress=0xc000bff000, dwSize=0xb000, dwFreeType=0x4000) returned 0
	[0117.047] VirtualFree (lpAddress=0xc000bff000, dwSize=0x5000, dwFreeType=0x4000) returned 0
	[0117.047] VirtualFree (lpAddress=0xc000bff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0117.048] VirtualFree (lpAddress=0xc000bff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0117.048] VirtualFree (lpAddress=0xc000c00000, dwSize=0xb4000, dwFreeType=0x4000) returned 1
	[0117.050] SetEvent (hEvent=0x68) returned 1
	[0117.056] VirtualAlloc (lpAddress=0xc0000c8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000c8000
	[0117.057] VirtualAlloc (lpAddress=0xc00077c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00077c000
	[0117.061] VirtualAlloc (lpAddress=0xc0003a2000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a2000
	[0117.072] VirtualAlloc (lpAddress=0xc0003e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e0000
	[0117.351] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.egmwv")) returned 0x2020
	[0117.351] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0120.924] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0201.573] SetEvent (hEvent=0xc0) returned 1
	[0201.573] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0201.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf")) returned 0x20
	[0201.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x20) returned 1
	[0201.576] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.865] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000393cc4 | out: lpMode=0xc000393cc4) returned 0
	[0201.865] ReadFile (in: hFile=0xd0, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x83c, lpNumberOfBytesRead=0xc000393cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000393cec*=0x83c, lpOverlapped=0x0) returned 1
	[0201.875] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004148d0 | out: pbBuffer=0xc0004148d0) returned 1
	[0201.875] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fcc02 | out: pbBuffer=0xc0000fcc02) returned 1
	[0201.875] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000fcc9c | out: pbBuffer=0xc0000fcc9c) returned 1
	[0201.875] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000fccd5 | out: pbBuffer=0xc0000fccd5) returned 1
	[0201.875] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414910 | out: pbBuffer=0xc000414910) returned 1
	[0201.876] GetFileType (hFile=0xd0) returned 0x1
	[0201.876] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034fca0*=2108) returned 1
	[0201.876] WriteFile (in: hFile=0xd0, lpBuffer=0xc000442000*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0xc00034fccc, lpOverlapped=0xc00034fce8 | out: lpBuffer=0xc000442000*, lpNumberOfBytesWritten=0xc00034fccc*=0x83c, lpOverlapped=0xc00034fce8) returned 1
	[0201.876] GetFileType (hFile=0xd0) returned 0x1
	[0201.876] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x83c, lpNewFilePointer=0xc00034fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034fca0*=2108) returned 1
	[0201.877] GetFileType (hFile=0xd0) returned 0x1
	[0201.877] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034fca0*=2108) returned 1
	[0201.877] WriteFile (in: hFile=0xd0, lpBuffer=0xc000439180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00034fccc, lpOverlapped=0xc00034fce8 | out: lpBuffer=0xc000439180*, lpNumberOfBytesWritten=0xc00034fccc*=0x227, lpOverlapped=0xc00034fce8) returned 1
	[0201.877] GetFileType (hFile=0xd0) returned 0x1
	[0201.877] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x83c, lpNewFilePointer=0xc00034fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034fca0*=2108) returned 1
	[0201.878] CloseHandle (hObject=0xd0) returned 1
	[0201.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf.egmwv")) returned 0x20
	[0201.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.910] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0202.484] SetEvent (hEvent=0xc8) returned 1
	[0202.484] SetEvent (hEvent=0xe4) returned 1
	[0202.484] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0202.491] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0202.759] SetEvent (hEvent=0x14c) returned 1
	[0202.759] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.234] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.258] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x20
	[0203.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x20) returned 1
	[0203.266] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.290] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0203.291] ReadFile (in: hFile=0x17c, lpBuffer=0xc000104600, nNumberOfBytesToRead=0x1044, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000104600*, lpNumberOfBytesRead=0xc0002d5cec*=0x1044, lpOverlapped=0x0) returned 1
	[0203.327] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.332] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.370] SetEvent (hEvent=0x150) returned 1
	[0203.370] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.373] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.409] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.484] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.609] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.611] SetEvent (hEvent=0xe4) returned 1
	[0203.612] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.615] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.627] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.652] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.660] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.678] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.709] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.727] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.735] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.753] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.788] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.807] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.823] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.837] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.859] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.884] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.900] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.912] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.942] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.962] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.975] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0203.991] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0204.017] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0204.036] SetEvent (hEvent=0xe4) returned 1
	[0204.037] SetEvent (hEvent=0x15c) returned 1
	[0204.037] SetEvent (hEvent=0xc8) returned 1
	[0204.037] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x0
	[0204.039] SetEvent (hEvent=0xc8) returned 1
	[0204.039] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x0
	[0204.041] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0204.477] SetEvent (hEvent=0xc8) returned 1
	[0204.477] SetEvent (hEvent=0x15c) returned 1
	[0204.478] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0204.733] SetEvent (hEvent=0xc0) returned 1
	[0204.733] SetEvent (hEvent=0xc8) returned 1
	[0204.733] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0205.245] SetEvent (hEvent=0xc8) returned 1
	[0205.246] SetEvent (hEvent=0xc0) returned 1
	[0205.246] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0205.770] SetEvent (hEvent=0xc8) returned 1
	[0205.770] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.195] SetEvent (hEvent=0xc8) returned 1
	[0206.196] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.199] SetEvent (hEvent=0xc8) returned 1
	[0206.199] SetEvent (hEvent=0xc0) returned 1
	[0206.199] SwitchToThread () returned 1
	[0206.214] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.227] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.244] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.260] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.270] SetEvent (hEvent=0x15c) returned 1
	[0206.270] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.275] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.288] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.312] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.329] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.337] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.364] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.387] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.404] SetEvent (hEvent=0xc0) returned 1
	[0206.404] SetEvent (hEvent=0xc8) returned 1
	[0206.405] SetEvent (hEvent=0xe4) returned 1
	[0206.405] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x0
	[0206.407] SetEvent (hEvent=0xe4) returned 1
	[0206.407] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0x1) returned 0x0
	[0206.409] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0206.756] SetEvent (hEvent=0xe4) returned 1
	[0206.756] SetEvent (hEvent=0xc8) returned 1
	[0206.756] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0207.278] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0207.284] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0207.654] SetEvent (hEvent=0x150) returned 1
	[0207.654] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.001] SetEvent (hEvent=0xe4) returned 1
	[0208.001] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.003] SetEvent (hEvent=0xe4) returned 1
	[0208.003] SetEvent (hEvent=0xc0) returned 1
	[0208.003] SwitchToThread () returned 1
	[0208.004] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.017] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.023] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.045] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.067] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.082] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.090] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.107] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.133] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.159] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.174] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.182] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.254] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.273] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x20
	[0208.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x20) returned 1
	[0208.282] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0208.299] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0208.299] ReadFile (in: hFile=0x174, lpBuffer=0xc00036b800, nNumberOfBytesToRead=0x1526, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00036b800*, lpNumberOfBytesRead=0xc000429cec*=0x1526, lpOverlapped=0x0) returned 1
	[0208.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6900 | out: pbBuffer=0xc0002b6900) returned 1
	[0208.353] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000248c02 | out: pbBuffer=0xc000248c02) returned 1
	[0208.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6940 | out: pbBuffer=0xc0002b6940) returned 1
	[0208.353] SetEvent (hEvent=0x14c) returned 1
	[0208.353] GetFileType (hFile=0x174) returned 0x1
	[0208.354] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001b7ca0*=5414) returned 1
	[0208.354] WriteFile (in: hFile=0x174, lpBuffer=0xc000346000*, nNumberOfBytesToWrite=0x1526, lpNumberOfBytesWritten=0xc0001b7ccc, lpOverlapped=0xc0001b7ce8 | out: lpBuffer=0xc000346000*, lpNumberOfBytesWritten=0xc0001b7ccc*=0x1526, lpOverlapped=0xc0001b7ce8) returned 1
	[0208.354] GetFileType (hFile=0x174) returned 0x1
	[0208.354] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x1526, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001b7ca0*=5414) returned 1
	[0208.354] GetFileType (hFile=0x174) returned 0x1
	[0208.354] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001b7ca0*=5414) returned 1
	[0208.355] WriteFile (in: hFile=0x174, lpBuffer=0xc00032b180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001b7ccc, lpOverlapped=0xc0001b7ce8 | out: lpBuffer=0xc00032b180*, lpNumberOfBytesWritten=0xc0001b7ccc*=0x22a, lpOverlapped=0xc0001b7ce8) returned 1
	[0208.355] GetFileType (hFile=0x174) returned 0x1
	[0208.355] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x1526, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001b7ca0*=5414) returned 1
	[0208.355] CloseHandle (hObject=0x174) returned 1
	[0208.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf.egmwv")) returned 0x20
	[0208.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.372] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.386] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.419] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.444] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.450] SetEvent (hEvent=0x150) returned 1
	[0208.450] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0208.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x20
	[0208.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x20) returned 1
	[0208.454] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0208.482] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0208.482] ReadFile (in: hFile=0xd0, lpBuffer=0xc000068000, nNumberOfBytesToRead=0x5664, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesRead=0xc000429cec*=0x5664, lpOverlapped=0x0) returned 1
	[0208.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0208.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ca | out: pbBuffer=0xc0002b62ca) returned 1
	[0208.513] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000248802 | out: pbBuffer=0xc000248802) returned 1
	[0208.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00024885a | out: pbBuffer=0xc00024885a) returned 1
	[0208.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0208.514] GetFileType (hFile=0xd0) returned 0x1
	[0208.514] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=22116) returned 1
	[0208.514] WriteFile (in: hFile=0xd0, lpBuffer=0xc0002c6000*, nNumberOfBytesToWrite=0x5664, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0002c6000*, lpNumberOfBytesWritten=0xc000455ccc*=0x5664, lpOverlapped=0xc000455ce8) returned 1
	[0208.515] GetFileType (hFile=0xd0) returned 0x1
	[0208.515] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x5664, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=22116) returned 1
	[0208.515] GetFileType (hFile=0xd0) returned 0x1
	[0208.515] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=22116) returned 1
	[0208.516] WriteFile (in: hFile=0xd0, lpBuffer=0xc00015d180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc00015d180*, lpNumberOfBytesWritten=0xc000455ccc*=0x22d, lpOverlapped=0xc000455ce8) returned 1
	[0208.516] GetFileType (hFile=0xd0) returned 0x1
	[0208.516] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x5664, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=22116) returned 1
	[0208.516] CloseHandle (hObject=0xd0) returned 1
	[0208.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf.egmwv")) returned 0x20
	[0208.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.532] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0212.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf")) returned 0x20
	[0212.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF", dwFileAttributes=0x20) returned 1
	[0212.569] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0212.744] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0212.744] ReadFile (in: hFile=0x17c, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x864, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000197cec*=0x864, lpOverlapped=0x0) returned 1
	[0212.751] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414920 | out: pbBuffer=0xc000414920) returned 1
	[0212.751] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00050ba02 | out: pbBuffer=0xc00050ba02) returned 1
	[0212.751] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414960 | out: pbBuffer=0xc000414960) returned 1
	[0212.751] GetFileType (hFile=0x17c) returned 0x1
	[0212.751] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=2148) returned 1
	[0212.751] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001e2000*, nNumberOfBytesToWrite=0x864, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesWritten=0xc000373ccc*=0x864, lpOverlapped=0xc000373ce8) returned 1
	[0212.752] GetFileType (hFile=0x17c) returned 0x1
	[0212.752] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x864, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=2148) returned 1
	[0212.752] GetFileType (hFile=0x17c) returned 0x1
	[0212.752] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=2148) returned 1
	[0212.752] WriteFile (in: hFile=0x17c, lpBuffer=0xc00040f880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc00040f880*, lpNumberOfBytesWritten=0xc000373ccc*=0x224, lpOverlapped=0xc000373ce8) returned 1
	[0212.753] GetFileType (hFile=0x17c) returned 0x1
	[0212.753] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x864, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=2148) returned 1
	[0212.753] CloseHandle (hObject=0x17c) returned 1
	[0212.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf.egmwv")) returned 0x20
	[0212.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.758] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0212.791] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) returned 0x0
	[0212.797] SetEvent (hEvent=0xb0) returned 1
	[0212.797] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0xa40

	[0051.035] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x2a7feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2a7feb0*=0x4c) returned 1
	[0051.035] VirtualQuery (in: lpAddress=0x2a7fed0, lpBuffer=0x2a7fed0, dwLength=0x30 | out: lpBuffer=0x2a7fed0*(BaseAddress=0x2a7f000, AllocationBase=0x2880000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0051.042] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.307] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.358] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.394] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.430] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.464] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.502] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.568] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.605] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.710] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.836] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.899] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.934] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0051.980] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0052.016] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0052.085] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0052.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0054.534] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0054.591] SetEvent (hEvent=0x68) returned 1
	[0054.591] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0054.706] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0054.707] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x70
	[0054.713] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0055.011] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0055.011] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.062] SetEvent (hEvent=0x68) returned 1
	[0055.065] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.204] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0055.205] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0055.364] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0055.364] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.403] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.489] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.538] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.624] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.690] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.729] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.764] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.802] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.863] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0055.906] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0057.371] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0057.406] SetEvent (hEvent=0x5c) returned 1
	[0057.406] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0057.442] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0057.443] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0057.695] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0057.695] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0057.738] SetEvent (hEvent=0x5c) returned 1
	[0057.738] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0057.781] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0057.781] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0058.050] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0058.050] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0058.812] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0058.814] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0058.837] SetEvent (hEvent=0x54) returned 1
	[0058.838] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0058.855] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0058.855] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0059.155] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0059.156] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0059.232] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0059.254] SetEvent (hEvent=0x54) returned 1
	[0059.254] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0059.321] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0059.359] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0059.394] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0059.848] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0060.661] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.087] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.123] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.158] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.193] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.216] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.219] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.222] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.223] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.230] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.232] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.235] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.258] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.269] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.273] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.276] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.280] SetEvent (hEvent=0x54) returned 1
	[0061.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.293] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0061.293] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0061.527] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0061.527] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc000036a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c
	[0061.646] CloseHandle (hObject=0x8c) returned 1
	[0061.646] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.703] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0061.890] SetEvent (hEvent=0x5c) returned 1
	[0061.890] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0062.061] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0062.105] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0062.133] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0062.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.070] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.189] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.201] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.212] SetEvent (hEvent=0x5c) returned 1
	[0063.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.234] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.322] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0063.323] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0063.374] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0063.374] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.444] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.459] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.495] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.544] SetEvent (hEvent=0xac) returned 1
	[0063.544] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.599] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0063.599] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0063.701] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0063.701] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.713] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.808] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.824] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.830] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.832] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.858] SetEvent (hEvent=0x90) returned 1
	[0063.858] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0063.865] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0063.865] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0064.296] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0064.296] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.351] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.376] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.430] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.453] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.560] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.646] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.711] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.726] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.846] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.928] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0064.939] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0064.939] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0065.017] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0065.017] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.075] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.081] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.129] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.166] SetEvent (hEvent=0x5c) returned 1
	[0065.166] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.174] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.178] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.181] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.183] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.183] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.185] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.186] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.187] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.188] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.189] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.190] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.191] SetEvent (hEvent=0x5c) returned 1
	[0065.192] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.192] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0065.192] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0065.350] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0065.350] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.441] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.443] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.445] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.447] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.448] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.449] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.450] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.457] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.545] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.567] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.593] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.625] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.628] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0065.727] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0066.757] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0066.757] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0066.843] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0066.843] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0066.953] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0066.963] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0066.981] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.046] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.335] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.723] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.827] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.902] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.931] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0067.941] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.941] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0067.948] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.948] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0068.043] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0068.083] SetEvent (hEvent=0xac) returned 1
	[0068.086] SetEvent (hEvent=0x68) returned 1
	[0068.088] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.514] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.587] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.587] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0069.626] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.626] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.707] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.749] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.843] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.907] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.945] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0069.992] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0070.010] SetEvent (hEvent=0x68) returned 1
	[0070.010] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0070.064] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0070.163] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0072.142] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0072.374] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0072.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0073.383] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0073.588] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0074.101] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0075.301] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0075.325] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0075.345] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0075.380] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0075.531] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0075.592] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.592] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0076.422] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.423] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0076.992] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0077.743] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0077.851] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0078.012] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0078.178] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0078.322] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0078.472] SetEvent (hEvent=0x68) returned 1
	[0078.473] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0078.842] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0078.970] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0079.073] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0083.686] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0084.044] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0085.430] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0085.739] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0085.866] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0086.074] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0086.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0086.345] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0086.485] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0086.585] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.585] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0086.728] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0086.728] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0086.815] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0086.940] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.940] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0090.765] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0090.765] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0091.163] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0092.531] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0092.656] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0092.819] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0093.058] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0093.278] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0093.356] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0093.509] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0093.653] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0093.742] SetEvent (hEvent=0xac) returned 1
	[0093.742] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0093.916] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0093.916] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0094.055] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0094.055] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0094.233] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0094.312] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0094.349] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0094.399] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0094.474] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0099.101] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0099.398] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0099.689] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0101.438] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0101.611] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0101.679] SetEvent (hEvent=0x5c) returned 1
	[0101.679] SetEvent (hEvent=0xc4) returned 1
	[0101.680] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0101.851] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0101.932] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0102.072] SetEvent (hEvent=0x5c) returned 1
	[0102.072] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0102.238] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0102.239] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0102.553] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0102.554] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0102.759] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0103.052] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0103.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0103.416] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0103.541] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0103.730] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0108.013] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0108.764] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0110.280] SetEvent (hEvent=0xb0) returned 1
	[0110.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0110.492] SetEvent (hEvent=0xb0) returned 1
	[0110.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0110.707] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0110.864] SetEvent (hEvent=0xe4) returned 1
	[0110.864] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0111.272] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0111.439] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0111.440] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0111.925] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0111.925] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0112.140] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0112.263] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0112.422] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0112.532] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0112.532] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0112.629] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0112.629] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0112.777] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0112.924] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0113.068] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0117.089] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0117.353] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0117.611] SetEvent (hEvent=0xe4) returned 1
	[0117.611] SetEvent (hEvent=0xac) returned 1
	[0117.612] SetEvent (hEvent=0xc4) returned 1
	[0117.612] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0117.720] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0117.790] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0117.836] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0117.898] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0117.898] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0118.064] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0118.064] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.136] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.174] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.214] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.250] SetEvent (hEvent=0xc0) returned 1
	[0118.250] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.300] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.336] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.403] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.466] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0118.466] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0118.502] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0118.502] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.595] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002da700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0
	[0118.757] CloseHandle (hObject=0xf0) returned 1
	[0118.757] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.764] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.770] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.787] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002daa80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110
	[0118.790] CloseHandle (hObject=0x110) returned 1
	[0118.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002f880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110
	[0118.794] CloseHandle (hObject=0x110) returned 1
	[0118.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc000036380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110
	[0118.797] CloseHandle (hObject=0x110) returned 1
	[0118.797] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002ba000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128
	[0118.802] CloseHandle (hObject=0x128) returned 1
	[0118.803] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002dae00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c
	[0118.874] CloseHandle (hObject=0x12c) returned 1
	[0118.874] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.915] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.925] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0118.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002ba380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134
	[0118.997] CloseHandle (hObject=0x134) returned 1
	[0118.997] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.035] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.068] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.103] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.146] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0119.146] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0119.179] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0119.179] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.205] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.215] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0119.215] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0119.469] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0119.469] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.515] SetEvent (hEvent=0x15c) returned 1
	[0119.515] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.555] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.605] SetEvent (hEvent=0x15c) returned 1
	[0119.605] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.699] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.843] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.870] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.893] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.896] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.908] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.924] SetEvent (hEvent=0xe4) returned 1
	[0119.924] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0119.926] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0119.926] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0119.933] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0119.933] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0120.924] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0121.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0121.326] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0121.504] SetEvent (hEvent=0x5c) returned 1
	[0121.504] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0121.877] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0122.654] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0122.719] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0122.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0122.853] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0122.923] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0122.987] SetEvent (hEvent=0x108) returned 1
	[0122.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0123.037] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.037] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0127.516] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0127.517] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0127.728] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0127.853] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0127.988] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0128.151] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0128.331] SetEvent (hEvent=0x108) returned 1
	[0128.331] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0128.484] SetEvent (hEvent=0x5c) returned 1
	[0128.484] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0128.562] SetEvent (hEvent=0x5c) returned 1
	[0128.562] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0131.409] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0132.142] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0132.574] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0132.679] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0132.895] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0133.045] SetEvent (hEvent=0x100) returned 1
	[0133.045] SetEvent (hEvent=0x120) returned 1
	[0133.045] SetEvent (hEvent=0xb0) returned 1
	[0133.045] SetEvent (hEvent=0x5c) returned 1
	[0133.045] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0133.306] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0133.488] SetEvent (hEvent=0x5c) returned 1
	[0133.488] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0135.260] SetEvent (hEvent=0x5c) returned 1
	[0135.261] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0135.564] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0135.841] SetEvent (hEvent=0x90) returned 1
	[0135.841] SetEvent (hEvent=0x108) returned 1
	[0135.841] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0136.108] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0136.341] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0136.341] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0136.787] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.787] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0137.129] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0137.268] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0137.463] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0137.463] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0137.862] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0137.862] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0138.075] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0138.388] SetEvent (hEvent=0xac) returned 1
	[0138.388] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0141.648] SetEvent (hEvent=0xac) returned 1
	[0141.648] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0142.266] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0143.580] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0143.580] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0143.890] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0143.890] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0143.918] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0143.918] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0143.958] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0143.958] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0144.031] SetEvent (hEvent=0xc8) returned 1
	[0144.031] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0144.380] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0144.517] SetEvent (hEvent=0x148) returned 1
	[0144.518] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0144.789] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0144.897] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0144.897] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0145.008] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0145.008] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0145.049] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0149.730] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0149.730] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0149.879] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0149.879] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0149.979] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0150.082] SetEvent (hEvent=0xc4) returned 1
	[0150.082] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0150.223] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0150.283] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0150.283] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0150.473] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0150.473] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0150.483] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0150.493] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0150.502] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0150.542] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0153.731] SetEvent (hEvent=0x120) returned 1
	[0153.732] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0154.088] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0154.342] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0155.515] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0155.598] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0155.643] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0155.702] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0155.780] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0155.834] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0155.834] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0156.012] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.012] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0156.074] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0156.759] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0156.759] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0156.957] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.957] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0158.819] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0158.946] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.040] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.072] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.118] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.189] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.257] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.293] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.332] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.371] SetEvent (hEvent=0x100) returned 1
	[0159.371] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.398] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.436] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.438] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.442] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.443] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.444] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.445] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.447] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0159.509] SetEvent (hEvent=0x124) returned 1
	[0159.518] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0160.707] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0160.707] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0160.816] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0160.816] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0160.830] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0160.861] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0160.972] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.010] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.042] SetEvent (hEvent=0x124) returned 1
	[0161.043] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.155] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.225] SetEvent (hEvent=0x124) returned 1
	[0161.225] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.251] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0161.251] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0161.278] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0161.278] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.303] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.369] SetEvent (hEvent=0x124) returned 1
	[0161.369] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.377] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.417] SetEvent (hEvent=0x124) returned 1
	[0161.417] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.449] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.459] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0161.493] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0163.343] SetEvent (hEvent=0x124) returned 1
	[0163.343] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0163.822] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0163.822] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0165.272] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0165.273] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0165.350] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0165.350] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0165.549] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0165.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0165.583] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0165.583] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0165.661] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0165.661] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0165.669] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0165.669] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0168.874] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.874] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0168.917] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0168.953] SetEvent (hEvent=0x148) returned 1
	[0168.954] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.004] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0169.004] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0169.269] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0169.269] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.315] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.355] SetEvent (hEvent=0x148) returned 1
	[0169.355] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.393] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.430] SetEvent (hEvent=0x148) returned 1
	[0169.430] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.472] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0169.472] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0169.591] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0169.591] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.674] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.711] SetEvent (hEvent=0x148) returned 1
	[0169.711] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.751] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.786] SetEvent (hEvent=0x148) returned 1
	[0169.786] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.841] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.879] SetEvent (hEvent=0x148) returned 1
	[0169.879] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.920] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0169.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.032] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.247] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.344] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.445] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.445] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0170.583] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.583] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.672] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.716] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.762] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.762] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0170.799] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0170.931] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0171.062] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.062] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0171.332] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.332] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0171.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0171.451] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0171.515] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.063] SetEvent (hEvent=0x120) returned 1
	[0175.063] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.247] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.345] SetEvent (hEvent=0x100) returned 1
	[0175.345] SetEvent (hEvent=0x54) returned 1
	[0175.345] SetEvent (hEvent=0x84) returned 1
	[0175.346] SetEvent (hEvent=0x144) returned 1
	[0175.346] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.473] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0175.473] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0175.569] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0175.569] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.658] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.754] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.838] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.934] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0175.989] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0176.062] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0176.062] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0179.426] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0179.427] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0179.491] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0179.578] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0179.578] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0179.663] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0179.663] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0179.747] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0179.747] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0179.797] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0179.798] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0179.839] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0179.843] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0179.852] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0181.606] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0181.981] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.080] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.095] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.123] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.127] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.129] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.130] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.134] SetEvent (hEvent=0x124) returned 1
	[0182.134] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.135] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.136] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.138] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.139] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.143] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.144] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.146] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.155] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.156] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.157] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.158] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.159] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.161] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.163] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.165] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.181] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.183] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.191] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.195] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.196] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.201] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.202] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.203] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.204] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.208] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.209] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.223] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.244] SetEvent (hEvent=0x120) returned 1
	[0182.244] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.258] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.264] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.265] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.266] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.267] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.268] SetEvent (hEvent=0x148) returned 1
	[0182.268] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0182.269] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0182.269] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0183.001] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.001] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0183.011] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.011] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0183.013] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.013] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0183.035] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.036] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0183.070] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.070] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0183.085] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.085] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0183.130] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.130] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0183.133] SetEvent (hEvent=0x54) returned 1
	[0183.133] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0183.171] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.171] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0183.174] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.174] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.319] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0184.319] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0184.393] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0184.393] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.404] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.417] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.425] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.458] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.494] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.496] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.498] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.499] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.501] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0184.503] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0186.091] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0186.202] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.525] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.580] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.659] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.666] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.677] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0187.677] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0187.683] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0187.683] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.792] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.864] SetEvent (hEvent=0xac) returned 1
	[0187.865] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.900] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.905] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.910] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.921] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0187.925] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0189.371] SetEvent (hEvent=0x108) returned 1
	[0189.371] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0190.635] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0190.841] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0190.841] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0190.971] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0190.971] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0190.994] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0191.006] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0191.014] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0191.083] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0191.157] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0191.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0191.238] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0192.453] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0192.641] SetEvent (hEvent=0xac) returned 1
	[0193.203] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0193.342] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0193.394] SetEvent (hEvent=0x144) returned 1
	[0193.394] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0193.436] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0193.477] SetEvent (hEvent=0x108) returned 1
	[0193.477] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.075] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.124] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.172] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0194.172] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0194.223] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0194.223] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.259] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.317] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.402] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.434] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.445] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.449] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.453] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0194.858] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0195.263] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0196.541] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0196.541] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.618] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.660] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.703] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.725] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.734] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.751] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0196.751] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0196.819] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0196.819] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.838] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.854] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0196.882] SetEvent (hEvent=0x54) returned 1
	[0196.882] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0197.807] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0197.807] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0197.856] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0197.857] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.119] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.220] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0198.220] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0198.227] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0198.227] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.250] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0198.250] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0198.394] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0198.394] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.417] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.523] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.641] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.660] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0198.660] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0198.666] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0198.666] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.679] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0198.679] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0198.695] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0198.695] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.711] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.727] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.791] SetEvent (hEvent=0xac) returned 1
	[0198.791] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.798] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0198.798] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0198.804] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0198.804] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.852] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.944] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0198.945] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0198.960] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0198.960] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.964] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.993] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0198.996] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.004] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.097] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.100] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.108] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.114] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.120] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.126] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.129] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.131] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.131] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.132] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.134] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.157] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.199] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.199] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.205] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.205] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.235] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.239] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.245] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.247] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.250] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.251] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.252] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.253] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.254] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.255] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.256] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.257] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.291] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.333] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.351] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.366] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.366] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.376] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.376] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.413] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.413] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.416] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.416] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.442] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.442] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.451] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.451] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.471] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.495] SetEvent (hEvent=0x120) returned 1
	[0199.495] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.497] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.499] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.501] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.502] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.502] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.503] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.505] SetEvent (hEvent=0x120) returned 1
	[0199.505] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.507] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.508] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.509] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.511] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.522] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.577] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.585] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.586] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.627] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.633] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.633] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.636] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.636] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.660] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.681] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.701] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.701] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.750] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.750] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.820] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.913] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.913] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0199.915] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.915] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.933] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0199.982] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.000] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.016] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.018] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.019] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.029] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.029] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.064] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.065] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.079] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.099] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.101] SetEvent (hEvent=0x148) returned 1
	[0200.101] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.103] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.105] SetEvent (hEvent=0x148) returned 1
	[0200.106] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.107] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.108] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.110] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.113] SetEvent (hEvent=0x100) returned 1
	[0200.113] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.118] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.124] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.126] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.129] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.132] SetEvent (hEvent=0x100) returned 1
	[0200.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.149] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.150] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.155] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.155] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.166] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.166] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.168] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.168] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.182] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.182] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.190] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.195] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.199] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.200] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.202] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.204] SetEvent (hEvent=0xac) returned 1
	[0200.204] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.205] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.210] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.216] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.218] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.219] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.220] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.220] SetEvent (hEvent=0x120) returned 1
	[0200.221] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.222] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.222] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.227] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.227] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.246] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.284] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.286] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.287] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.287] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.299] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.299] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.328] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.334] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.335] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.336] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.337] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.339] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.343] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.345] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.349] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.354] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.359] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.361] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.365] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.370] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.379] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.382] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.390] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.393] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.395] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.399] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.401] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.404] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.407] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.412] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.413] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.415] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.418] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.420] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.421] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.423] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.424] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.426] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.432] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.435] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.439] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.442] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.448] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.450] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.455] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.458] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.460] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.462] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.464] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.466] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.468] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.470] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.475] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.477] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.481] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.484] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.486] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.501] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.503] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.507] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.510] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.516] SetEvent (hEvent=0xac) returned 1
	[0200.516] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.520] SetEvent (hEvent=0xac) returned 1
	[0200.520] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.522] SetEvent (hEvent=0x100) returned 1
	[0200.522] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.524] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.529] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.531] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.535] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.540] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.542] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.547] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.548] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.551] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.551] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.553] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.553] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.571] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.585] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.586] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.587] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.589] SetEvent (hEvent=0x124) returned 1
	[0200.589] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.590] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.595] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.597] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.602] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.603] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.604] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.606] SetEvent (hEvent=0x120) returned 1
	[0200.606] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.607] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.608] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.610] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.610] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.630] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.650] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.651] SetEvent (hEvent=0x124) returned 1
	[0200.652] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.653] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.654] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.655] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.656] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.657] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.659] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.661] SetEvent (hEvent=0x124) returned 1
	[0200.661] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.670] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.671] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.674] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.675] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.677] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.678] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.680] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.688] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.691] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.693] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.694] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.695] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.698] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.704] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.711] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.714] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.716] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.717] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.721] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.730] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.733] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.735] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.736] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.737] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.739] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.740] SetEvent (hEvent=0x124) returned 1
	[0200.740] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.751] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.753] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.755] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.755] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.756] SetEvent (hEvent=0xac) returned 1
	[0200.756] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.758] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.758] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.760] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.760] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.780] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.796] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.801] SetEvent (hEvent=0x124) returned 1
	[0200.801] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.803] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.804] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.806] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.807] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.808] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.809] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.815] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.820] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.823] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.825] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.827] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.829] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.829] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0200.832] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.832] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.847] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.866] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.995] SetEvent (hEvent=0x120) returned 1
	[0200.995] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.997] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0200.999] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.000] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.001] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.002] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.003] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.004] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.006] SetEvent (hEvent=0x120) returned 1
	[0201.006] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.013] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.017] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.019] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.030] SetEvent (hEvent=0x120) returned 1
	[0201.030] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.033] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.034] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.039] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.039] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.053] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.098] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.099] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.100] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.101] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.107] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.113] SetEvent (hEvent=0x148) returned 1
	[0201.114] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.116] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.118] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.119] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.120] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.121] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.123] SetEvent (hEvent=0x148) returned 1
	[0201.123] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.130] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.135] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.137] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.138] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.139] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.140] SetEvent (hEvent=0xac) returned 1
	[0201.140] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.141] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.141] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.143] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.143] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.163] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.178] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.184] SetEvent (hEvent=0x148) returned 1
	[0201.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.185] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.187] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.189] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.190] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.191] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.192] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.193] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.195] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.201] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.205] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.206] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.208] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.209] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.210] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.214] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.221] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.227] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.228] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.229] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.230] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.231] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.232] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.237] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.243] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.245] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.247] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.248] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.249] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.255] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.261] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.263] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.264] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.265] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.267] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.268] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.269] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.270] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.273] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.287] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.288] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.289] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.291] SetEvent (hEvent=0x120) returned 1
	[0201.291] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.293] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.293] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.296] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.296] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.315] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.327] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.333] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.333] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.337] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.337] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.363] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.368] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.373] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.373] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.377] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.377] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.407] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.449] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.496] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.511] SetEvent (hEvent=0xac) returned 1
	[0201.511] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.514] SetEvent (hEvent=0x120) returned 1
	[0201.514] SetEvent (hEvent=0x100) returned 1
	[0201.514] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.516] SetEvent (hEvent=0x120) returned 1
	[0201.516] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.521] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.522] SetEvent (hEvent=0x108) returned 1
	[0201.522] SetEvent (hEvent=0xc4) returned 1
	[0201.522] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.527] SetEvent (hEvent=0x108) returned 1
	[0201.527] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.530] SetEvent (hEvent=0x124) returned 1
	[0201.530] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.533] SetEvent (hEvent=0x124) returned 1
	[0201.533] SetEvent (hEvent=0xc8) returned 1
	[0201.533] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.536] SetEvent (hEvent=0x124) returned 1
	[0201.536] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.540] SetEvent (hEvent=0x84) returned 1
	[0201.540] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.542] SetEvent (hEvent=0x68) returned 1
	[0201.542] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.544] SetEvent (hEvent=0xf8) returned 1
	[0201.544] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.546] SetEvent (hEvent=0xb0) returned 1
	[0201.546] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.548] SetEvent (hEvent=0xb0) returned 1
	[0201.548] SetEvent (hEvent=0x5c) returned 1
	[0201.548] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.552] SetEvent (hEvent=0x104) returned 1
	[0201.553] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.566] SetEvent (hEvent=0xc0) returned 1
	[0201.566] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.568] SetEvent (hEvent=0x90) returned 1
	[0201.568] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.571] SetEvent (hEvent=0x60) returned 1
	[0201.571] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.573] SetEvent (hEvent=0x60) returned 1
	[0201.573] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.576] SetEvent (hEvent=0xe4) returned 1
	[0201.576] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.578] SetEvent (hEvent=0x15c) returned 1
	[0201.578] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.580] SetEvent (hEvent=0x150) returned 1
	[0201.580] SetEvent (hEvent=0x14c) returned 1
	[0201.581] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.584] SetEvent (hEvent=0x140) returned 1
	[0201.584] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.585] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.588] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.590] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.592] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.593] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.594] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.595] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.596] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.597] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.598] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.599] SetEvent (hEvent=0x140) returned 1
	[0201.600] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.601] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.601] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.616] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.621] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.635] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.636] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.637] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.638] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.639] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.640] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.642] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.644] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.646] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.653] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.660] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.661] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.669] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.674] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.676] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.677] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.678] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.682] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.682] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.699] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.716] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.717] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.724] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.731] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.733] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.740] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.745] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.750] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.756] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.761] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.764] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.768] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.769] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.774] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.781] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.788] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.793] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.805] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.811] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.816] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.823] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.827] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.834] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.838] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.845] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.847] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.858] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.863] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.872] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.878] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.888] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.892] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.899] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.904] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.912] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.917] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.923] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.928] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.930] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.931] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.932] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.933] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0201.936] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.936] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.954] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.970] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.976] SetEvent (hEvent=0x14c) returned 1
	[0201.976] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.979] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.981] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.982] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.983] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.985] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.986] SetEvent (hEvent=0x14c) returned 1
	[0201.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.992] SetEvent (hEvent=0x14c) returned 1
	[0201.992] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0201.995] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.000] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.002] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.005] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.007] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.008] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.010] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.010] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.012] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.013] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.027] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.044] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.049] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.055] SetEvent (hEvent=0x15c) returned 1
	[0202.055] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.067] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.069] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.071] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.098] SetEvent (hEvent=0x148) returned 1
	[0202.099] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.101] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.101] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.103] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.103] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.105] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.121] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.128] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.133] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.134] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.135] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.137] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.138] SetEvent (hEvent=0x150) returned 1
	[0202.138] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.140] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.140] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.141] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.142] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.159] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.164] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.171] SetEvent (hEvent=0x15c) returned 1
	[0202.171] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.172] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.175] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.176] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.177] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.178] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.180] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.182] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.183] SetEvent (hEvent=0x15c) returned 1
	[0202.183] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.190] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.195] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.200] SetEvent (hEvent=0x150) returned 1
	[0202.200] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.201] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.201] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.204] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.204] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.219] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.235] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.236] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.237] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.238] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.243] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.249] SetEvent (hEvent=0x15c) returned 1
	[0202.249] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.251] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.253] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.254] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.255] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.256] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.258] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.260] SetEvent (hEvent=0x15c) returned 1
	[0202.260] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.267] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.272] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.278] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.281] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.281] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.285] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.285] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.299] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.315] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.321] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.327] SetEvent (hEvent=0x14c) returned 1
	[0202.327] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.329] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.331] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.332] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.333] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.334] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.336] SetEvent (hEvent=0x14c) returned 1
	[0202.336] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.338] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.343] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.344] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.345] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.346] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.347] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.350] SetEvent (hEvent=0x14c) returned 1
	[0202.350] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.353] SetEvent (hEvent=0x14c) returned 1
	[0202.353] SetEvent (hEvent=0x15c) returned 1
	[0202.353] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.362] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.368] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.370] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.375] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.376] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.378] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.380] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.380] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.382] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.382] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.404] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.419] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.425] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.427] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.429] SetEvent (hEvent=0x14c) returned 1
	[0202.429] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.430] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.430] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.433] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.433] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.447] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.463] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.464] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.465] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.474] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.482] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.486] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.488] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.491] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.494] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.494] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.497] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.497] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.512] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.527] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.528] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.529] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.530] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.531] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.532] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.533] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.540] SetEvent (hEvent=0xe4) returned 1
	[0202.540] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.547] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.548] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.551] SetEvent (hEvent=0x14c) returned 1
	[0202.551] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.553] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.553] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.555] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.555] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.571] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.586] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.587] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.589] SetEvent (hEvent=0xe4) returned 1
	[0202.589] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.590] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.595] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.600] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.602] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.603] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.604] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.605] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.606] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.608] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.610] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.615] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.620] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.621] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.622] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.623] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.624] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.634] SetEvent (hEvent=0x150) returned 1
	[0202.634] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.636] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.641] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.646] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.649] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.650] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.651] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.652] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.653] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.654] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.660] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.667] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.668] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.670] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.674] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.675] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.677] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.679] SetEvent (hEvent=0xe4) returned 1
	[0202.679] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.687] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.693] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.694] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.697] SetEvent (hEvent=0x150) returned 1
	[0202.697] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.699] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.699] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.702] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.702] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.717] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.734] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.736] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.737] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.738] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.740] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.755] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.758] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.761] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.764] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.768] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.768] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.771] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.771] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.787] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.803] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.808] SetEvent (hEvent=0x15c) returned 1
	[0202.808] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.813] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.815] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.817] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.818] SetEvent (hEvent=0x150) returned 1
	[0202.818] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.820] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.820] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.822] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.822] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.838] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.859] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.866] SetEvent (hEvent=0x15c) returned 1
	[0202.866] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.872] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.873] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.876] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.878] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.878] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0202.881] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.881] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.897] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.986] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.992] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.994] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.997] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.998] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0202.999] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.000] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.001] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.006] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.013] SetEvent (hEvent=0x15c) returned 1
	[0203.013] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.014] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.017] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.018] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.019] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.020] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.023] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.025] SetEvent (hEvent=0x15c) returned 1
	[0203.025] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.031] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.036] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.037] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.038] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.039] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.040] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.041] SetEvent (hEvent=0x148) returned 1
	[0203.041] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.042] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0203.042] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0203.044] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0203.044] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.064] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.076] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.081] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.087] SetEvent (hEvent=0x15c) returned 1
	[0203.087] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.090] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.145] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.146] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.147] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.148] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.149] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.151] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.152] SetEvent (hEvent=0x15c) returned 1
	[0203.152] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.163] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.164] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.165] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.166] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.167] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.168] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.170] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.171] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.173] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.175] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.180] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.182] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.183] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.186] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.191] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.193] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.194] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.195] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.196] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.203] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.208] SetEvent (hEvent=0xe4) returned 1
	[0203.209] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.211] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.213] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.214] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.215] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.217] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.218] SetEvent (hEvent=0xe4) returned 1
	[0203.219] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.225] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.227] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.228] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.229] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.230] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.232] SetEvent (hEvent=0xe4) returned 1
	[0203.232] SetEvent (hEvent=0x60) returned 1
	[0203.232] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.234] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.239] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.245] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.247] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.248] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.249] SetEvent (hEvent=0xc8) returned 1
	[0203.249] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.251] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.257] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.259] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.260] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.261] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.262] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.263] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.264] SetEvent (hEvent=0xc0) returned 1
	[0203.265] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.270] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.271] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.272] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.273] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.275] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.277] SetEvent (hEvent=0x90) returned 1
	[0203.277] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.285] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.286] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.287] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.288] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.289] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.290] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.294] SetEvent (hEvent=0x90) returned 1
	[0203.295] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.296] SetEvent (hEvent=0x104) returned 1
	[0203.296] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.298] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.299] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.303] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.329] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.333] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.347] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.353] SetEvent (hEvent=0xc0) returned 1
	[0203.353] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.357] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.359] SetEvent (hEvent=0xc0) returned 1
	[0203.359] SetEvent (hEvent=0xe4) returned 1
	[0203.359] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.365] SetEvent (hEvent=0xc0) returned 1
	[0203.365] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.367] SetEvent (hEvent=0x148) returned 1
	[0203.368] SetEvent (hEvent=0x60) returned 1
	[0203.368] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.371] SetEvent (hEvent=0x60) returned 1
	[0203.371] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.378] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.380] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.381] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.397] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.403] SetEvent (hEvent=0x60) returned 1
	[0203.403] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.413] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.414] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.415] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.416] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.417] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.418] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.421] SetEvent (hEvent=0xe4) returned 1
	[0203.421] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.426] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.432] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.433] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.435] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.436] SetEvent (hEvent=0xc0) returned 1
	[0203.436] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.438] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0203.438] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0203.440] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0203.440] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.456] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.473] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.482] SetEvent (hEvent=0x60) returned 1
	[0203.482] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.484] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.485] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.488] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.489] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.490] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.491] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.494] SetEvent (hEvent=0x90) returned 1
	[0203.494] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.503] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.508] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.509] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.511] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.517] SetEvent (hEvent=0x150) returned 1
	[0203.517] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.518] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0203.518] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0203.521] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0203.521] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.542] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.555] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.561] SetEvent (hEvent=0xe4) returned 1
	[0203.561] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.563] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.564] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.566] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.566] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.567] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.569] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.570] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.572] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.573] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.581] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.586] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.588] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.590] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.591] SetEvent (hEvent=0x90) returned 1
	[0203.591] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.592] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0203.592] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0203.594] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0203.594] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.611] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.628] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.629] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.631] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.633] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.634] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.637] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.645] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.650] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.652] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.652] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.655] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.655] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.657] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.658] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.659] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.665] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.670] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.671] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.672] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.675] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.676] SetEvent (hEvent=0xc0) returned 1
	[0203.676] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.679] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.685] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.690] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.691] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.693] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.694] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.695] SetEvent (hEvent=0x150) returned 1
	[0203.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.698] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0203.698] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0203.699] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0203.699] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.720] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.725] SetEvent (hEvent=0x60) returned 1
	[0203.726] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.727] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.729] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.730] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.731] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.732] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.733] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.735] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.740] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.745] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.749] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.750] SetEvent (hEvent=0x150) returned 1
	[0203.750] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.752] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.754] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.760] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.766] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.768] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.769] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.770] SetEvent (hEvent=0x90) returned 1
	[0203.771] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.779] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.787] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.789] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.791] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.792] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.793] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.794] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.800] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.806] SetEvent (hEvent=0x60) returned 1
	[0203.806] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.807] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.809] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.810] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.811] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.812] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.813] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.815] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.817] SetEvent (hEvent=0x60) returned 1
	[0203.817] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.823] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.830] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.831] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.832] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.833] SetEvent (hEvent=0x90) returned 1
	[0203.833] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.834] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0203.834] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0203.836] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0203.836] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.854] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.870] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.872] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.877] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.883] SetEvent (hEvent=0x60) returned 1
	[0203.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.886] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.886] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.888] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.888] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.889] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.890] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0203.894] SetEvent (hEvent=0x60) returned 1
	[0203.911] SetEvent (hEvent=0x60) returned 1
	[0203.970] SetEvent (hEvent=0x60) returned 1
	[0203.986] SetEvent (hEvent=0x60) returned 1
	[0204.001] SetEvent (hEvent=0x90) returned 1
	[0204.031] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.031] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.035] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.173] SetEvent (hEvent=0x90) returned 1
	[0204.192] SetEvent (hEvent=0xc0) returned 1
	[0204.193] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.194] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.196] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.285] SetEvent (hEvent=0xc8) returned 1
	[0204.305] SetEvent (hEvent=0x150) returned 1
	[0204.306] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.306] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.308] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.353] SetEvent (hEvent=0xc8) returned 1
	[0204.364] SetEvent (hEvent=0xc8) returned 1
	[0204.382] SetEvent (hEvent=0x90) returned 1
	[0204.383] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.383] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.386] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.460] SetEvent (hEvent=0xc8) returned 1
	[0204.486] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.486] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.575] SetEvent (hEvent=0x150) returned 1
	[0204.576] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.576] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.579] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.638] SetEvent (hEvent=0xc0) returned 1
	[0204.653] SetEvent (hEvent=0x90) returned 1
	[0204.656] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.656] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.659] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.715] SetEvent (hEvent=0xc0) returned 1
	[0204.739] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.739] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.744] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.786] SetEvent (hEvent=0xc8) returned 1
	[0204.796] SetEvent (hEvent=0xc8) returned 1
	[0204.800] SetEvent (hEvent=0xc8) returned 1
	[0204.817] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0204.817] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0204.821] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0204.866] SetEvent (hEvent=0xc8) returned 1
	[0204.876] SetEvent (hEvent=0xc8) returned 1
	[0204.893] SetEvent (hEvent=0x90) returned 1
	[0204.915] SetEvent (hEvent=0x15c) returned 1
	[0205.017] SetEvent (hEvent=0xc8) returned 1
	[0205.062] SetEvent (hEvent=0x15c) returned 1
	[0205.063] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.063] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.066] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.155] SetEvent (hEvent=0x15c) returned 1
	[0205.160] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.160] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.205] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.228] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.228] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.232] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.281] SetEvent (hEvent=0xc0) returned 1
	[0205.292] SetEvent (hEvent=0xc0) returned 1
	[0205.294] SetEvent (hEvent=0xc0) returned 1
	[0205.307] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.307] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.310] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.354] SetEvent (hEvent=0xc0) returned 1
	[0205.369] SetEvent (hEvent=0xc0) returned 1
	[0205.379] SetEvent (hEvent=0x15c) returned 1
	[0205.399] SetEvent (hEvent=0x150) returned 1
	[0205.400] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.400] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.414] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.444] SetEvent (hEvent=0xc0) returned 1
	[0205.454] SetEvent (hEvent=0xc0) returned 1
	[0205.489] SetEvent (hEvent=0x90) returned 1
	[0205.536] SetEvent (hEvent=0xc0) returned 1
	[0205.614] SetEvent (hEvent=0xc0) returned 1
	[0205.633] SetEvent (hEvent=0x15c) returned 1
	[0205.654] SetEvent (hEvent=0x150) returned 1
	[0205.656] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.656] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.658] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.682] SetEvent (hEvent=0xc0) returned 1
	[0205.690] SetEvent (hEvent=0xc0) returned 1
	[0205.725] SetEvent (hEvent=0x90) returned 1
	[0205.727] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.727] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.728] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.813] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.813] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.817] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.860] SetEvent (hEvent=0xc8) returned 1
	[0205.879] SetEvent (hEvent=0xc8) returned 1
	[0205.890] SetEvent (hEvent=0xc8) returned 1
	[0205.907] SetEvent (hEvent=0x15c) returned 1
	[0205.909] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.909] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0205.911] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.972] SetEvent (hEvent=0xc8) returned 1
	[0205.990] SetEvent (hEvent=0x150) returned 1
	[0206.052] SetEvent (hEvent=0xc8) returned 1
	[0206.125] SetEvent (hEvent=0xc8) returned 1
	[0206.144] SetEvent (hEvent=0xc8) returned 1
	[0206.181] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.181] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.183] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.215] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.216] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.219] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.258] SetEvent (hEvent=0x60) returned 1
	[0206.268] SetEvent (hEvent=0x60) returned 1
	[0206.270] SetEvent (hEvent=0x60) returned 1
	[0206.282] SetEvent (hEvent=0x15c) returned 1
	[0206.284] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.284] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.287] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.323] SetEvent (hEvent=0x60) returned 1
	[0206.337] SetEvent (hEvent=0x60) returned 1
	[0206.360] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.360] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.363] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.399] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.399] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.403] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.436] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.436] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.440] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.481] SetEvent (hEvent=0xe4) returned 1
	[0206.488] SetEvent (hEvent=0xe4) returned 1
	[0206.504] SetEvent (hEvent=0x15c) returned 1
	[0206.565] SetEvent (hEvent=0xe4) returned 1
	[0206.641] SetEvent (hEvent=0xe4) returned 1
	[0206.676] SetEvent (hEvent=0x15c) returned 1
	[0206.709] SetEvent (hEvent=0xe4) returned 1
	[0206.718] SetEvent (hEvent=0xe4) returned 1
	[0206.737] SetEvent (hEvent=0x15c) returned 1
	[0206.764] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.764] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.767] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.818] SetEvent (hEvent=0xc8) returned 1
	[0206.819] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.819] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.821] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.879] SetEvent (hEvent=0x150) returned 1
	[0206.884] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.885] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.888] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.933] SetEvent (hEvent=0xc8) returned 1
	[0206.943] SetEvent (hEvent=0xc8) returned 1
	[0206.960] SetEvent (hEvent=0x90) returned 1
	[0206.961] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.961] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0206.964] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.237] SetEvent (hEvent=0x15c) returned 1
	[0207.245] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.245] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0207.247] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.306] SetEvent (hEvent=0xc0) returned 1
	[0207.360] SetEvent (hEvent=0xc0) returned 1
	[0207.377] SetEvent (hEvent=0x150) returned 1
	[0207.447] SetEvent (hEvent=0xc0) returned 1
	[0207.463] SetEvent (hEvent=0x90) returned 1
	[0207.480] SetEvent (hEvent=0x15c) returned 1
	[0207.522] SetEvent (hEvent=0xc0) returned 1
	[0207.558] SetEvent (hEvent=0x150) returned 1
	[0207.560] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.560] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0207.562] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.600] SetEvent (hEvent=0xc0) returned 1
	[0207.610] SetEvent (hEvent=0x150) returned 1
	[0207.611] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.611] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0207.613] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.648] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.648] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0207.652] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.668] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.668] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0207.670] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.740] SetEvent (hEvent=0xe4) returned 1
	[0207.810] SetEvent (hEvent=0xe4) returned 1
	[0207.826] SetEvent (hEvent=0x150) returned 1
	[0207.827] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.827] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0207.829] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.868] SetEvent (hEvent=0xe4) returned 1
	[0207.879] SetEvent (hEvent=0xe4) returned 1
	[0207.895] SetEvent (hEvent=0xe4) returned 1
	[0207.953] SetEvent (hEvent=0xe4) returned 1
	[0207.969] SetEvent (hEvent=0xe4) returned 1
	[0207.994] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.994] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0207.998] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.038] SetEvent (hEvent=0x60) returned 1
	[0208.089] SetEvent (hEvent=0x60) returned 1
	[0208.106] SetEvent (hEvent=0x60) returned 1
	[0208.146] SetEvent (hEvent=0x150) returned 1
	[0208.147] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.147] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.149] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.181] SetEvent (hEvent=0x60) returned 1
	[0208.241] SetEvent (hEvent=0x150) returned 1
	[0208.248] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.248] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.252] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.282] SetEvent (hEvent=0xc0) returned 1
	[0208.286] SetEvent (hEvent=0xc0) returned 1
	[0208.287] SetEvent (hEvent=0xe4) returned 1
	[0208.298] SetEvent (hEvent=0xc8) returned 1
	[0208.312] SetEvent (hEvent=0x148) returned 1
	[0208.327] SetEvent (hEvent=0x14c) returned 1
	[0208.373] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.374] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.376] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.408] SetEvent (hEvent=0x150) returned 1
	[0208.418] SetEvent (hEvent=0x60) returned 1
	[0208.443] SetEvent (hEvent=0x60) returned 1
	[0208.452] SetEvent (hEvent=0x60) returned 1
	[0208.452] SetEvent (hEvent=0x15c) returned 1
	[0208.480] SetEvent (hEvent=0xc0) returned 1
	[0208.496] SetEvent (hEvent=0x5c) returned 1
	[0208.506] SetEvent (hEvent=0xb0) returned 1
	[0208.534] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.534] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.537] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.569] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.569] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.572] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.604] SetEvent (hEvent=0x5c) returned 1
	[0208.610] SetEvent (hEvent=0x5c) returned 1
	[0208.638] SetEvent (hEvent=0x5c) returned 1
	[0208.663] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.664] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.667] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.701] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.701] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.712] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.748] SetEvent (hEvent=0x150) returned 1
	[0208.801] SetEvent (hEvent=0x150) returned 1
	[0208.825] SetEvent (hEvent=0x150) returned 1
	[0208.836] SetEvent (hEvent=0x90) returned 1
	[0208.876] SetEvent (hEvent=0x150) returned 1
	[0208.912] SetEvent (hEvent=0x15c) returned 1
	[0208.914] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.914] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.915] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0208.939] SetEvent (hEvent=0x150) returned 1
	[0208.963] SetEvent (hEvent=0x15c) returned 1
	[0208.965] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0208.965] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0208.970] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.023] SetEvent (hEvent=0x5c) returned 1
	[0209.127] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0209.127] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0209.130] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.174] SetEvent (hEvent=0x5c) returned 1
	[0209.184] SetEvent (hEvent=0x5c) returned 1
	[0209.201] SetEvent (hEvent=0x90) returned 1
	[0209.222] SetEvent (hEvent=0x15c) returned 1
	[0209.332] SetEvent (hEvent=0x5c) returned 1
	[0209.380] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0209.380] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0209.383] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.462] SetEvent (hEvent=0x150) returned 1
	[0209.487] SetEvent (hEvent=0x148) returned 1
	[0209.510] SetEvent (hEvent=0x90) returned 1
	[0209.545] SetEvent (hEvent=0x150) returned 1
	[0209.560] SetEvent (hEvent=0x150) returned 1
	[0209.582] SetEvent (hEvent=0x90) returned 1
	[0209.585] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0209.585] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0209.589] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.650] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0209.650] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0209.652] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.790] SetEvent (hEvent=0x15c) returned 1
	[0209.791] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0209.793] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0209.795] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.843] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0209.843] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0209.846] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.895] SetEvent (hEvent=0xc0) returned 1
	[0209.912] SetEvent (hEvent=0xc0) returned 1
	[0209.971] SetEvent (hEvent=0xc0) returned 1
	[0209.988] SetEvent (hEvent=0xc0) returned 1
	[0210.046] SetEvent (hEvent=0xc0) returned 1
	[0210.070] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.070] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.073] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.129] SetEvent (hEvent=0x150) returned 1
	[0210.212] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.212] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.216] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.245] SetEvent (hEvent=0x148) returned 1
	[0210.262] SetEvent (hEvent=0x15c) returned 1
	[0210.263] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.263] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.266] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.305] SetEvent (hEvent=0x148) returned 1
	[0210.315] SetEvent (hEvent=0x15c) returned 1
	[0210.316] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.316] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.318] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.380] SetEvent (hEvent=0x148) returned 1
	[0210.396] SetEvent (hEvent=0x148) returned 1
	[0210.425] SetEvent (hEvent=0x90) returned 1
	[0210.475] SetEvent (hEvent=0x148) returned 1
	[0210.492] SetEvent (hEvent=0x90) returned 1
	[0210.493] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.493] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.495] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.541] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.541] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.544] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.578] SetEvent (hEvent=0xe4) returned 1
	[0210.594] SetEvent (hEvent=0x5c) returned 1
	[0210.635] SetEvent (hEvent=0xe4) returned 1
	[0210.653] SetEvent (hEvent=0xe4) returned 1
	[0210.670] SetEvent (hEvent=0x90) returned 1
	[0210.672] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.672] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.674] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.716] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.716] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.719] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.757] SetEvent (hEvent=0xc0) returned 1
	[0210.830] SetEvent (hEvent=0x90) returned 1
	[0210.831] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.831] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.834] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.873] SetEvent (hEvent=0xc0) returned 1
	[0210.901] SetEvent (hEvent=0xc0) returned 1
	[0210.916] SetEvent (hEvent=0x148) returned 1
	[0210.944] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.944] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.949] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.985] SetEvent (hEvent=0x150) returned 1
	[0210.989] SetEvent (hEvent=0x90) returned 1
	[0210.990] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.990] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0210.993] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.031] SetEvent (hEvent=0x150) returned 1
	[0211.038] SetEvent (hEvent=0x90) returned 1
	[0211.080] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.080] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.084] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.115] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.115] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.118] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.161] SetEvent (hEvent=0xe4) returned 1
	[0211.177] SetEvent (hEvent=0x150) returned 1
	[0211.328] SetEvent (hEvent=0xe4) returned 1
	[0211.329] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.330] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.332] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.382] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.382] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.384] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.430] SetEvent (hEvent=0xe4) returned 1
	[0211.457] SetEvent (hEvent=0x148) returned 1
	[0211.459] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.459] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.461] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.503] SetEvent (hEvent=0xe4) returned 1
	[0211.544] SetEvent (hEvent=0xe4) returned 1
	[0211.563] SetEvent (hEvent=0xe4) returned 1
	[0211.616] SetEvent (hEvent=0xe4) returned 1
	[0211.638] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.638] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.640] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.680] SetEvent (hEvent=0x150) returned 1
	[0211.690] SetEvent (hEvent=0x150) returned 1
	[0211.692] SetEvent (hEvent=0x150) returned 1
	[0211.705] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.705] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.708] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.752] SetEvent (hEvent=0x150) returned 1
	[0211.762] SetEvent (hEvent=0x150) returned 1
	[0211.764] SetEvent (hEvent=0x150) returned 1
	[0211.776] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.776] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.779] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.818] SetEvent (hEvent=0x150) returned 1
	[0211.860] SetEvent (hEvent=0x5c) returned 1
	[0211.866] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.866] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.869] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.907] SetEvent (hEvent=0x150) returned 1
	[0211.916] SetEvent (hEvent=0x150) returned 1
	[0211.938] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.938] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0211.941] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.992] SetEvent (hEvent=0x15c) returned 1
	[0211.995] SetEvent (hEvent=0x15c) returned 1
	[0212.007] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.007] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.010] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.051] SetEvent (hEvent=0x15c) returned 1
	[0212.062] SetEvent (hEvent=0x15c) returned 1
	[0212.079] SetEvent (hEvent=0x15c) returned 1
	[0212.135] SetEvent (hEvent=0x15c) returned 1
	[0212.157] SetEvent (hEvent=0x15c) returned 1
	[0212.183] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.183] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.290] SetEvent (hEvent=0x15c) returned 1
	[0212.300] SetEvent (hEvent=0x150) returned 1
	[0212.301] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.301] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.303] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.368] SetEvent (hEvent=0x148) returned 1
	[0212.402] SetEvent (hEvent=0x5c) returned 1
	[0212.483] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.483] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.489] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.523] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.523] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.526] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.526] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.558] SetEvent (hEvent=0x15c) returned 1
	[0212.558] SetEvent (hEvent=0x148) returned 1
	[0212.558] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.560] SetEvent (hEvent=0xc0) returned 1
	[0212.560] SetEvent (hEvent=0x90) returned 1
	[0212.560] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.563] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.564] SetEvent (hEvent=0x14c) returned 1
	[0212.564] SetEvent (hEvent=0x60) returned 1
	[0212.564] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.567] SetEvent (hEvent=0x14c) returned 1
	[0212.567] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.570] SetEvent (hEvent=0xb0) returned 1
	[0212.570] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.573] SetEvent (hEvent=0xc8) returned 1
	[0212.573] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.574] SetEvent (hEvent=0x104) returned 1
	[0212.575] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.577] SetEvent (hEvent=0x104) returned 1
	[0212.577] SetEvent (hEvent=0xf8) returned 1
	[0212.577] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.579] SetEvent (hEvent=0xf8) returned 1
	[0212.579] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.582] SetEvent (hEvent=0x68) returned 1
	[0212.582] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.586] SetEvent (hEvent=0x84) returned 1
	[0212.586] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.588] SetEvent (hEvent=0x124) returned 1
	[0212.588] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.591] SetEvent (hEvent=0x108) returned 1
	[0212.591] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.593] SetEvent (hEvent=0x120) returned 1
	[0212.594] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.596] SetEvent (hEvent=0xc4) returned 1
	[0212.596] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.598] SetEvent (hEvent=0x144) returned 1
	[0212.598] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.600] SetEvent (hEvent=0xac) returned 1
	[0212.601] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.604] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.606] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.608] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.609] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.612] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.615] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.617] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.618] SetEvent (hEvent=0x100) returned 1
	[0212.618] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.619] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.619] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.634] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.634] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.639] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.652] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.653] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.654] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.655] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.656] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.657] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.658] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.659] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.666] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.672] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.676] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.676] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.679] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.679] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.694] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.714] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.715] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.717] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.723] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.728] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.734] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.741] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.743] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.749] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.755] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.757] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.759] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.759] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.760] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.760] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.777] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.798] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.802] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.814] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.819] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.822] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.823] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.832] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.841] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.847] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.861] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.867] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.870] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.874] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.874] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.877] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.877] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.900] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.920] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.925] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.926] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.929] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.929] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.931] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.931] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.948] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.963] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.964] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.970] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.975] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.978] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.980] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.982] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.984] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0212.985] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.985] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0212.988] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.988] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.003] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.019] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.020] SetEvent (hEvent=0xc4) returned 1
	[0213.020] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.022] SetEvent (hEvent=0xc4) returned 1
	[0213.022] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.027] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.032] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.033] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.035] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.035] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0213.038] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.038] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.058] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.069] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.071] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.075] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.080] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.083] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.085] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.086] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.087] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.089] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.096] SetEvent (hEvent=0xc4) returned 1
	[0213.096] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.101] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.102] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.103] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.104] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.105] SetEvent (hEvent=0xe4) returned 1
	[0213.106] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.107] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.107] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0213.109] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.109] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.128] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.144] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.149] SetEvent (hEvent=0xc4) returned 1
	[0213.150] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.152] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.156] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.158] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.159] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.161] SetEvent (hEvent=0xc4) returned 1
	[0213.161] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.168] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.172] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.173] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.175] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.177] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.178] SetEvent (hEvent=0x90) returned 1
	[0213.178] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.181] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.188] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.194] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.196] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.198] SetEvent (hEvent=0xac) returned 1
	[0213.199] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.200] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.200] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0213.202] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.202] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.206] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.220] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.225] SetEvent (hEvent=0xc4) returned 1
	[0213.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.228] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.229] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.230] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.231] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.232] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.233] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.235] SetEvent (hEvent=0xc4) returned 1
	[0213.235] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.241] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.247] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.250] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.252] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.254] SetEvent (hEvent=0xc4) returned 1
	[0213.254] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.263] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.270] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.351] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.354] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.356] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.357] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.357] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0213.360] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.360] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.374] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.395] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.403] SetEvent (hEvent=0x144) returned 1
	[0213.403] SetEvent (hEvent=0xc4) returned 1
	[0213.403] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.405] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.407] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.408] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.412] SetEvent (hEvent=0xc4) returned 1
	[0213.412] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.421] SetEvent (hEvent=0x120) returned 1
	[0213.422] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.423] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.424] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.426] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.427] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.428] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.430] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.430] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.435] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.440] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.442] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.450] SetEvent (hEvent=0xe4) returned 1
	[0213.451] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.452] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.467] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.467] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.468] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.469] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.475] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.477] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.479] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.480] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.484] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.485] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.487] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.487] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.489] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.511] SetEvent (hEvent=0x108) returned 1
	[0213.512] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.553] SetEvent (hEvent=0x108) returned 1
	[0213.553] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.555] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.556] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.561] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.566] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.568] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.568] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.570] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.570] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0213.573] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.573] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.588] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.605] SetEvent (hEvent=0x124) returned 1
	[0213.605] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.607] SetEvent (hEvent=0x68) returned 1
	[0213.607] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.608] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.610] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.611] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.618] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.636] SetEvent (hEvent=0x68) returned 1
	[0213.636] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.644] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.652] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.656] SetEvent (hEvent=0xc4) returned 1
	[0213.656] SetEvent (hEvent=0x68) returned 1
	[0213.656] SetEvent (hEvent=0x84) returned 1
	[0213.656] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.660] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.663] SetEvent (hEvent=0x90) returned 1
	[0213.663] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.665] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.667] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.668] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.669] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.671] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.676] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.681] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.684] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.686] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.711] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.713] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.715] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.715] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0213.718] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.718] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.733] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.757] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.758] SetEvent (hEvent=0x108) returned 1
	[0213.758] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.760] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.761] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.762] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.764] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.767] SetEvent (hEvent=0x144) returned 1
	[0213.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.772] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.774] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.775] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.776] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.778] SetEvent (hEvent=0x144) returned 1
	[0213.778] SetEvent (hEvent=0x108) returned 1
	[0213.778] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.781] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.791] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.792] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.794] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.802] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.802] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0213.804] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.804] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.820] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.845] SetEvent (hEvent=0x108) returned 1
	[0213.845] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.857] SetEvent (hEvent=0x108) returned 1
	[0213.857] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.864] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.865] SetEvent (hEvent=0x124) returned 1
	[0213.865] SetEvent (hEvent=0x90) returned 1
	[0213.865] SetEvent (hEvent=0x84) returned 1
	[0213.865] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.869] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.871] SetEvent (hEvent=0x144) returned 1
	[0213.871] SetEvent (hEvent=0x90) returned 1
	[0213.871] SetEvent (hEvent=0x68) returned 1
	[0213.871] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.875] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.879] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.881] SetEvent (hEvent=0x68) returned 1
	[0213.881] SetEvent (hEvent=0x90) returned 1
	[0213.881] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.885] SetEvent (hEvent=0x68) returned 1
	[0213.885] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.887] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.888] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.890] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.891] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.892] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.893] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.894] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.895] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.896] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.902] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.903] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.904] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.905] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.907] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.909] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.910] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.911] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.912] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.913] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.914] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.916] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.921] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.922] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.925] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.936] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.939] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.944] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.949] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.951] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.953] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.954] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.955] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.961] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.978] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.982] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.984] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.993] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0213.998] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.000] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.001] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.001] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.005] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.005] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.022] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.038] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.039] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.042] SetEvent (hEvent=0x124) returned 1
	[0214.042] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.044] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.045] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.046] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.048] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.049] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.051] SetEvent (hEvent=0x144) returned 1
	[0214.052] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.057] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.063] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.068] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.070] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.071] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.071] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.075] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.075] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.098] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.111] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.111] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.114] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.115] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.116] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.119] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.124] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.130] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.134] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.135] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.137] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.137] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.139] SetEvent (hEvent=0xac) returned 1
	[0214.139] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.145] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.145] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.146] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.147] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.150] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.155] SetEvent (hEvent=0x144) returned 1
	[0214.156] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.157] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.166] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.167] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.170] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.172] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.177] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.179] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.188] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.192] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.195] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.202] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.205] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.207] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.214] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.216] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.217] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.217] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.218] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.220] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.222] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.228] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.234] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.235] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.237] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.239] SetEvent (hEvent=0x108) returned 1
	[0214.239] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.241] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.241] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.242] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.242] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.264] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.275] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.279] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.285] SetEvent (hEvent=0x144) returned 1
	[0214.285] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.287] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.294] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.297] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.300] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.302] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.308] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.311] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.311] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.315] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.315] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.331] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.348] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.351] SetEvent (hEvent=0xac) returned 1
	[0214.351] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.357] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.358] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.359] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.361] SetEvent (hEvent=0x124) returned 1
	[0214.362] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.363] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.364] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.368] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.370] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.372] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.373] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.374] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.376] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.377] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.378] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.380] SetEvent (hEvent=0x144) returned 1
	[0214.380] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.381] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.386] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.388] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.389] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.390] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.391] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.393] SetEvent (hEvent=0x144) returned 1
	[0214.393] SetEvent (hEvent=0x108) returned 1
	[0214.393] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.395] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.402] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.411] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.413] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.415] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.415] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.417] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.417] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.434] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.435] SetEvent (hEvent=0x108) returned 1
	[0214.435] SetEvent (hEvent=0x120) returned 1
	[0214.435] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.441] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.442] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.443] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.444] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.450] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.452] SetEvent (hEvent=0xe4) returned 1
	[0214.452] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.454] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.455] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.455] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.456] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.458] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.459] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.461] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.477] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.499] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.508] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.511] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.514] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.571] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.571] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.575] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.575] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.593] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.605] SetEvent (hEvent=0x90) returned 1
	[0214.605] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.607] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.612] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.614] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.618] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.619] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.621] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.623] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.625] SetEvent (hEvent=0xac) returned 1
	[0214.625] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.626] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.631] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.632] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.632] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.634] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.636] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.639] SetEvent (hEvent=0xac) returned 1
	[0214.639] SetEvent (hEvent=0x124) returned 1
	[0214.639] SetEvent (hEvent=0x104) returned 1
	[0214.639] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.646] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.648] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.654] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.660] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.661] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.662] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.663] SetEvent (hEvent=0x90) returned 1
	[0214.663] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.665] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.665] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.667] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.667] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.684] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.714] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.716] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.720] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.727] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.738] SetEvent (hEvent=0xc4) returned 1
	[0214.738] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.739] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.741] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.741] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.744] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.744] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.762] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.778] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.781] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.782] SetEvent (hEvent=0xc4) returned 1
	[0214.783] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.787] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.793] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.797] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.798] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.800] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.801] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.802] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.803] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.805] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.806] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.808] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.809] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.811] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.814] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.820] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.821] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.825] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.827] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.828] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.832] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.834] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.838] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.840] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.841] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.841] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.844] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.844] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.862] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.875] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.880] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.882] SetEvent (hEvent=0xe4) returned 1
	[0214.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.887] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.889] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.890] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.891] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.892] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.893] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.894] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.895] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.897] SetEvent (hEvent=0xe4) returned 1
	[0214.897] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.902] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.910] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.912] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.915] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.915] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.919] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.919] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.933] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.949] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.950] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.956] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.961] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.964] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.966] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.967] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.968] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.970] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.971] SetEvent (hEvent=0x120) returned 1
	[0214.971] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.976] SetEvent (hEvent=0x120) returned 1
	[0214.976] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.981] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.985] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0214.988] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.988] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0214.992] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.992] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.006] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.026] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.031] SetEvent (hEvent=0x120) returned 1
	[0215.031] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.033] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.036] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.037] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.037] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.039] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.040] SetEvent (hEvent=0x120) returned 1
	[0215.040] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.046] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.050] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.052] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.053] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.054] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.055] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.055] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.057] SetEvent (hEvent=0x104) returned 1
	[0215.058] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.062] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.071] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.076] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.078] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.080] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.081] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.082] SetEvent (hEvent=0x90) returned 1
	[0215.082] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.083] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.088] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.094] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.095] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.097] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.099] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.099] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.100] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.102] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.106] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.108] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.113] SetEvent (hEvent=0x120) returned 1
	[0215.113] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.114] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.119] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.119] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.120] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.122] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.123] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.126] SetEvent (hEvent=0x120) returned 1
	[0215.126] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.131] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.133] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.135] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.136] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.137] SetEvent (hEvent=0x120) returned 1
	[0215.137] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.140] SetEvent (hEvent=0xe4) returned 1
	[0215.140] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.147] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.156] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.159] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.162] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.164] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.167] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.170] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.176] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.181] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.183] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.186] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.188] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.190] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.191] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.202] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.204] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.205] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.206] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.206] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.208] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.211] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.216] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.221] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.223] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.224] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.226] SetEvent (hEvent=0x144) returned 1
	[0215.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.227] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.233] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.239] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.239] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.242] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.250] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.253] SetEvent (hEvent=0x104) returned 1
	[0215.253] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.255] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0215.255] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0215.257] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0215.258] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.273] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.288] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.289] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.290] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.291] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.292] SetEvent (hEvent=0xc4) returned 1
	[0215.292] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.299] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.303] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.305] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.306] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.307] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.308] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.309] SetEvent (hEvent=0x104) returned 1
	[0215.310] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.311] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.315] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.321] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.324] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.326] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.411] SetEvent (hEvent=0xc4) returned 1
	[0215.411] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.414] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.415] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.416] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.417] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.418] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.423] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.429] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.432] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.433] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.435] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.436] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.439] SetEvent (hEvent=0x120) returned 1
	[0215.439] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.444] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.449] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.450] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.451] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.452] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.453] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.454] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.455] SetEvent (hEvent=0x104) returned 1
	[0215.455] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.457] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.458] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.479] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.484] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.485] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.486] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.488] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.490] SetEvent (hEvent=0xc4) returned 1
	[0215.490] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.497] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.503] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.504] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.506] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.507] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.508] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.510] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.512] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.518] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.524] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.526] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.528] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.530] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.531] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.532] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.533] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.534] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x2a7fe40) returned 0x102
	[0215.536] SetEvent (hEvent=0x120) returned 1
	[0215.600] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0215.600] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0215.603] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0215.661] SetEvent (hEvent=0xe4) returned 1
	[0215.679] SetEvent (hEvent=0xe4) returned 1
	[0215.697] SetEvent (hEvent=0x104) returned 1
	[0215.698] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0215.698] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0215.699] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0215.825] SetEvent (hEvent=0xe4) returned 1
	[0215.834] SetEvent (hEvent=0xe4) returned 1
	[0215.888] SetEvent (hEvent=0xe4) returned 1
	[0215.909] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0215.909] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0215.913] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0215.964] SetEvent (hEvent=0x144) returned 1
	[0215.974] SetEvent (hEvent=0x144) returned 1
	[0215.976] SetEvent (hEvent=0x144) returned 1
	[0215.988] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0215.988] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0215.992] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.035] SetEvent (hEvent=0x144) returned 1
	[0216.045] SetEvent (hEvent=0x144) returned 1
	[0216.061] SetEvent (hEvent=0xc4) returned 1
	[0216.062] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.063] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.065] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.109] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.109] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.113] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.148] SetEvent (hEvent=0x124) returned 1
	[0216.165] SetEvent (hEvent=0x104) returned 1
	[0216.167] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.167] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.169] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.203] SetEvent (hEvent=0x124) returned 1
	[0216.210] SetEvent (hEvent=0x124) returned 1
	[0216.250] SetEvent (hEvent=0xc4) returned 1
	[0216.293] SetEvent (hEvent=0x124) returned 1
	[0216.311] SetEvent (hEvent=0xc4) returned 1
	[0216.313] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.313] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.315] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.374] SetEvent (hEvent=0x90) returned 1
	[0216.396] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.396] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.400] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.441] SetEvent (hEvent=0x90) returned 1
	[0216.457] SetEvent (hEvent=0x90) returned 1
	[0216.476] SetEvent (hEvent=0x104) returned 1
	[0216.477] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.477] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.536] SetEvent (hEvent=0x90) returned 1
	[0216.555] SetEvent (hEvent=0x90) returned 1
	[0216.587] SetEvent (hEvent=0xc4) returned 1
	[0216.588] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.589] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.592] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.628] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.628] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.630] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.663] SetEvent (hEvent=0x104) returned 1
	[0216.680] SetEvent (hEvent=0x124) returned 1
	[0216.681] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.681] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.683] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.726] SetEvent (hEvent=0x104) returned 1
	[0216.736] SetEvent (hEvent=0x104) returned 1
	[0216.752] SetEvent (hEvent=0xc4) returned 1
	[0216.753] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.753] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.755] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.812] SetEvent (hEvent=0x90) returned 1
	[0216.815] SetEvent (hEvent=0x90) returned 1
	[0216.827] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.828] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0216.831] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.873] SetEvent (hEvent=0x90) returned 1
	[0216.881] SetEvent (hEvent=0x90) returned 1
	[0216.899] SetEvent (hEvent=0x90) returned 1
	[0216.980] SetEvent (hEvent=0xc4) returned 1
	[0217.003] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.003] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.006] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.071] SetEvent (hEvent=0x104) returned 1
	[0217.088] SetEvent (hEvent=0x124) returned 1
	[0217.089] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.089] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.092] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.133] SetEvent (hEvent=0x104) returned 1
	[0217.141] SetEvent (hEvent=0x104) returned 1
	[0217.159] SetEvent (hEvent=0x104) returned 1
	[0217.185] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.186] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.188] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.224] SetEvent (hEvent=0xc4) returned 1
	[0217.236] SetEvent (hEvent=0xc4) returned 1
	[0217.290] SetEvent (hEvent=0xc4) returned 1
	[0217.364] SetEvent (hEvent=0xc4) returned 1
	[0217.380] SetEvent (hEvent=0x90) returned 1
	[0217.479] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.479] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.493] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.517] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.517] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.520] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.565] SetEvent (hEvent=0x104) returned 1
	[0217.575] SetEvent (hEvent=0x120) returned 1
	[0217.576] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.576] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.580] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.648] SetEvent (hEvent=0x104) returned 1
	[0217.750] SetEvent (hEvent=0x124) returned 1
	[0217.897] SetEvent (hEvent=0x90) returned 1
	[0217.935] SetEvent (hEvent=0x104) returned 1
	[0217.952] SetEvent (hEvent=0x104) returned 1
	[0217.955] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.957] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.962] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.974] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.974] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0217.975] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0218.004] SetEvent (hEvent=0x104) returned 1
	[0218.013] SetEvent (hEvent=0x104) returned 1
	[0218.095] SetEvent (hEvent=0x104) returned 1
	[0218.111] SetEvent (hEvent=0x104) returned 1
	[0218.166] SetEvent (hEvent=0x104) returned 1
	[0218.263] SetEvent (hEvent=0x120) returned 1
	[0218.285] SetEvent (hEvent=0x120) returned 1
	[0218.292] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0218.292] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0218.294] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0218.335] SetEvent (hEvent=0x120) returned 1
	[0218.345] SetEvent (hEvent=0x120) returned 1
	[0218.408] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0218.408] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0218.412] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0218.592] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0218.592] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0218.598] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0218.962] SetEvent (hEvent=0x90) returned 1
	[0219.015] SetEvent (hEvent=0x124) returned 1
	[0219.017] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.017] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0219.020] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.053] SetEvent (hEvent=0x90) returned 1
	[0219.070] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.070] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0219.073] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.127] SetEvent (hEvent=0xc4) returned 1
	[0219.129] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.129] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0219.130] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.157] SetEvent (hEvent=0xe4) returned 1
	[0219.182] SetEvent (hEvent=0xc4) returned 1
	[0219.183] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.183] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0219.185] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.220] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.220] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0219.221] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.256] SetEvent (hEvent=0x104) returned 1
	[0219.308] SetEvent (hEvent=0x104) returned 1
	[0219.316] SetEvent (hEvent=0x124) returned 1
	[0219.333] SetEvent (hEvent=0x144) returned 1
	[0219.334] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.334] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0219.337] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.375] SetEvent (hEvent=0x124) returned 1
	[0219.401] SetEvent (hEvent=0xc4) returned 1
	[0219.774] SetEvent (hEvent=0x124) returned 1
	[0219.775] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.775] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0220.435] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0220.743] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0220.743] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) returned 0x0
	[0222.384] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0223.273] SetEvent (hEvent=0xc4) returned 1
	[0223.362] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0223.362] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xea60) 

Thread:
	id = 3
	os_tid = 0x920

	[0051.270] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x2c7feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2c7feb0*=0x50) returned 1
	[0051.270] VirtualQuery (in: lpAddress=0x2c7fed0, lpBuffer=0x2c7fed0, dwLength=0x30 | out: lpBuffer=0x2c7fed0*(BaseAddress=0x2c7f000, AllocationBase=0x2a80000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0051.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc000036000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54
	[0051.307] CloseHandle (hObject=0x54) returned 1
	[0051.315] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x54
	[0051.315] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0055.730] SetEvent (hEvent=0x68) returned 1
	[0055.730] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0058.809] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0058.854] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0059.321] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.218] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.219] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.222] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.224] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.258] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.293] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.528] SetEvent (hEvent=0x68) returned 1
	[0061.532] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.535] FindFirstFileW (in: lpFileName="N:\\*", lpFindFileData=0xc00039ba38 | out: lpFindFileData=0xc00039ba38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.540] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.540] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0xc000423a38 | out: lpFindFileData=0xc000423a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.545] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.545] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0xc000389a38 | out: lpFindFileData=0xc000389a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.550] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.550] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0xc00038ba38 | out: lpFindFileData=0xc00038ba38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.554] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.555] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0xc000395a38 | out: lpFindFileData=0xc000395a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.559] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.559] FindFirstFileW (in: lpFileName="H:\\*", lpFindFileData=0xc000387a38 | out: lpFindFileData=0xc000387a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.607] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.607] FindFirstFileW (in: lpFileName="L:\\*", lpFindFileData=0xc00038fa38 | out: lpFindFileData=0xc00038fa38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.611] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.611] FindFirstFileW (in: lpFileName="M:\\*", lpFindFileData=0xc000399a38 | out: lpFindFileData=0xc000399a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.616] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.616] FindFirstFileW (in: lpFileName="R:\\*", lpFindFileData=0xc000163a38 | out: lpFindFileData=0xc000163a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.620] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.620] FindFirstFileW (in: lpFileName="S:\\*", lpFindFileData=0xc00016da38 | out: lpFindFileData=0xc00016da38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.624] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.625] FindFirstFileW (in: lpFileName="W:\\*", lpFindFileData=0xc000175a38 | out: lpFindFileData=0xc000175a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.629] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.629] FindFirstFileW (in: lpFileName="U:\\*", lpFindFileData=0xc000169a38 | out: lpFindFileData=0xc000169a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.633] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.633] FindFirstFileW (in: lpFileName="V:\\*", lpFindFileData=0xc00016ba38 | out: lpFindFileData=0xc00016ba38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.637] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.652] FindFirstFileW (in: lpFileName="X:\\*", lpFindFileData=0xc000167a38 | out: lpFindFileData=0xc000167a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.652] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0061.706] SetEvent (hEvent=0x68) returned 1
	[0061.706] GetFileAttributesW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd")) returned 0x20
	[0061.706] SetFileAttributesW (lpFileName="C:\\Boot\\BCD", dwFileAttributes=0x20) returned 1
	[0061.905] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), lpNewFileName="C:\\Boot\\BCD.egmwv" (normalized: "c:\\boot\\bcd.egmwv"), dwFlags=0x1) returned 0
	[0061.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002ee00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac
	[0062.071] CloseHandle (hObject=0xac) returned 1
	[0062.071] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xea4b) returned 0x102
	[0128.152] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi")) returned 0x2020
	[0128.152] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", dwFileAttributes=0x2020) returned 1
	[0128.153] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.egmwv"), dwFlags=0x1) returned 1
	[0128.154] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0128.155] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0128.155] ReadFile (in: hFile=0x130, lpBuffer=0xc000cb8000, nNumberOfBytesToRead=0x35647, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000cb8000*, lpNumberOfBytesRead=0xc000199cec*=0x35647, lpOverlapped=0x0) returned 1
	[0133.143] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0135.808] VirtualAlloc (lpAddress=0xc000aec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000aec000
	[0135.809] VirtualAlloc (lpAddress=0xc000aee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000aee000
	[0135.810] VirtualAlloc (lpAddress=0xc000af0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000af0000
	[0135.811] VirtualAlloc (lpAddress=0xc000af2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000af2000
	[0135.811] VirtualAlloc (lpAddress=0xc000af4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000af4000
	[0135.812] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a05e0 | out: pbBuffer=0xc0003a05e0) returned 1
	[0135.812] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a05fa | out: pbBuffer=0xc0003a05fa) returned 1
	[0135.812] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000112e02 | out: pbBuffer=0xc000112e02) returned 1
	[0135.813] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000112e86 | out: pbBuffer=0xc000112e86) returned 1
	[0135.813] VirtualAlloc (lpAddress=0xc000af6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000af6000
	[0135.814] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0620 | out: pbBuffer=0xc0003a0620) returned 1
	[0135.814] VirtualAlloc (lpAddress=0xc000af8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000af8000
	[0135.815] VirtualAlloc (lpAddress=0xc000afc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000afc000
	[0135.816] VirtualAlloc (lpAddress=0xc000b00000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b00000
	[0135.819] VirtualAlloc (lpAddress=0xc0008c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008c0000
	[0135.821] VirtualAlloc (lpAddress=0xc0008c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008c4000
	[0135.822] VirtualAlloc (lpAddress=0xc0008c8000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008c8000
	[0135.828] VirtualAlloc (lpAddress=0xc0008e6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008e6000
	[0135.830] VirtualAlloc (lpAddress=0xc0008ea000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008ea000
	[0135.831] VirtualAlloc (lpAddress=0xc0008ee000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008ee000
	[0135.833] VirtualAlloc (lpAddress=0xc0008f2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008f2000
	[0135.837] VirtualAlloc (lpAddress=0xc0008f6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008f6000
	[0135.838] VirtualAlloc (lpAddress=0xc0008fa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008fa000
	[0135.839] VirtualAlloc (lpAddress=0xc0008fe000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0008fe000
	[0136.057] VirtualAlloc (lpAddress=0xc000902000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000902000
	[0136.058] VirtualAlloc (lpAddress=0xc000906000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000906000
	[0136.061] VirtualAlloc (lpAddress=0xc00090a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00090a000
	[0136.062] VirtualAlloc (lpAddress=0xc00090c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00090c000
	[0136.063] VirtualAlloc (lpAddress=0xc00090e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00090e000
	[0136.064] VirtualAlloc (lpAddress=0xc000912000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000912000
	[0136.066] VirtualAlloc (lpAddress=0xc00091a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00091a000
	[0136.073] GetFileType (hFile=0x130) returned 0x1
	[0136.073] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=218695) returned 1
	[0136.073] WriteFile (in: hFile=0x130, lpBuffer=0xc000864000*, nNumberOfBytesToWrite=0x35647, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc000864000*, lpNumberOfBytesWritten=0xc000073ccc*=0x35647, lpOverlapped=0xc000073ce8) returned 1
	[0136.439] GetFileType (hFile=0x130) returned 0x1
	[0136.439] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x35647, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=218695) returned 1
	[0136.439] VirtualAlloc (lpAddress=0xc000b60000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b60000
	[0136.442] GetFileType (hFile=0x130) returned 0x1
	[0136.442] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=218695) returned 1
	[0136.442] WriteFile (in: hFile=0x130, lpBuffer=0xc000ac6c00*, nNumberOfBytesToWrite=0x254, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc000ac6c00*, lpNumberOfBytesWritten=0xc000073ccc*=0x254, lpOverlapped=0xc000073ce8) returned 1
	[0136.935] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0137.670] SetEvent (hEvent=0x70) returned 1
	[0137.670] GetFileType (hFile=0x130) returned 0x1
	[0137.670] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0138.291] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x35647, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=218695) returned 1
	[0138.292] CloseHandle (hObject=0x130) returned 1
	[0143.527] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0143.718] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0143.718] SetEvent (hEvent=0x70) returned 1
	[0143.718] SetEvent (hEvent=0x84) returned 1
	[0143.718] SetEvent (hEvent=0x108) returned 1
	[0143.718] SetEvent (hEvent=0x148) returned 1
	[0143.719] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.egmwv")) returned 0x2020
	[0143.719] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0143.721] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0143.892] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0143.893] SetEvent (hEvent=0x148) returned 1
	[0143.893] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0143.918] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0143.918] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0143.939] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0143.939] SetEvent (hEvent=0x70) returned 1
	[0143.940] SetEvent (hEvent=0xc8) returned 1
	[0143.940] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0143.960] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0143.960] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.egmwv")) returned 0x2020
	[0143.960] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0143.961] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.egmwv"), dwFlags=0x1) returned 1
	[0143.962] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0143.962] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0143.962] VirtualAlloc (lpAddress=0xc001b00000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001b00000
	[0144.413] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052140 | out: pbBuffer=0xc000052140) returned 1
	[0144.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005215a | out: pbBuffer=0xc00005215a) returned 1
	[0144.414] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0144.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039209 | out: pbBuffer=0xc000039209) returned 1
	[0144.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052180 | out: pbBuffer=0xc000052180) returned 1
	[0144.518] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.egmwv")) returned 0x2020
	[0144.518] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0144.519] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.egmwv")) returned 0x2020
	[0144.519] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0144.521] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000522b0 | out: pbBuffer=0xc0000522b0) returned 1
	[0144.521] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039c02 | out: pbBuffer=0xc000039c02) returned 1
	[0144.521] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000522f0 | out: pbBuffer=0xc0000522f0) returned 1
	[0144.522] GetFileType (hFile=0xa8) returned 0x1
	[0144.522] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1383) returned 1
	[0144.522] WriteFile (in: hFile=0xa8, lpBuffer=0xc000212000*, nNumberOfBytesToWrite=0x567, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000212000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x567, lpOverlapped=0xc0001a1ce8) returned 1
	[0144.790] GetFileType (hFile=0xa8) returned 0x1
	[0144.790] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x567, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1383) returned 1
	[0144.790] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0144.897] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0144.981] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0144.981] SetEvent (hEvent=0x70) returned 1
	[0144.981] SetEvent (hEvent=0xc8) returned 1
	[0144.981] SetEvent (hEvent=0x100) returned 1
	[0144.981] VirtualAlloc (lpAddress=0xc000b94000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b94000
	[0144.983] GetFileType (hFile=0xa8) returned 0x1
	[0144.983] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1383) returned 1
	[0144.983] WriteFile (in: hFile=0xa8, lpBuffer=0xc00020ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00020ea80*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22d, lpOverlapped=0xc0001a1ce8) returned 1
	[0144.984] GetFileType (hFile=0xa8) returned 0x1
	[0144.984] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x567, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1383) returned 1
	[0144.984] CloseHandle (hObject=0xa8) returned 1
	[0144.985] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.egmwv")) returned 0x2020
	[0144.985] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0144.985] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0145.048] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0145.048] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0149.728] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0149.729] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0149.806] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0149.808] SetEvent (hEvent=0xc4) returned 1
	[0149.811] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0149.967] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0149.967] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0149.969] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0149.974] ReadFile (in: hFile=0xe0, lpBuffer=0xc000216000, nNumberOfBytesToRead=0x2fcf5, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000216000*, lpNumberOfBytesRead=0xc00016fcec*=0x2fcf5, lpOverlapped=0x0) returned 1
	[0150.133] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101c0 | out: pbBuffer=0xc0000101c0) returned 1
	[0150.133] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000101da | out: pbBuffer=0xc0000101da) returned 1
	[0150.133] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0150.133] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d74 | out: pbBuffer=0xc000214d74) returned 1
	[0150.134] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010200 | out: pbBuffer=0xc000010200) returned 1
	[0150.142] VirtualAlloc (lpAddress=0xc000f9e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000f9e000
	[0150.144] VirtualAlloc (lpAddress=0xc000fa2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fa2000
	[0150.145] VirtualAlloc (lpAddress=0xc000fa6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fa6000
	[0150.149] VirtualAlloc (lpAddress=0xc000faa000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000faa000
	[0150.157] VirtualAlloc (lpAddress=0xc000fca000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.157] VirtualAlloc (lpAddress=0xc000fca000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.157] VirtualAlloc (lpAddress=0xc000fca000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fca000
	[0150.159] VirtualAlloc (lpAddress=0xc000fea000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.159] VirtualAlloc (lpAddress=0xc000fea000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fea000
	[0150.160] VirtualAlloc (lpAddress=0xc000ffa000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.160] VirtualAlloc (lpAddress=0xc000ffa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.161] VirtualAlloc (lpAddress=0xc000ffa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ffa000
	[0150.162] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.162] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.162] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.162] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ffe000
	[0150.163] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.163] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.163] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0150.163] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fff000
	[0150.164] VirtualAlloc (lpAddress=0xc001000000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001000000
	[0150.281] SetEvent (hEvent=0xac) returned 1
	[0150.282] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0150.484] SetEvent (hEvent=0x120) returned 1
	[0150.484] GetFileType (hFile=0xe0) returned 0x1
	[0150.484] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=195829) returned 1
	[0150.484] WriteFile (in: hFile=0xe0, lpBuffer=0xc000fca000*, nNumberOfBytesToWrite=0x2fcf5, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc000fca000*, lpNumberOfBytesWritten=0xc000175ccc*=0x2fcf5, lpOverlapped=0xc000175ce8) returned 1
	[0150.487] GetFileType (hFile=0xe0) returned 0x1
	[0150.487] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2fcf5, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=195829) returned 1
	[0150.487] SetEvent (hEvent=0x108) returned 1
	[0150.487] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0159.153] SwitchToThread () returned 1
	[0159.220] SetEvent (hEvent=0xc8) returned 1
	[0159.220] SetEvent (hEvent=0x100) returned 1
	[0159.220] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0159.332] SetEvent (hEvent=0x84) returned 1
	[0159.332] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0169.155] SetEvent (hEvent=0x70) returned 1
	[0169.155] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000425a14 | out: lpMode=0xc000425a14) returned 0
	[0169.155] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000a6780*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004259b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6780*, lpNumberOfBytesWritten=0xc0004259b4*=0x25d, lpOverlapped=0x0) returned 1
	[0169.159] CloseHandle (hObject=0xe0) returned 1
	[0169.315] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000425990 | out: lpFileInformation=0xc000425990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc18938e0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xc18938e0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0169.914] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0169.915] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000425708 | out: lpFindFileData=0xc000425708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0169.987] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.987] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
	[0169.987] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1
	[0169.987] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0169.987] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0169.988] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.988] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0169.991] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f)) returned 1
	[0170.136] SetEvent (hEvent=0x148) returned 1
	[0170.136] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400)) returned 1
	[0170.137] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1
	[0170.140] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0170.140] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0170.141] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000425a14 | out: lpMode=0xc000425a14) returned 0
	[0170.141] WriteFile (in: hFile=0x118, lpBuffer=0xc000410000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004259b4, lpOverlapped=0x0 | out: lpBuffer=0xc000410000*, lpNumberOfBytesWritten=0xc0004259b4*=0x25d, lpOverlapped=0x0) returned 1
	[0170.147] CloseHandle (hObject=0x118) returned 1
	[0170.147] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000425990 | out: lpFileInformation=0xc000425990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc42fb060, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xc42fb060, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0170.147] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0170.148] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000425708 | out: lpFindFileData=0xc000425708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0170.293] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1
	[0170.294] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0170.295] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0170.295] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0170.295] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
	[0170.295] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
	[0170.295] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1
	[0170.295] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0170.296] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1
	[0170.296] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.296] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0170.298] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0170.301] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0xc0004255f8 | out: lpFindFileData=0xc0004255f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0170.448] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0170.673] SetEvent (hEvent=0xc4) returned 1
	[0170.673] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0175.470] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 0x2020
	[0175.470] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", dwFileAttributes=0x2020) returned 1
	[0175.471] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x0
	[0175.522] SetEvent (hEvent=0x70) returned 1
	[0175.522] SetEvent (hEvent=0x124) returned 1
	[0175.522] SetEvent (hEvent=0x84) returned 1
	[0175.522] SetEvent (hEvent=0x144) returned 1
	[0175.523] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.egmwv"), dwFlags=0x1) returned 1
	[0175.524] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0175.524] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000165cc4 | out: lpMode=0xc000165cc4) returned 0
	[0175.525] ReadFile (in: hFile=0xd4, lpBuffer=0xc000408000, nNumberOfBytesToRead=0xe8f2, lpNumberOfBytesRead=0xc000165cec, lpOverlapped=0x0 | out: lpBuffer=0xc000408000*, lpNumberOfBytesRead=0xc000165cec*=0xe8f2, lpOverlapped=0x0) returned 1
	[0175.576] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0175.731] SetEvent (hEvent=0x124) returned 1
	[0175.732] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a210 | out: pbBuffer=0xc00041a210) returned 1
	[0175.732] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a22a | out: pbBuffer=0xc00041a22a) returned 1
	[0175.732] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0175.732] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039214 | out: pbBuffer=0xc000039214) returned 1
	[0175.732] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a250 | out: pbBuffer=0xc00041a250) returned 1
	[0175.733] VirtualAlloc (lpAddress=0xc0019ce000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0019ce000
	[0175.737] VirtualAlloc (lpAddress=0xc0019dc000, dwSize=0x1c000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0019dc000
	[0175.745] VirtualAlloc (lpAddress=0xc0019f8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0019f8000
	[0175.748] GetFileType (hFile=0xd4) returned 0x1
	[0175.748] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=59634) returned 1
	[0175.748] WriteFile (in: hFile=0xd4, lpBuffer=0xc000216000*, nNumberOfBytesToWrite=0xe8f2, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000216000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0xe8f2, lpOverlapped=0xc0001a1ce8) returned 1
	[0175.749] GetFileType (hFile=0xd4) returned 0x1
	[0175.750] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xe8f2, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=59634) returned 1
	[0175.750] GetFileType (hFile=0xd4) returned 0x1
	[0175.750] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=59634) returned 1
	[0175.750] WriteFile (in: hFile=0xd4, lpBuffer=0xc000207500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000207500*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x236, lpOverlapped=0xc0001a1ce8) returned 1
	[0175.839] GetFileType (hFile=0xd4) returned 0x1
	[0175.839] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xe8f2, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=59634) returned 1
	[0175.839] CloseHandle (hObject=0xd4) returned 1
	[0175.840] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.egmwv")) returned 0x2020
	[0175.840] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0175.841] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab")) returned 0x2020
	[0175.841] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", dwFileAttributes=0x2020) returned 1
	[0175.841] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.egmwv"), dwFlags=0x1) returned 1
	[0175.842] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0175.842] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0175.935] ReadFile (in: hFile=0xd4, lpBuffer=0xc001a00000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc001a00000*, lpNumberOfBytesRead=0xc000175cec*=0x100000, lpOverlapped=0x0) returned 1
	[0176.056] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2c0 | out: pbBuffer=0xc00041a2c0) returned 1
	[0176.056] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0176.056] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a300 | out: pbBuffer=0xc00041a300) returned 1
	[0176.061] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0177.920] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0177.920] SetEvent (hEvent=0x70) returned 1
	[0177.921] SetEvent (hEvent=0x124) returned 1
	[0177.921] SetEvent (hEvent=0x148) returned 1
	[0177.927] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0179.430] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0179.431] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0179.489] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0179.491] SetEvent (hEvent=0x100) returned 1
	[0179.491] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0179.568] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0179.577] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0179.624] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0179.624] SetEvent (hEvent=0x70) returned 1
	[0179.624] SetEvent (hEvent=0x100) returned 1
	[0179.624] SetEvent (hEvent=0x124) returned 1
	[0179.637] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0179.668] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0179.668] SetEvent (hEvent=0x124) returned 1
	[0179.669] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0179.720] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0179.746] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0179.777] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0179.777] SetEvent (hEvent=0x70) returned 1
	[0179.777] SetEvent (hEvent=0x100) returned 1
	[0179.777] SetEvent (hEvent=0xac) returned 1
	[0179.778] GetFileType (hFile=0xd4) returned 0x1
	[0179.778] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=1048576) returned 1
	[0179.778] WriteFile (in: hFile=0xd4, lpBuffer=0xc001b80000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc001b80000*, lpNumberOfBytesWritten=0xc000175ccc*=0x100000, lpOverlapped=0xc000175ce8) returned 1
	[0179.792] GetFileType (hFile=0xd4) returned 0x1
	[0179.792] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x100000, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=1048576) returned 1
	[0179.793] GetFileType (hFile=0xd4) returned 0x1
	[0179.793] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=1048576) returned 1
	[0179.793] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001c4000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0001c4000*, lpNumberOfBytesWritten=0xc000175ccc*=0x2d8, lpOverlapped=0xc000175ce8) returned 1
	[0179.837] SwitchToThread () returned 1
	[0179.840] GetFileType (hFile=0xd4) returned 0x1
	[0179.840] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x100000, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=1048576) returned 1
	[0179.840] CloseHandle (hObject=0xd4) returned 1
	[0179.841] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.egmwv")) returned 0x2020
	[0179.841] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0179.841] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0182.018] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a110 | out: pbBuffer=0xc00041a110) returned 1
	[0182.018] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0182.018] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a150 | out: pbBuffer=0xc00041a150) returned 1
	[0182.020] SetEvent (hEvent=0x124) returned 1
	[0182.026] GetFileType (hFile=0x130) returned 0x1
	[0182.026] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=259159) returned 1
	[0182.027] WriteFile (in: hFile=0x130, lpBuffer=0xc00190c000*, nNumberOfBytesToWrite=0x3f457, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00190c000*, lpNumberOfBytesWritten=0xc00019dccc*=0x3f457, lpOverlapped=0xc00019dce8) returned 1
	[0182.037] GetFileType (hFile=0x130) returned 0x1
	[0182.037] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3f457, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=259159) returned 1
	[0182.037] GetFileType (hFile=0x130) returned 0x1
	[0182.037] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=259159) returned 1
	[0182.038] WriteFile (in: hFile=0x130, lpBuffer=0xc000098c00*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000098c00*, lpNumberOfBytesWritten=0xc00019dccc*=0x25d, lpOverlapped=0xc00019dce8) returned 1
	[0182.093] GetFileType (hFile=0x130) returned 0x1
	[0182.093] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3f457, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=259159) returned 1
	[0182.093] CloseHandle (hObject=0x130) returned 1
	[0182.094] SwitchToThread () returned 1
	[0182.122] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.egmwv")) returned 0x2020
	[0182.122] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0182.123] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0182.128] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0182.132] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi")) returned 0x2020
	[0182.133] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", dwFileAttributes=0x2020) returned 1
	[0182.137] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.egmwv"), dwFlags=0x1) returned 1
	[0182.164] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0182.166] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0182.166] ReadFile (in: hFile=0xd4, lpBuffer=0xc00194c000, nNumberOfBytesToRead=0x2b061, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc00194c000*, lpNumberOfBytesRead=0xc00016fcec*=0x2b061, lpOverlapped=0x0) returned 1
	[0182.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0110 | out: pbBuffer=0xc0003a0110) returned 1
	[0182.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a012a | out: pbBuffer=0xc0003a012a) returned 1
	[0182.176] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0182.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d26 | out: pbBuffer=0xc000214d26) returned 1
	[0182.177] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0150 | out: pbBuffer=0xc0003a0150) returned 1
	[0182.178] SetEvent (hEvent=0x120) returned 1
	[0182.181] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0182.183] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0182.183] SetEvent (hEvent=0x120) returned 1
	[0182.183] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0182.185] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0182.185] GetFileType (hFile=0xd4) returned 0x1
	[0182.185] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016fca0*=176225) returned 1
	[0182.185] WriteFile (in: hFile=0xd4, lpBuffer=0xc000216000*, nNumberOfBytesToWrite=0x2b061, lpNumberOfBytesWritten=0xc00016fccc, lpOverlapped=0xc00016fce8 | out: lpBuffer=0xc000216000*, lpNumberOfBytesWritten=0xc00016fccc*=0x2b061, lpOverlapped=0xc00016fce8) returned 1
	[0182.187] GetFileType (hFile=0xd4) returned 0x1
	[0182.187] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2b061, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016fca0*=176225) returned 1
	[0182.187] GetFileType (hFile=0xd4) returned 0x1
	[0182.187] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016fca0*=176225) returned 1
	[0182.188] WriteFile (in: hFile=0xd4, lpBuffer=0xc000188380*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0xc00016fccc, lpOverlapped=0xc00016fce8 | out: lpBuffer=0xc000188380*, lpNumberOfBytesWritten=0xc00016fccc*=0x245, lpOverlapped=0xc00016fce8) returned 1
	[0183.000] GetFileType (hFile=0xd4) returned 0x1
	[0183.000] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2b061, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016fca0*=176225) returned 1
	[0183.000] CloseHandle (hObject=0xd4) returned 1
	[0183.001] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0183.009] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0183.075] SetEvent (hEvent=0x148) returned 1
	[0183.075] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0183.075] SetEvent (hEvent=0x148) returned 1
	[0183.075] SwitchToThread () returned 1
	[0183.076] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0183.133] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0187.644] SetEvent (hEvent=0x124) returned 1
	[0187.644] SetEvent (hEvent=0x100) returned 1
	[0187.645] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0187.897] SetEvent (hEvent=0x100) returned 1
	[0187.897] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0187.906] SetEvent (hEvent=0x124) returned 1
	[0187.906] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0189.348] VirtualAlloc (lpAddress=0xc0006be000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0006be000
	[0189.351] VirtualAlloc (lpAddress=0xc0006c2000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0006c2000
	[0190.619] VirtualAlloc (lpAddress=0xc000742000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.619] VirtualAlloc (lpAddress=0xc000742000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.620] VirtualAlloc (lpAddress=0xc000742000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000742000
	[0190.624] VirtualAlloc (lpAddress=0xc0007c2000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.625] VirtualAlloc (lpAddress=0xc0007c2000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.625] VirtualAlloc (lpAddress=0xc0007c2000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007c2000
	[0190.626] VirtualAlloc (lpAddress=0xc0007e2000, dwSize=0x60000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.626] VirtualAlloc (lpAddress=0xc0007e2000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.626] VirtualAlloc (lpAddress=0xc0007e2000, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007e2000
	[0190.628] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0x48000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.628] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0x24000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.628] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.628] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.628] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007fa000
	[0190.629] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x44000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.629] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x22000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.629] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x11000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.629] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.629] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0190.629] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007fe000
	[0190.630] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x42000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000800000
	[0190.891] SetEvent (hEvent=0x148) returned 1
	[0190.891] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0190.972] SetEvent (hEvent=0x120) returned 1
	[0190.972] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0190.994] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0190.994] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0191.006] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0191.006] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x0
	[0191.014] SetEvent (hEvent=0xc4) returned 1
	[0191.014] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0191.082] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0191.083] SwitchToThread () returned 1
	[0191.157] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0194.178] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0194.256] GetFileType (hFile=0xe8) returned 0x1
	[0194.256] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0194.256] WriteFile (in: hFile=0xe8, lpBuffer=0xc000842000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000423ccc, lpOverlapped=0xc000423ce8 | out: lpBuffer=0xc000842000*, lpNumberOfBytesWritten=0xc000423ccc*=0x100000, lpOverlapped=0xc000423ce8) returned 1
	[0194.413] GetFileType (hFile=0xe8) returned 0x1
	[0194.413] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0194.414] GetFileType (hFile=0xe8) returned 0x1
	[0194.414] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0194.414] WriteFile (in: hFile=0xe8, lpBuffer=0xc000050000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000423ccc, lpOverlapped=0xc000423ce8 | out: lpBuffer=0xc000050000*, lpNumberOfBytesWritten=0xc000423ccc*=0x2d8, lpOverlapped=0xc000423ce8) returned 1
	[0194.437] GetFileType (hFile=0xe8) returned 0x1
	[0194.437] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0194.437] CloseHandle (hObject=0xe8) returned 1
	[0194.447] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv")) returned 0x2020
	[0194.447] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0194.455] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0196.732] SetEvent (hEvent=0x100) returned 1
	[0196.733] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0196.745] SetEvent (hEvent=0x100) returned 1
	[0196.745] SetEvent (hEvent=0x124) returned 1
	[0196.745] ReadFile (in: hFile=0xe8, lpBuffer=0xc000350000, nNumberOfBytesToRead=0x41d4, lpNumberOfBytesRead=0xc000163cec, lpOverlapped=0x0 | out: lpBuffer=0xc000350000*, lpNumberOfBytesRead=0xc000163cec*=0x41d4, lpOverlapped=0x0) returned 1
	[0196.824] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010190 | out: pbBuffer=0xc000010190) returned 1
	[0196.824] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0196.824] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0936 | out: pbBuffer=0xc0002c0936) returned 1
	[0196.824] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101d0 | out: pbBuffer=0xc0000101d0) returned 1
	[0196.824] GetFileType (hFile=0xe8) returned 0x1
	[0196.824] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=16852) returned 1
	[0196.825] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002a4000*, nNumberOfBytesToWrite=0x41d4, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0002a4000*, lpNumberOfBytesWritten=0xc00019dccc*=0x41d4, lpOverlapped=0xc00019dce8) returned 1
	[0196.825] GetFileType (hFile=0xe8) returned 0x1
	[0196.825] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x41d4, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=16852) returned 1
	[0196.825] GetFileType (hFile=0xe8) returned 0x1
	[0196.825] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=16852) returned 1
	[0196.826] WriteFile (in: hFile=0xe8, lpBuffer=0xc00039f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00039f500*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0196.826] GetFileType (hFile=0xe8) returned 0x1
	[0196.826] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x41d4, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=16852) returned 1
	[0196.826] CloseHandle (hObject=0xe8) returned 1
	[0196.839] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.egmwv")) returned 0x2020
	[0196.840] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0196.881] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0196.988] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0198.157] SetEvent (hEvent=0x148) returned 1
	[0198.157] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0198.222] SetEvent (hEvent=0x148) returned 1
	[0198.222] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0198.227] SetEvent (hEvent=0xac) returned 1
	[0198.227] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0198.395] SetEvent (hEvent=0x100) returned 1
	[0198.395] SetEvent (hEvent=0xac) returned 1
	[0198.395] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0198.699] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0198.710] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0198.715] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0198.715] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", dwFileAttributes=0x2020) returned 1
	[0198.716] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv"), dwFlags=0x1) returned 1
	[0199.100] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0199.102] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0199.102] ReadFile (in: hFile=0xd4, lpBuffer=0xc00033e000, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00033e000*, lpNumberOfBytesRead=0xc000387cec*=0x10b2, lpOverlapped=0x0) returned 1
	[0199.110] SetEvent (hEvent=0x148) returned 1
	[0199.110] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052130 | out: pbBuffer=0xc000052130) returned 1
	[0199.111] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0199.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052170 | out: pbBuffer=0xc000052170) returned 1
	[0199.111] GetFileType (hFile=0xd4) returned 0x1
	[0199.111] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=4274) returned 1
	[0199.111] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002a2000*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc0002a2000*, lpNumberOfBytesWritten=0xc00034dccc*=0x10b2, lpOverlapped=0xc00034dce8) returned 1
	[0199.112] GetFileType (hFile=0xd4) returned 0x1
	[0199.112] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x10b2, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=4274) returned 1
	[0199.112] GetFileType (hFile=0xd4) returned 0x1
	[0199.112] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=4274) returned 1
	[0199.112] WriteFile (in: hFile=0xd4, lpBuffer=0xc000291500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc000291500*, lpNumberOfBytesWritten=0xc00034dccc*=0x227, lpOverlapped=0xc00034dce8) returned 1
	[0199.112] GetFileType (hFile=0xd4) returned 0x1
	[0199.113] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x10b2, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=4274) returned 1
	[0199.113] CloseHandle (hObject=0xd4) returned 1
	[0199.115] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv")) returned 0x2020
	[0199.115] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.120] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.126] SetEvent (hEvent=0x148) returned 1
	[0199.126] SetEvent (hEvent=0x124) returned 1
	[0199.127] SwitchToThread () returned 1
	[0199.129] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.132] SetEvent (hEvent=0x124) returned 1
	[0199.133] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 0x2020
	[0199.133] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", dwFileAttributes=0x2020) returned 1
	[0199.134] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.egmwv"), dwFlags=0x1) returned 1
	[0199.231] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0199.236] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0199.236] ReadFile (in: hFile=0xe8, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x1915, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc000423cec*=0x1915, lpOverlapped=0x0) returned 1
	[0199.241] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010230 | out: pbBuffer=0xc000010230) returned 1
	[0199.241] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00001024a | out: pbBuffer=0xc00001024a) returned 1
	[0199.241] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0199.242] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010270 | out: pbBuffer=0xc000010270) returned 1
	[0199.242] GetFileType (hFile=0xe8) returned 0x1
	[0199.242] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00028fca0*=6421) returned 1
	[0199.242] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002b8000*, nNumberOfBytesToWrite=0x1915, lpNumberOfBytesWritten=0xc00028fccc, lpOverlapped=0xc00028fce8 | out: lpBuffer=0xc0002b8000*, lpNumberOfBytesWritten=0xc00028fccc*=0x1915, lpOverlapped=0xc00028fce8) returned 1
	[0199.242] GetFileType (hFile=0xe8) returned 0x1
	[0199.243] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1915, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00028fca0*=6421) returned 1
	[0199.243] GetFileType (hFile=0xe8) returned 0x1
	[0199.243] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00028fca0*=6421) returned 1
	[0199.243] WriteFile (in: hFile=0xe8, lpBuffer=0xc00042d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00028fccc, lpOverlapped=0xc00028fce8 | out: lpBuffer=0xc00042d500*, lpNumberOfBytesWritten=0xc00028fccc*=0x22a, lpOverlapped=0xc00028fce8) returned 1
	[0199.243] GetFileType (hFile=0xe8) returned 0x1
	[0199.243] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1915, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00028fca0*=6421) returned 1
	[0199.244] CloseHandle (hObject=0xe8) returned 1
	[0199.246] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.egmwv")) returned 0x2020
	[0199.246] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.249] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.335] SetEvent (hEvent=0x148) returned 1
	[0199.335] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.352] SetEvent (hEvent=0x148) returned 1
	[0199.352] SetEvent (hEvent=0x124) returned 1
	[0199.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0199.353] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0199.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000392c0 | out: pbBuffer=0xc0000392c0) returned 1
	[0199.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000521c0 | out: pbBuffer=0xc0000521c0) returned 1
	[0199.354] GetFileType (hFile=0xd4) returned 0x1
	[0199.354] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=16683) returned 1
	[0199.354] WriteFile (in: hFile=0xd4, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x412b, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc00021dccc*=0x412b, lpOverlapped=0xc00021dce8) returned 1
	[0199.355] GetFileType (hFile=0xd4) returned 0x1
	[0199.355] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x412b, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=16683) returned 1
	[0199.355] GetFileType (hFile=0xd4) returned 0x1
	[0199.355] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=16683) returned 1
	[0199.355] WriteFile (in: hFile=0xd4, lpBuffer=0xc000181c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc000181c00*, lpNumberOfBytesWritten=0xc00021dccc*=0x22a, lpOverlapped=0xc00021dce8) returned 1
	[0199.355] GetFileType (hFile=0xd4) returned 0x1
	[0199.356] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x412b, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=16683) returned 1
	[0199.356] CloseHandle (hObject=0xd4) returned 1
	[0199.356] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0199.356] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.357] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0199.357] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x2020) returned 1
	[0199.357] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv"), dwFlags=0x1) returned 1
	[0199.358] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0199.358] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0199.358] ReadFile (in: hFile=0xd4, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x1179f, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000173cec*=0x1179f, lpOverlapped=0x0) returned 1
	[0199.368] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.378] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.379] SetEvent (hEvent=0x148) returned 1
	[0199.379] SetEvent (hEvent=0x124) returned 1
	[0199.379] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1
	[0199.380] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1
	[0199.381] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.381] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0199.403] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0199.407] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0199.407] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0199.408] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0199.414] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.417] SwitchToThread () returned 1
	[0199.418] SetEvent (hEvent=0x148) returned 1
	[0199.418] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.419] SetEvent (hEvent=0x148) returned 1
	[0199.419] SetEvent (hEvent=0x100) returned 1
	[0199.419] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0199.419] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", dwFileAttributes=0x2020) returned 1
	[0199.420] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv"), dwFlags=0x1) returned 1
	[0199.421] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0199.421] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0199.421] ReadFile (in: hFile=0xe8, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc00016fcec*=0x10b2, lpOverlapped=0x0) returned 1
	[0199.441] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.456] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a110 | out: pbBuffer=0xc00041a110) returned 1
	[0199.456] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0199.456] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0915 | out: pbBuffer=0xc0002c0915) returned 1
	[0199.457] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c09bf | out: pbBuffer=0xc0002c09bf) returned 1
	[0199.457] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a150 | out: pbBuffer=0xc00041a150) returned 1
	[0199.457] GetFileType (hFile=0xe8) returned 0x1
	[0199.457] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036bca0*=4274) returned 1
	[0199.457] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002c2000*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0xc00036bccc, lpOverlapped=0xc00036bce8 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesWritten=0xc00036bccc*=0x10b2, lpOverlapped=0xc00036bce8) returned 1
	[0199.458] GetFileType (hFile=0xe8) returned 0x1
	[0199.458] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x10b2, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036bca0*=4274) returned 1
	[0199.458] GetFileType (hFile=0xe8) returned 0x1
	[0199.458] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036bca0*=4274) returned 1
	[0199.458] WriteFile (in: hFile=0xe8, lpBuffer=0xc000415500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00036bccc, lpOverlapped=0xc00036bce8 | out: lpBuffer=0xc000415500*, lpNumberOfBytesWritten=0xc00036bccc*=0x227, lpOverlapped=0xc00036bce8) returned 1
	[0199.458] GetFileType (hFile=0xe8) returned 0x1
	[0199.458] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x10b2, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036bca0*=4274) returned 1
	[0199.459] CloseHandle (hObject=0xe8) returned 1
	[0199.459] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv")) returned 0x2020
	[0199.459] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.460] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.472] SetEvent (hEvent=0xac) returned 1
	[0199.472] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0199.472] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", dwFileAttributes=0x2020) returned 1
	[0199.472] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv"), dwFlags=0x1) returned 1
	[0199.510] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0199.511] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0199.511] ReadFile (in: hFile=0xe8, lpBuffer=0xc000460000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000460000*, lpNumberOfBytesRead=0xc000423cec*=0x100000, lpOverlapped=0x0) returned 1
	[0199.570] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2a0 | out: pbBuffer=0xc00041a2a0) returned 1
	[0199.570] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a2ba | out: pbBuffer=0xc00041a2ba) returned 1
	[0199.570] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039d02 | out: pbBuffer=0xc000039d02) returned 1
	[0199.570] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2e0 | out: pbBuffer=0xc00041a2e0) returned 1
	[0199.571] SetEvent (hEvent=0x120) returned 1
	[0199.584] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.627] SwitchToThread () returned 1
	[0199.631] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.638] SwitchToThread () returned 1
	[0199.638] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.643] SetEvent (hEvent=0x124) returned 1
	[0199.643] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.659] SetEvent (hEvent=0xac) returned 1
	[0199.659] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x0
	[0199.663] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x0
	[0199.665] SetEvent (hEvent=0x124) returned 1
	[0199.665] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0199.673] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.673] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0199.673] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x2020) returned 1
	[0199.674] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv"), dwFlags=0x1) returned 1
	[0199.676] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0199.677] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0199.677] ReadFile (in: hFile=0x118, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x1179f, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000175cec*=0x1179f, lpOverlapped=0x0) returned 1
	[0199.703] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.767] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000521c0 | out: pbBuffer=0xc0000521c0) returned 1
	[0199.767] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0199.767] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c091a | out: pbBuffer=0xc0002c091a) returned 1
	[0199.767] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052200 | out: pbBuffer=0xc000052200) returned 1
	[0199.768] GetFileType (hFile=0x118) returned 0x1
	[0199.768] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=71583) returned 1
	[0199.768] WriteFile (in: hFile=0x118, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0x1179f, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x1179f, lpOverlapped=0xc0000d7ce8) returned 1
	[0199.769] GetFileType (hFile=0x118) returned 0x1
	[0199.770] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1179f, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=71583) returned 1
	[0199.770] GetFileType (hFile=0x118) returned 0x1
	[0199.770] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=71583) returned 1
	[0199.770] WriteFile (in: hFile=0x118, lpBuffer=0xc0003ed500*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc0003ed500*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x242, lpOverlapped=0xc0000d7ce8) returned 1
	[0199.822] GetFileType (hFile=0x118) returned 0x1
	[0199.822] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1179f, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=71583) returned 1
	[0199.822] CloseHandle (hObject=0x118) returned 1
	[0199.823] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv")) returned 0x2020
	[0199.823] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.824] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.936] SetEvent (hEvent=0x148) returned 1
	[0199.936] SetEvent (hEvent=0x124) returned 1
	[0199.936] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0199.978] SetEvent (hEvent=0xac) returned 1
	[0199.978] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a110 | out: pbBuffer=0xc00041a110) returned 1
	[0199.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a12a | out: pbBuffer=0xc00041a12a) returned 1
	[0199.979] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0199.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d49 | out: pbBuffer=0xc000214d49) returned 1
	[0199.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a150 | out: pbBuffer=0xc00041a150) returned 1
	[0199.981] SetEvent (hEvent=0x100) returned 1
	[0199.981] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0200.006] SetEvent (hEvent=0x100) returned 1
	[0200.015] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x0
	[0200.018] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x0
	[0200.019] SetEvent (hEvent=0x124) returned 1
	[0200.019] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0200.028] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0200.029] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0200.048] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0200.048] SetEvent (hEvent=0x70) returned 1
	[0200.048] SetEvent (hEvent=0x100) returned 1
	[0200.048] SetEvent (hEvent=0xac) returned 1
	[0200.049] GetFileType (hFile=0xe8) returned 0x1
	[0200.049] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0200.049] WriteFile (in: hFile=0xe8, lpBuffer=0xc0005b8000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000163ccc, lpOverlapped=0xc000163ce8 | out: lpBuffer=0xc0005b8000*, lpNumberOfBytesWritten=0xc000163ccc*=0x100000, lpOverlapped=0xc000163ce8) returned 1
	[0200.058] GetFileType (hFile=0xe8) returned 0x1
	[0200.059] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0200.059] GetFileType (hFile=0xe8) returned 0x1
	[0200.059] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0200.059] WriteFile (in: hFile=0xe8, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000163ccc, lpOverlapped=0xc000163ce8 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc000163ccc*=0x2d8, lpOverlapped=0xc000163ce8) returned 1
	[0200.067] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0200.069] SetEvent (hEvent=0x100) returned 1
	[0200.069] GetFileType (hFile=0xe8) returned 0x1
	[0200.069] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0200.069] CloseHandle (hObject=0xe8) returned 1
	[0200.070] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.egmwv")) returned 0x2020
	[0200.070] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0200.070] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0200.071] SetEvent (hEvent=0x100) returned 1
	[0200.071] SetEvent (hEvent=0x124) returned 1
	[0200.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e)) returned 1
	[0200.082] SetEvent (hEvent=0x124) returned 1
	[0200.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360)) returned 1
	[0200.090] SetEvent (hEvent=0x120) returned 1
	[0200.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932)) returned 1
	[0200.109] SetEvent (hEvent=0x148) returned 1
	[0200.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e)) returned 1
	[0200.129] SetEvent (hEvent=0x124) returned 1
	[0200.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c)) returned 1
	[0200.171] SetEvent (hEvent=0x120) returned 1
	[0200.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92)) returned 1
	[0200.188] SetEvent (hEvent=0x148) returned 1
	[0200.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b)) returned 1
	[0200.202] SetEvent (hEvent=0x124) returned 1
	[0200.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.223] SetEvent (hEvent=0x70) returned 1
	[0200.223] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0001557f4 | out: lpMode=0xc0001557f4) returned 0
	[0200.223] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc000155794, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc000155794*=0x25d, lpOverlapped=0x0) returned 1
	[0200.226] CloseHandle (hObject=0xe8) returned 1
	[0200.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd59d9290, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd59d9290, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0200.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0200.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0xc0001554e8 | out: lpFindFileData=0xc0001554e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0200.239] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155588 | out: lpFindFileData=0xc000155588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.240] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155588 | out: lpFindFileData=0xc000155588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0200.240] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155588 | out: lpFindFileData=0xc000155588*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0200.240] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0200.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0200.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0xc0001553d8 | out: lpFindFileData=0xc0001553d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0200.247] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155478 | out: lpFindFileData=0xc000155478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.247] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155478 | out: lpFindFileData=0xc000155478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0200.247] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155478 | out: lpFindFileData=0xc000155478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1
	[0200.247] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155478 | out: lpFindFileData=0xc000155478*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0200.247] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0200.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), fInfoLevelId=0x0, lpFileInformation=0xc000155550 | out: lpFileInformation=0xc000155550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58)) returned 1
	[0200.248] SetEvent (hEvent=0x148) returned 1
	[0200.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), fInfoLevelId=0x0, lpFileInformation=0xc000155550 | out: lpFileInformation=0xc000155550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18)) returned 1
	[0200.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.257] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc0001556e4 | out: lpMode=0xc0001556e4) returned 0
	[0200.257] WriteFile (in: hFile=0x118, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc000155684, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc000155684*=0x25d, lpOverlapped=0x0) returned 1
	[0200.260] CloseHandle (hObject=0x118) returned 1
	[0200.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5a6c220, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5a6c220, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0200.288] SetEvent (hEvent=0x70) returned 1
	[0200.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.289] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc0001557f4 | out: lpMode=0xc0001557f4) returned 0
	[0200.289] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc000155794, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc000155794*=0x25d, lpOverlapped=0x0) returned 1
	[0200.292] CloseHandle (hObject=0xd4) returned 1
	[0200.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5a7ac80, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5a7ac80, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0200.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68)) returned 1
	[0200.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568)) returned 1
	[0200.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68)) returned 1
	[0200.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18)) returned 1
	[0200.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.300] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000155904 | out: lpMode=0xc000155904) returned 0
	[0200.301] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0001558a4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0001558a4*=0x25d, lpOverlapped=0x0) returned 1
	[0200.303] CloseHandle (hObject=0xd4) returned 1
	[0200.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), fInfoLevelId=0x0, lpFileInformation=0xc000155880 | out: lpFileInformation=0xc000155880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5a7ac80, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5a7ac80, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0200.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.304] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000155a14 | out: lpMode=0xc000155a14) returned 0
	[0200.304] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0001559b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0001559b4*=0x25d, lpOverlapped=0x0) returned 1
	[0200.307] CloseHandle (hObject=0xd4) returned 1
	[0200.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), fInfoLevelId=0x0, lpFileInformation=0xc000155990 | out: lpFileInformation=0xc000155990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5aa0de0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5aa0de0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0200.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\program files\\microsoft analysis services\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.308] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000155b24 | out: lpMode=0xc000155b24) returned 0
	[0200.308] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc000155ac4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc000155ac4*=0x25d, lpOverlapped=0x0) returned 1
	[0200.311] CloseHandle (hObject=0xd4) returned 1
	[0200.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), fInfoLevelId=0x0, lpFileInformation=0xc000155aa0 | out: lpFileInformation=0xc000155aa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5aa0de0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5aa0de0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0200.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\" (normalized: "c:\\program files\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0200.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0xc000155818 | out: lpFindFileData=0xc000155818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa3d38290, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3d38290, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0200.312] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa3d38290, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3d38290, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.312] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8f4f30, ftCreationTime.dwHighDateTime=0x1d55e30, ftLastAccessTime.dwLowDateTime=0x57ab1210, ftLastAccessTime.dwHighDateTime=0x1d5c5b1, ftLastWriteTime.dwLowDateTime=0x57ab1210, ftLastWriteTime.dwHighDateTime=0x1d5c5b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37855a0, ftCreationTime.dwHighDateTime=0x1d58d20, ftLastAccessTime.dwLowDateTime=0x9bca5990, ftLastAccessTime.dwHighDateTime=0x1d57a36, ftLastWriteTime.dwLowDateTime=0x9bca5990, ftLastWriteTime.dwHighDateTime=0x1d57a36, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1
	[0200.313] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001558b8 | out: lpFindFileData=0xc0001558b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0200.313] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0200.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\" (normalized: "c:\\program files\\microsoft office\\clipart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0200.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0xc000155708 | out: lpFindFileData=0xc000155708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0200.330] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001557a8 | out: lpFindFileData=0xc0001557a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.330] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001557a8 | out: lpFindFileData=0xc0001557a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0200.330] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001557a8 | out: lpFindFileData=0xc0001557a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0200.330] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001557a8 | out: lpFindFileData=0xc0001557a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0200.330] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0200.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0200.331] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0xc0001555f8 | out: lpFindFileData=0xc0001555f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0200.337] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.339] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0200.339] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1
	[0200.339] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1
	[0200.339] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1
	[0200.340] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1
	[0200.341] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1
	[0200.342] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1
	[0200.344] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1
	[0200.345] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1
	[0200.345] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1
	[0200.345] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1
	[0200.345] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1
	[0200.345] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1
	[0200.345] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1
	[0200.346] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1
	[0200.347] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1
	[0200.350] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1
	[0200.351] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1
	[0200.352] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1
	[0200.353] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1
	[0200.353] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1
	[0200.353] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1
	[0200.353] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1
	[0200.354] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1
	[0200.355] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1
	[0200.356] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1
	[0200.357] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1
	[0200.358] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1
	[0200.358] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1
	[0200.358] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1
	[0200.361] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0200.361] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0200.361] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0200.361] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0200.361] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0200.361] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0200.362] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1
	[0200.363] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1
	[0200.364] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1
	[0200.366] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1
	[0200.366] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1
	[0200.366] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1
	[0200.366] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1
	[0200.366] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1
	[0200.366] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0200.367] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0200.368] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0200.369] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0200.369] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0200.369] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0200.369] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0200.369] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0200.369] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0200.369] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0200.371] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0200.371] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0200.371] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0200.371] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0200.371] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0200.371] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0200.371] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0200.372] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1
	[0200.373] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000155698 | out: lpFindFileData=0xc000155698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1
	[0200.429] SetEvent (hEvent=0x148) returned 1
	[0200.486] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0200.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1
	[0200.502] SetEvent (hEvent=0x124) returned 1
	[0200.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1
	[0200.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1
	[0200.511] SetEvent (hEvent=0x148) returned 1
	[0200.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1
	[0200.518] SetEvent (hEvent=0xac) returned 1
	[0200.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1
	[0200.552] SetEvent (hEvent=0x70) returned 1
	[0200.552] SetEvent (hEvent=0x120) returned 1
	[0200.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1
	[0200.572] SetEvent (hEvent=0x148) returned 1
	[0200.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1
	[0200.587] SetEvent (hEvent=0xac) returned 1
	[0200.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1
	[0200.615] SetEvent (hEvent=0x120) returned 1
	[0200.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1
	[0200.629] SetEvent (hEvent=0x148) returned 1
	[0200.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1
	[0200.638] SetEvent (hEvent=0xac) returned 1
	[0200.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1
	[0200.658] SetEvent (hEvent=0x120) returned 1
	[0200.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1
	[0200.688] SetEvent (hEvent=0x148) returned 1
	[0200.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1
	[0200.703] SetEvent (hEvent=0xac) returned 1
	[0200.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1
	[0200.726] SetEvent (hEvent=0x120) returned 1
	[0200.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1
	[0200.738] SetEvent (hEvent=0x148) returned 1
	[0200.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1
	[0200.759] SetEvent (hEvent=0x70) returned 1
	[0200.759] SetEvent (hEvent=0xac) returned 1
	[0200.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1
	[0200.779] SetEvent (hEvent=0x120) returned 1
	[0200.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1
	[0200.795] SetEvent (hEvent=0x148) returned 1
	[0200.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1
	[0200.808] SetEvent (hEvent=0xac) returned 1
	[0200.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1
	[0200.831] SetEvent (hEvent=0x70) returned 1
	[0200.831] SetEvent (hEvent=0x144) returned 1
	[0200.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1
	[0200.850] SetEvent (hEvent=0x148) returned 1
	[0200.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1
	[0200.864] SetEvent (hEvent=0xac) returned 1
	[0200.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1
	[0201.004] SetEvent (hEvent=0x144) returned 1
	[0201.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1
	[0201.036] SetEvent (hEvent=0x70) returned 1
	[0201.036] SetEvent (hEvent=0x120) returned 1
	[0201.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1
	[0201.057] SetEvent (hEvent=0xac) returned 1
	[0201.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1
	[0201.106] SetEvent (hEvent=0x144) returned 1
	[0201.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1
	[0201.121] SetEvent (hEvent=0x120) returned 1
	[0201.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1
	[0201.142] SetEvent (hEvent=0x70) returned 1
	[0201.142] SetEvent (hEvent=0xac) returned 1
	[0201.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1
	[0201.161] SetEvent (hEvent=0x144) returned 1
	[0201.162] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1
	[0201.176] SetEvent (hEvent=0x120) returned 1
	[0201.177] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1
	[0201.193] SetEvent (hEvent=0xac) returned 1
	[0201.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1
	[0201.211] SetEvent (hEvent=0x144) returned 1
	[0201.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1
	[0201.237] SetEvent (hEvent=0x120) returned 1
	[0201.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1
	[0201.255] SetEvent (hEvent=0xac) returned 1
	[0201.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1
	[0201.270] SetEvent (hEvent=0x144) returned 1
	[0201.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1
	[0201.295] SetEvent (hEvent=0x70) returned 1
	[0201.295] SetEvent (hEvent=0x120) returned 1
	[0201.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1
	[0201.316] SetEvent (hEvent=0xac) returned 1
	[0201.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1
	[0201.332] SetEvent (hEvent=0x144) returned 1
	[0201.333] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0201.335] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0201.335] SetEvent (hEvent=0x70) returned 1
	[0201.335] SetEvent (hEvent=0x144) returned 1
	[0201.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1
	[0201.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1
	[0201.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1
	[0201.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1
	[0201.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1
	[0201.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1
	[0201.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1
	[0201.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1
	[0201.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1
	[0201.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1
	[0201.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1
	[0201.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1
	[0201.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1
	[0201.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1
	[0201.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1
	[0201.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1
	[0201.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1
	[0201.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1
	[0201.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1
	[0201.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1
	[0201.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1
	[0201.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1
	[0201.374] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0201.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1
	[0201.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1
	[0201.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf")) returned 0x20
	[0201.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x20) returned 1
	[0201.402] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.403] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0201.403] ReadFile (in: hFile=0xd4, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x19ec, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000389cec*=0x19ec, lpOverlapped=0x0) returned 1
	[0201.439] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6120 | out: pbBuffer=0xc0002b6120) returned 1
	[0201.439] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b613a | out: pbBuffer=0xc0002b613a) returned 1
	[0201.439] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039602 | out: pbBuffer=0xc000039602) returned 1
	[0201.439] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6160 | out: pbBuffer=0xc0002b6160) returned 1
	[0201.440] GetFileType (hFile=0xd4) returned 0x1
	[0201.440] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=6636) returned 1
	[0201.440] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000d4000*, nNumberOfBytesToWrite=0x19ec, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesWritten=0xc000357ccc*=0x19ec, lpOverlapped=0xc000357ce8) returned 1
	[0201.440] GetFileType (hFile=0xd4) returned 0x1
	[0201.441] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x19ec, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=6636) returned 1
	[0201.441] GetFileType (hFile=0xd4) returned 0x1
	[0201.441] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=6636) returned 1
	[0201.441] WriteFile (in: hFile=0xd4, lpBuffer=0xc00033b500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc00033b500*, lpNumberOfBytesWritten=0xc000357ccc*=0x230, lpOverlapped=0xc000357ce8) returned 1
	[0201.441] GetFileType (hFile=0xd4) returned 0x1
	[0201.441] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x19ec, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=6636) returned 1
	[0201.442] CloseHandle (hObject=0xd4) returned 1
	[0201.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf.egmwv")) returned 0x20
	[0201.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1
	[0201.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf")) returned 0x20
	[0201.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x20) returned 1
	[0201.444] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.445] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0201.445] ReadFile (in: hFile=0xd4, lpBuffer=0xc0000d8000, nNumberOfBytesToRead=0x1df4, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d8000*, lpNumberOfBytesRead=0xc000389cec*=0x1df4, lpOverlapped=0x0) returned 1
	[0201.489] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0201.489] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ca | out: pbBuffer=0xc0002b62ca) returned 1
	[0201.489] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000be402 | out: pbBuffer=0xc0000be402) returned 1
	[0201.489] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0201.490] GetFileType (hFile=0xd4) returned 0x1
	[0201.491] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=7668) returned 1
	[0201.491] WriteFile (in: hFile=0xd4, lpBuffer=0xc000408000*, nNumberOfBytesToWrite=0x1df4, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc000408000*, lpNumberOfBytesWritten=0xc000357ccc*=0x1df4, lpOverlapped=0xc000357ce8) returned 1
	[0201.491] GetFileType (hFile=0xd4) returned 0x1
	[0201.491] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1df4, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=7668) returned 1
	[0201.491] GetFileType (hFile=0xd4) returned 0x1
	[0201.491] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=7668) returned 1
	[0201.492] WriteFile (in: hFile=0xd4, lpBuffer=0xc000400e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc000400e00*, lpNumberOfBytesWritten=0xc000357ccc*=0x233, lpOverlapped=0xc000357ce8) returned 1
	[0201.492] GetFileType (hFile=0xd4) returned 0x1
	[0201.492] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1df4, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=7668) returned 1
	[0201.492] CloseHandle (hObject=0xd4) returned 1
	[0201.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf.egmwv")) returned 0x20
	[0201.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1
	[0201.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1
	[0201.628] SetEvent (hEvent=0x148) returned 1
	[0201.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1
	[0201.761] SetEvent (hEvent=0xc8) returned 1
	[0201.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1
	[0201.935] SetEvent (hEvent=0x70) returned 1
	[0201.935] SetEvent (hEvent=0x150) returned 1
	[0201.935] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1
	[0201.954] SetEvent (hEvent=0x148) returned 1
	[0201.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1
	[0201.969] SetEvent (hEvent=0xc8) returned 1
	[0201.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1
	[0201.984] SetEvent (hEvent=0x150) returned 1
	[0201.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1
	[0202.011] SetEvent (hEvent=0x70) returned 1
	[0202.012] SetEvent (hEvent=0x148) returned 1
	[0202.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1
	[0202.032] SetEvent (hEvent=0xc8) returned 1
	[0202.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1
	[0202.049] SetEvent (hEvent=0x150) returned 1
	[0202.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1
	[0202.102] SetEvent (hEvent=0x70) returned 1
	[0202.102] SetEvent (hEvent=0x148) returned 1
	[0202.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1
	[0202.118] SetEvent (hEvent=0xc8) returned 1
	[0202.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1
	[0202.146] SetEvent (hEvent=0x150) returned 1
	[0202.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1
	[0202.163] SetEvent (hEvent=0x148) returned 1
	[0202.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1
	[0202.180] SetEvent (hEvent=0xc8) returned 1
	[0202.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1
	[0202.202] SetEvent (hEvent=0x70) returned 1
	[0202.203] SetEvent (hEvent=0x150) returned 1
	[0202.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1
	[0202.226] SetEvent (hEvent=0x148) returned 1
	[0202.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1
	[0202.243] SetEvent (hEvent=0xc8) returned 1
	[0202.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1
	[0202.257] SetEvent (hEvent=0x150) returned 1
	[0202.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1
	[0202.283] SetEvent (hEvent=0x70) returned 1
	[0202.284] SetEvent (hEvent=0x148) returned 1
	[0202.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1
	[0202.303] SetEvent (hEvent=0xc8) returned 1
	[0202.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1
	[0202.321] SetEvent (hEvent=0x150) returned 1
	[0202.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1
	[0202.334] SetEvent (hEvent=0x148) returned 1
	[0202.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1
	[0202.347] SetEvent (hEvent=0x14c) returned 1
	[0202.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1
	[0202.396] SetEvent (hEvent=0x150) returned 1
	[0202.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1
	[0202.409] SetEvent (hEvent=0x148) returned 1
	[0202.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1
	[0202.432] SetEvent (hEvent=0x70) returned 1
	[0202.432] SetEvent (hEvent=0x14c) returned 1
	[0202.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1
	[0202.453] SetEvent (hEvent=0x150) returned 1
	[0202.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1
	[0202.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1
	[0202.496] SetEvent (hEvent=0x70) returned 1
	[0202.496] SetEvent (hEvent=0x14c) returned 1
	[0202.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1
	[0202.513] SetEvent (hEvent=0x150) returned 1
	[0202.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1
	[0202.533] SetEvent (hEvent=0x148) returned 1
	[0202.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1
	[0202.559] SetEvent (hEvent=0x14c) returned 1
	[0202.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1
	[0202.575] SetEvent (hEvent=0x150) returned 1
	[0202.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1
	[0202.587] SetEvent (hEvent=0x148) returned 1
	[0202.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1
	[0202.607] SetEvent (hEvent=0x14c) returned 1
	[0202.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1
	[0202.640] SetEvent (hEvent=0x150) returned 1
	[0202.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1
	[0202.659] SetEvent (hEvent=0x148) returned 1
	[0202.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1
	[0202.676] SetEvent (hEvent=0x14c) returned 1
	[0202.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1
	[0202.701] SetEvent (hEvent=0x70) returned 1
	[0202.701] SetEvent (hEvent=0x150) returned 1
	[0202.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1
	[0202.721] SetEvent (hEvent=0x148) returned 1
	[0202.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1
	[0202.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1
	[0202.770] SetEvent (hEvent=0x70) returned 1
	[0202.770] SetEvent (hEvent=0x150) returned 1
	[0202.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1
	[0202.785] SetEvent (hEvent=0x148) returned 1
	[0202.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1
	[0202.800] SetEvent (hEvent=0x14c) returned 1
	[0202.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1
	[0202.827] SetEvent (hEvent=0x150) returned 1
	[0202.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1
	[0202.843] SetEvent (hEvent=0x148) returned 1
	[0202.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1
	[0202.852] SetEvent (hEvent=0x14c) returned 1
	[0202.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1
	[0202.880] SetEvent (hEvent=0x70) returned 1
	[0202.881] SetEvent (hEvent=0x150) returned 1
	[0202.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1
	[0202.987] SetEvent (hEvent=0x148) returned 1
	[0202.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1
	[0203.007] SetEvent (hEvent=0x14c) returned 1
	[0203.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1
	[0203.022] SetEvent (hEvent=0x150) returned 1
	[0203.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1
	[0203.043] SetEvent (hEvent=0x70) returned 1
	[0203.043] SetEvent (hEvent=0x148) returned 1
	[0203.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1
	[0203.063] SetEvent (hEvent=0x14c) returned 1
	[0203.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1
	[0203.080] SetEvent (hEvent=0x150) returned 1
	[0203.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1
	[0203.149] SetEvent (hEvent=0x148) returned 1
	[0203.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1
	[0203.172] SetEvent (hEvent=0x14c) returned 1
	[0203.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1
	[0203.190] SetEvent (hEvent=0x15c) returned 1
	[0203.190] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1
	[0203.202] SetEvent (hEvent=0xc8) returned 1
	[0203.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1
	[0203.216] SetEvent (hEvent=0x14c) returned 1
	[0203.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1
	[0203.230] SetEvent (hEvent=0xe4) returned 1
	[0203.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1
	[0203.256] SetEvent (hEvent=0xc8) returned 1
	[0203.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1
	[0203.263] SetEvent (hEvent=0x60) returned 1
	[0203.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1
	[0203.275] SetEvent (hEvent=0xc0) returned 1
	[0203.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1
	[0203.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1
	[0203.353] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0203.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1
	[0203.397] SetEvent (hEvent=0x150) returned 1
	[0203.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1
	[0203.418] SetEvent (hEvent=0x90) returned 1
	[0203.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1
	[0203.439] SetEvent (hEvent=0x70) returned 1
	[0203.439] SetEvent (hEvent=0xc0) returned 1
	[0203.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1
	[0203.461] SetEvent (hEvent=0x150) returned 1
	[0203.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1
	[0203.472] SetEvent (hEvent=0xe4) returned 1
	[0203.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1
	[0203.492] SetEvent (hEvent=0xc0) returned 1
	[0203.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1
	[0203.519] SetEvent (hEvent=0x70) returned 1
	[0203.519] SetEvent (hEvent=0x150) returned 1
	[0203.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1
	[0203.534] SetEvent (hEvent=0x90) returned 1
	[0203.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1
	[0203.554] SetEvent (hEvent=0xc0) returned 1
	[0203.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1
	[0203.569] SetEvent (hEvent=0x150) returned 1
	[0203.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1
	[0203.593] SetEvent (hEvent=0x70) returned 1
	[0203.593] SetEvent (hEvent=0x90) returned 1
	[0203.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1
	[0203.620] SetEvent (hEvent=0xc0) returned 1
	[0203.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1
	[0203.645] SetEvent (hEvent=0x150) returned 1
	[0203.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1
	[0203.658] SetEvent (hEvent=0x90) returned 1
	[0203.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0203.677] SetEvent (hEvent=0x60) returned 1
	[0203.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1
	[0203.703] SetEvent (hEvent=0x150) returned 1
	[0203.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1
	[0203.720] SetEvent (hEvent=0x90) returned 1
	[0203.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1
	[0203.733] SetEvent (hEvent=0xc0) returned 1
	[0203.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1
	[0203.751] SetEvent (hEvent=0x60) returned 1
	[0203.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1
	[0203.779] SetEvent (hEvent=0x90) returned 1
	[0203.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1
	[0203.800] SetEvent (hEvent=0xc0) returned 1
	[0203.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1
	[0203.814] SetEvent (hEvent=0x150) returned 1
	[0203.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1
	[0203.835] SetEvent (hEvent=0x70) returned 1
	[0203.835] SetEvent (hEvent=0x90) returned 1
	[0203.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1
	[0203.853] SetEvent (hEvent=0xc0) returned 1
	[0203.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1
	[0203.877] SetEvent (hEvent=0x150) returned 1
	[0203.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1
	[0203.891] SetEvent (hEvent=0x90) returned 1
	[0203.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1
	[0203.910] SetEvent (hEvent=0xc0) returned 1
	[0203.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1
	[0203.934] SetEvent (hEvent=0x150) returned 1
	[0203.935] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1
	[0203.955] SetEvent (hEvent=0x90) returned 1
	[0203.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1
	[0203.968] SetEvent (hEvent=0xc0) returned 1
	[0203.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1
	[0203.984] SetEvent (hEvent=0x150) returned 1
	[0203.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1
	[0204.008] SetEvent (hEvent=0x90) returned 1
	[0204.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1
	[0204.029] SetEvent (hEvent=0xc0) returned 1
	[0204.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1
	[0204.044] SetEvent (hEvent=0x150) returned 1
	[0204.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1
	[0204.059] SetEvent (hEvent=0x90) returned 1
	[0204.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1
	[0204.083] SetEvent (hEvent=0xc0) returned 1
	[0204.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1
	[0204.104] SetEvent (hEvent=0x150) returned 1
	[0204.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1
	[0204.174] SetEvent (hEvent=0xc8) returned 1
	[0204.174] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1
	[0204.195] SetEvent (hEvent=0x70) returned 1
	[0204.196] SetEvent (hEvent=0xc0) returned 1
	[0204.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1
	[0204.243] SetEvent (hEvent=0x150) returned 1
	[0204.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1
	[0204.266] SetEvent (hEvent=0x90) returned 1
	[0204.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1
	[0204.283] SetEvent (hEvent=0xc0) returned 1
	[0204.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1
	[0204.307] SetEvent (hEvent=0x70) returned 1
	[0204.307] SetEvent (hEvent=0x150) returned 1
	[0204.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1
	[0204.329] SetEvent (hEvent=0x90) returned 1
	[0204.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1
	[0204.344] SetEvent (hEvent=0xc0) returned 1
	[0204.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1
	[0204.362] SetEvent (hEvent=0x150) returned 1
	[0204.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1
	[0204.384] SetEvent (hEvent=0x70) returned 1
	[0204.385] SetEvent (hEvent=0x90) returned 1
	[0204.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1
	[0204.421] SetEvent (hEvent=0xc0) returned 1
	[0204.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1
	[0204.440] SetEvent (hEvent=0x150) returned 1
	[0204.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1
	[0204.458] SetEvent (hEvent=0x90) returned 1
	[0204.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1
	[0204.489] SetEvent (hEvent=0x70) returned 1
	[0204.489] SetEvent (hEvent=0x15c) returned 1
	[0204.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1
	[0204.517] SetEvent (hEvent=0x150) returned 1
	[0204.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1
	[0204.542] SetEvent (hEvent=0x90) returned 1
	[0204.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0204.556] SetEvent (hEvent=0x15c) returned 1
	[0204.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1
	[0204.577] SetEvent (hEvent=0x70) returned 1
	[0204.577] SetEvent (hEvent=0x150) returned 1
	[0204.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1
	[0204.598] SetEvent (hEvent=0x90) returned 1
	[0204.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1
	[0204.621] SetEvent (hEvent=0x15c) returned 1
	[0204.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1
	[0204.635] SetEvent (hEvent=0x150) returned 1
	[0204.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1
	[0204.658] SetEvent (hEvent=0x70) returned 1
	[0204.658] SetEvent (hEvent=0x90) returned 1
	[0204.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1
	[0204.678] SetEvent (hEvent=0x15c) returned 1
	[0204.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1
	[0204.699] SetEvent (hEvent=0x150) returned 1
	[0204.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1
	[0204.714] SetEvent (hEvent=0x90) returned 1
	[0204.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1
	[0204.743] SetEvent (hEvent=0x70) returned 1
	[0204.743] SetEvent (hEvent=0x15c) returned 1
	[0204.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1
	[0204.763] SetEvent (hEvent=0x150) returned 1
	[0204.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1
	[0204.779] SetEvent (hEvent=0x90) returned 1
	[0204.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1
	[0204.794] SetEvent (hEvent=0x15c) returned 1
	[0204.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1
	[0204.820] SetEvent (hEvent=0x70) returned 1
	[0204.820] SetEvent (hEvent=0x150) returned 1
	[0204.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1
	[0204.841] SetEvent (hEvent=0x90) returned 1
	[0204.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1
	[0204.860] SetEvent (hEvent=0x15c) returned 1
	[0204.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1
	[0204.874] SetEvent (hEvent=0x150) returned 1
	[0204.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1
	[0204.895] SetEvent (hEvent=0x90) returned 1
	[0204.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1
	[0204.922] SetEvent (hEvent=0x15c) returned 1
	[0204.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1
	[0205.030] SetEvent (hEvent=0x150) returned 1
	[0205.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1
	[0205.044] SetEvent (hEvent=0x90) returned 1
	[0205.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1
	[0205.065] SetEvent (hEvent=0x70) returned 1
	[0205.065] SetEvent (hEvent=0x15c) returned 1
	[0205.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1
	[0205.085] SetEvent (hEvent=0x150) returned 1
	[0205.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1
	[0205.114] SetEvent (hEvent=0x90) returned 1
	[0205.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1
	[0205.204] SetEvent (hEvent=0x70) returned 1
	[0205.204] SetEvent (hEvent=0x15c) returned 1
	[0205.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1
	[0205.231] SetEvent (hEvent=0x70) returned 1
	[0205.231] SetEvent (hEvent=0x150) returned 1
	[0205.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1
	[0205.256] SetEvent (hEvent=0x90) returned 1
	[0205.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1
	[0205.275] SetEvent (hEvent=0x15c) returned 1
	[0205.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1
	[0205.289] SetEvent (hEvent=0x150) returned 1
	[0205.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1
	[0205.309] SetEvent (hEvent=0x70) returned 1
	[0205.309] SetEvent (hEvent=0x90) returned 1
	[0205.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1
	[0205.331] SetEvent (hEvent=0x15c) returned 1
	[0205.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1
	[0205.349] SetEvent (hEvent=0x150) returned 1
	[0205.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1
	[0205.362] SetEvent (hEvent=0x90) returned 1
	[0205.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1
	[0205.381] SetEvent (hEvent=0x15c) returned 1
	[0205.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1
	[0205.418] SetEvent (hEvent=0x150) returned 1
	[0205.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1
	[0205.436] SetEvent (hEvent=0x90) returned 1
	[0205.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1
	[0205.452] SetEvent (hEvent=0x15c) returned 1
	[0205.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1
	[0205.471] SetEvent (hEvent=0x150) returned 1
	[0205.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1
	[0205.496] SetEvent (hEvent=0x90) returned 1
	[0205.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1
	[0205.517] SetEvent (hEvent=0x15c) returned 1
	[0205.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1
	[0205.534] SetEvent (hEvent=0x150) returned 1
	[0205.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1
	[0205.552] SetEvent (hEvent=0x90) returned 1
	[0205.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0205.575] SetEvent (hEvent=0x15c) returned 1
	[0205.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1
	[0205.598] SetEvent (hEvent=0x150) returned 1
	[0205.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1
	[0205.612] SetEvent (hEvent=0x90) returned 1
	[0205.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1
	[0205.633] SetEvent (hEvent=0xc0) returned 1
	[0205.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1
	[0205.662] SetEvent (hEvent=0x150) returned 1
	[0205.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf93000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf93000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1
	[0205.676] SetEvent (hEvent=0x90) returned 1
	[0205.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28f0200, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf28f0200, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1
	[0205.688] SetEvent (hEvent=0x15c) returned 1
	[0205.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa241400, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa241400, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0205.706] SetEvent (hEvent=0x150) returned 1
	[0205.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef951100, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef951100, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1
	[0205.732] SetEvent (hEvent=0x90) returned 1
	[0205.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8660ce00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8660ce00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1
	[0205.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1
	[0205.816] SetEvent (hEvent=0x70) returned 1
	[0205.817] SetEvent (hEvent=0x150) returned 1
	[0205.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1
	[0205.841] SetEvent (hEvent=0x90) returned 1
	[0205.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1
	[0205.853] SetEvent (hEvent=0x15c) returned 1
	[0205.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1
	[0205.873] SetEvent (hEvent=0x150) returned 1
	[0205.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787d00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd787d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1
	[0205.888] SetEvent (hEvent=0x90) returned 1
	[0205.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a81c00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2a81c00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1
	[0205.909] SetEvent (hEvent=0x70) returned 1
	[0205.909] SetEvent (hEvent=0x15c) returned 1
	[0205.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc465ee00, ftCreationTime.dwHighDateTime=0x1bd4bff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc465ee00, ftLastWriteTime.dwHighDateTime=0x1bd4bff, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1
	[0205.931] SetEvent (hEvent=0x150) returned 1
	[0205.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cb3000, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95cb3000, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1
	[0205.949] SetEvent (hEvent=0x90) returned 1
	[0205.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d81900, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27d81900, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1
	[0205.969] SetEvent (hEvent=0x15c) returned 1
	[0205.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57852200, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57852200, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1
	[0205.992] SetEvent (hEvent=0x150) returned 1
	[0205.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a68a00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7a68a00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1
	[0206.015] SetEvent (hEvent=0x90) returned 1
	[0206.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1dc9900, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1dc9900, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1
	[0206.037] SetEvent (hEvent=0x15c) returned 1
	[0206.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ec7300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7ec7300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1
	[0206.050] SetEvent (hEvent=0x150) returned 1
	[0206.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bc3900, ftCreationTime.dwHighDateTime=0x1bd4af5, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bc3900, ftLastWriteTime.dwHighDateTime=0x1bd4af5, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1
	[0206.068] SetEvent (hEvent=0x90) returned 1
	[0206.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1131c200, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1131c200, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1
	[0206.089] SetEvent (hEvent=0x15c) returned 1
	[0206.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51904f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51904f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1
	[0206.110] SetEvent (hEvent=0x150) returned 1
	[0206.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1
	[0206.123] SetEvent (hEvent=0x90) returned 1
	[0206.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1
	[0206.141] SetEvent (hEvent=0x15c) returned 1
	[0206.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000423770 | out: lpFileInformation=0xc000423770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadef6200, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadef6200, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1
	[0206.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5bdb00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa5bdb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1
	[0206.218] SetEvent (hEvent=0x90) returned 1
	[0206.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bb4600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bb4600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1
	[0206.238] SetEvent (hEvent=0x15c) returned 1
	[0206.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58a1900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58a1900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1
	[0206.253] SetEvent (hEvent=0x150) returned 1
	[0206.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c1c00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2c1c00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1
	[0206.266] SetEvent (hEvent=0x90) returned 1
	[0206.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb458ec00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb458ec00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1
	[0206.285] SetEvent (hEvent=0x70) returned 1
	[0206.286] SetEvent (hEvent=0x15c) returned 1
	[0206.286] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f69200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1f69200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1
	[0206.306] SetEvent (hEvent=0x150) returned 1
	[0206.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b40e00, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54b40e00, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1
	[0206.321] SetEvent (hEvent=0x90) returned 1
	[0206.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c56500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c56500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1
	[0206.335] SetEvent (hEvent=0x15c) returned 1
	[0206.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c8c800, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2c8c800, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1
	[0206.362] SetEvent (hEvent=0x70) returned 1
	[0206.362] SetEvent (hEvent=0x150) returned 1
	[0206.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf943800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf943800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1
	[0206.380] SetEvent (hEvent=0x90) returned 1
	[0206.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6bcf00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb6bcf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1
	[0206.396] SetEvent (hEvent=0x15c) returned 1
	[0206.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcdfcc00, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcdfcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1
	[0206.412] SetEvent (hEvent=0x150) returned 1
	[0206.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae630b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae630b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1
	[0206.439] SetEvent (hEvent=0x70) returned 1
	[0206.439] SetEvent (hEvent=0x90) returned 1
	[0206.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad31de00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad31de00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1
	[0206.458] SetEvent (hEvent=0x15c) returned 1
	[0206.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac00b100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac00b100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1
	[0206.474] SetEvent (hEvent=0x150) returned 1
	[0206.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacf8400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaacf8400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1
	[0206.487] SetEvent (hEvent=0x90) returned 1
	[0206.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86d2a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa86d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1
	[0206.505] SetEvent (hEvent=0xe4) returned 1
	[0206.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa73bfd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa73bfd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1
	[0206.529] SetEvent (hEvent=0x150) returned 1
	[0206.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60ad000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60ad000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1
	[0206.549] SetEvent (hEvent=0x90) returned 1
	[0206.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d9a300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4d9a300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1
	[0206.563] SetEvent (hEvent=0x15c) returned 1
	[0206.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a87600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3a87600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1
	[0206.582] SetEvent (hEvent=0x150) returned 1
	[0206.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2774900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2774900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1
	[0206.606] SetEvent (hEvent=0x90) returned 1
	[0206.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50d3100, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf50d3100, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1
	[0206.625] SetEvent (hEvent=0x15c) returned 1
	[0206.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb4f600, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb4f600, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1
	[0206.640] SetEvent (hEvent=0x150) returned 1
	[0206.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dd7200, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4dd7200, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1
	[0206.657] SetEvent (hEvent=0x90) returned 1
	[0206.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef0a100, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbef0a100, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1
	[0206.682] SetEvent (hEvent=0x15c) returned 1
	[0206.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2364900, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2364900, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1
	[0206.703] SetEvent (hEvent=0x150) returned 1
	[0206.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4adb300, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4adb300, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1
	[0206.716] SetEvent (hEvent=0x90) returned 1
	[0206.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad86a500, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad86a500, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1
	[0206.738] SetEvent (hEvent=0xe4) returned 1
	[0206.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fdeb00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95fdeb00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1
	[0206.770] SetEvent (hEvent=0xc8) returned 1
	[0206.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963a600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9963a600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1
	[0206.786] SetEvent (hEvent=0x90) returned 1
	[0206.786] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf455c700, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf455c700, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1
	[0206.799] SetEvent (hEvent=0x15c) returned 1
	[0206.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff1000, ftCreationTime.dwHighDateTime=0x1bd4bfe, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ff1000, ftLastWriteTime.dwHighDateTime=0x1bd4bfe, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1
	[0206.820] SetEvent (hEvent=0x70) returned 1
	[0206.820] SetEvent (hEvent=0xc8) returned 1
	[0206.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d752900, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d752900, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1
	[0206.842] SetEvent (hEvent=0x90) returned 1
	[0206.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97014c00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97014c00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1
	[0206.857] SetEvent (hEvent=0x150) returned 1
	[0206.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e1a200, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49e1a200, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1
	[0206.887] SetEvent (hEvent=0x70) returned 1
	[0206.887] SetEvent (hEvent=0x150) returned 1
	[0206.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cfde00, ftCreationTime.dwHighDateTime=0x1bf3242, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80cfde00, ftLastWriteTime.dwHighDateTime=0x1bf3242, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1
	[0206.909] SetEvent (hEvent=0x90) returned 1
	[0206.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fe7000, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4fe7000, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1
	[0206.926] SetEvent (hEvent=0x15c) returned 1
	[0206.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb44f00, ftCreationTime.dwHighDateTime=0x1bd4c0c, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4eb44f00, ftLastWriteTime.dwHighDateTime=0x1bd4c0c, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1
	[0206.941] SetEvent (hEvent=0x150) returned 1
	[0206.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02ca800, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf02ca800, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1
	[0206.963] SetEvent (hEvent=0x70) returned 1
	[0206.963] SetEvent (hEvent=0x90) returned 1
	[0206.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd62f9d00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd62f9d00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1
	[0207.251] SetEvent (hEvent=0x15c) returned 1
	[0207.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1
	[0207.269] SetEvent (hEvent=0x150) returned 1
	[0207.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1
	[0207.287] SetEvent (hEvent=0x90) returned 1
	[0207.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1
	[0207.304] SetEvent (hEvent=0x15c) returned 1
	[0207.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1
	[0207.328] SetEvent (hEvent=0x150) returned 1
	[0207.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1
	[0207.343] SetEvent (hEvent=0x90) returned 1
	[0207.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1
	[0207.358] SetEvent (hEvent=0x15c) returned 1
	[0207.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1
	[0207.377] SetEvent (hEvent=0xc0) returned 1
	[0207.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1
	[0207.401] SetEvent (hEvent=0x90) returned 1
	[0207.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1
	[0207.431] SetEvent (hEvent=0x15c) returned 1
	[0207.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1
	[0207.446] SetEvent (hEvent=0x150) returned 1
	[0207.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1
	[0207.463] SetEvent (hEvent=0xc0) returned 1
	[0207.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1
	[0207.487] SetEvent (hEvent=0x15c) returned 1
	[0207.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1
	[0207.505] SetEvent (hEvent=0x150) returned 1
	[0207.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1
	[0207.520] SetEvent (hEvent=0x90) returned 1
	[0207.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1
	[0207.538] SetEvent (hEvent=0x15c) returned 1
	[0207.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1
	[0207.566] SetEvent (hEvent=0x150) returned 1
	[0207.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ce600, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x636ce600, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1
	[0207.580] SetEvent (hEvent=0x90) returned 1
	[0207.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af3b00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0af3b00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1
	[0207.591] SetEvent (hEvent=0x15c) returned 1
	[0207.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81f1600, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf81f1600, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1
	[0207.612] SetEvent (hEvent=0x70) returned 1
	[0207.612] SetEvent (hEvent=0x150) returned 1
	[0207.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c84900, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0c84900, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1
	[0207.631] SetEvent (hEvent=0x90) returned 1
	[0207.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf971c00, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf971c00, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1
	[0207.646] SetEvent (hEvent=0x15c) returned 1
	[0207.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd54400, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cd54400, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1
	[0207.669] SetEvent (hEvent=0x70) returned 1
	[0207.669] SetEvent (hEvent=0x150) returned 1
	[0207.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1461c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1461c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1
	[0207.685] SetEvent (hEvent=0x90) returned 1
	[0207.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa014ef00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa014ef00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1
	[0207.707] SetEvent (hEvent=0x15c) returned 1
	[0207.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10883400, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10883400, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1
	[0207.723] SetEvent (hEvent=0x150) returned 1
	[0207.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe38a5000, ftCreationTime.dwHighDateTime=0x1bd4b19, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe38a5000, ftLastWriteTime.dwHighDateTime=0x1bd4b19, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1
	[0207.738] SetEvent (hEvent=0x90) returned 1
	[0207.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cafd00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9cafd00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1
	[0207.757] SetEvent (hEvent=0x15c) returned 1
	[0207.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6576c00, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6576c00, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1
	[0207.777] SetEvent (hEvent=0x150) returned 1
	[0207.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f51200, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3f51200, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1
	[0207.794] SetEvent (hEvent=0x90) returned 1
	[0207.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c3e500, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2c3e500, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1
	[0207.808] SetEvent (hEvent=0x15c) returned 1
	[0207.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c49d600, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c49d600, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1
	[0207.828] SetEvent (hEvent=0x70) returned 1
	[0207.828] SetEvent (hEvent=0x150) returned 1
	[0207.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e63d00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48e63d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1
	[0207.847] SetEvent (hEvent=0x90) returned 1
	[0207.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb62b00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb62b00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1
	[0207.862] SetEvent (hEvent=0x15c) returned 1
	[0207.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aad3100, ftCreationTime.dwHighDateTime=0x1bd4b1b, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1aad3100, ftLastWriteTime.dwHighDateTime=0x1bd4b1b, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1
	[0207.877] SetEvent (hEvent=0x150) returned 1
	[0207.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98237200, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98237200, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1
	[0207.894] SetEvent (hEvent=0x90) returned 1
	[0207.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b873a00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b873a00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1
	[0207.919] SetEvent (hEvent=0x15c) returned 1
	[0207.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7f800, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5d7f800, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1
	[0207.940] SetEvent (hEvent=0x150) returned 1
	[0207.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db29500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9db29500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1
	[0207.952] SetEvent (hEvent=0x90) returned 1
	[0207.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dc9c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39dc9c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1
	[0207.968] SetEvent (hEvent=0x15c) returned 1
	[0207.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf47e00, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cf47e00, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1
	[0207.989] SetEvent (hEvent=0x150) returned 1
	[0207.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c816800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9c816800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1
	[0208.011] SetEvent (hEvent=0x90) returned 1
	[0208.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159db100, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x159db100, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1
	[0208.021] SetEvent (hEvent=0x15c) returned 1
	[0208.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b503b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b503b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1
	[0208.036] SetEvent (hEvent=0x150) returned 1
	[0208.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7507bb00, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7507bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1
	[0208.059] SetEvent (hEvent=0x90) returned 1
	[0208.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1
	[0208.077] SetEvent (hEvent=0x15c) returned 1
	[0208.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436e0000, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x436e0000, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1
	[0208.088] SetEvent (hEvent=0x150) returned 1
	[0208.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e49800, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39e49800, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1
	[0208.105] SetEvent (hEvent=0x90) returned 1
	[0208.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a09b00, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a09b00, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1
	[0208.130] SetEvent (hEvent=0x15c) returned 1
	[0208.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1
	[0208.153] SetEvent (hEvent=0x150) returned 1
	[0208.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1
	[0208.168] SetEvent (hEvent=0x90) returned 1
	[0208.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1
	[0208.179] SetEvent (hEvent=0x15c) returned 1
	[0208.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90080a00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90080a00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1
	[0208.250] SetEvent (hEvent=0x70) returned 1
	[0208.250] SetEvent (hEvent=0x150) returned 1
	[0208.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1
	[0208.271] SetEvent (hEvent=0x90) returned 1
	[0208.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83101700, ftCreationTime.dwHighDateTime=0x1bd4bdc, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83101700, ftLastWriteTime.dwHighDateTime=0x1bd4bdc, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1
	[0208.279] SetEvent (hEvent=0x60) returned 1
	[0208.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b938600, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b938600, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1
	[0208.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71426a00, ftCreationTime.dwHighDateTime=0x1bd4c04, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71426a00, ftLastWriteTime.dwHighDateTime=0x1bd4c04, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1
	[0208.296] SetEvent (hEvent=0xe4) returned 1
	[0208.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1
	[0208.310] SetEvent (hEvent=0xc8) returned 1
	[0208.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b48ba00, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b48ba00, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1
	[0208.322] SetEvent (hEvent=0x148) returned 1
	[0208.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e4b800, ftCreationTime.dwHighDateTime=0x1bd4bf1, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1e4b800, ftLastWriteTime.dwHighDateTime=0x1bd4bf1, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1
	[0208.334] SetEvent (hEvent=0xe4) returned 1
	[0208.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa59600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa59600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1
	[0208.389] SetEvent (hEvent=0x14c) returned 1
	[0208.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd4300, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3cd4300, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1
	[0208.399] SetEvent (hEvent=0x90) returned 1
	[0208.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949ef200, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x949ef200, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1
	[0208.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58502100, ftCreationTime.dwHighDateTime=0x1bf0ae8, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58502100, ftLastWriteTime.dwHighDateTime=0x1bf0ae8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1
	[0208.440] SetEvent (hEvent=0x14c) returned 1
	[0208.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc19dc700, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc19dc700, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1
	[0208.449] SetEvent (hEvent=0x60) returned 1
	[0208.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1f0e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a1f0e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1
	[0208.468] SetEvent (hEvent=0x150) returned 1
	[0208.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bef4100, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bef4100, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0208.479] SetEvent (hEvent=0x15c) returned 1
	[0208.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7410300, ftCreationTime.dwHighDateTime=0x1bf3bd8, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7410300, ftLastWriteTime.dwHighDateTime=0x1bf3bd8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1
	[0208.494] SetEvent (hEvent=0xc0) returned 1
	[0208.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1
	[0208.505] SetEvent (hEvent=0x5c) returned 1
	[0208.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c11ec00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c11ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0208.536] SetEvent (hEvent=0x70) returned 1
	[0208.536] SetEvent (hEvent=0x15c) returned 1
	[0208.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f3db00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20f3db00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1
	[0208.570] SetEvent (hEvent=0x70) returned 1
	[0208.571] SetEvent (hEvent=0xc0) returned 1
	[0208.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146a8500, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x146a8500, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1
	[0208.584] SetEvent (hEvent=0x90) returned 1
	[0208.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37eef900, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37eef900, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1
	[0208.601] SetEvent (hEvent=0x15c) returned 1
	[0208.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ede100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98ede100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1
	[0208.615] SetEvent (hEvent=0xc0) returned 1
	[0208.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6428b00, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6428b00, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1
	[0208.636] SetEvent (hEvent=0x90) returned 1
	[0208.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17dd700, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc17dd700, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1
	[0208.660] SetEvent (hEvent=0x15c) returned 1
	[0208.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56c900, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba56c900, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1
	[0208.717] SetEvent (hEvent=0x148) returned 1
	[0208.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee5f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ee5f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1
	[0208.728] SetEvent (hEvent=0x90) returned 1
	[0208.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9b2000, ftCreationTime.dwHighDateTime=0x1bd4bf2, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9b2000, ftLastWriteTime.dwHighDateTime=0x1bd4bf2, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1
	[0208.746] SetEvent (hEvent=0x15c) returned 1
	[0208.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570a100, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5570a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1
	[0208.769] SetEvent (hEvent=0x148) returned 1
	[0208.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a750c00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a750c00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1
	[0208.787] SetEvent (hEvent=0x90) returned 1
	[0208.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e4b00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20e4b00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1
	[0208.799] SetEvent (hEvent=0x15c) returned 1
	[0208.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1
	[0208.817] SetEvent (hEvent=0x148) returned 1
	[0208.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b0900, ftCreationTime.dwHighDateTime=0x1bd6360, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d9b0900, ftLastWriteTime.dwHighDateTime=0x1bd6360, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1
	[0208.843] SetEvent (hEvent=0x90) returned 1
	[0208.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1
	[0208.862] SetEvent (hEvent=0x15c) returned 1
	[0208.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1
	[0208.874] SetEvent (hEvent=0x148) returned 1
	[0208.874] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1
	[0208.895] SetEvent (hEvent=0x90) returned 1
	[0208.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1
	[0208.919] SetEvent (hEvent=0x15c) returned 1
	[0208.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1
	[0208.933] SetEvent (hEvent=0x148) returned 1
	[0208.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1
	[0208.945] SetEvent (hEvent=0x90) returned 1
	[0208.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1
	[0208.969] SetEvent (hEvent=0x70) returned 1
	[0208.969] SetEvent (hEvent=0x15c) returned 1
	[0208.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1
	[0208.994] SetEvent (hEvent=0x148) returned 1
	[0208.994] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1
	[0209.011] SetEvent (hEvent=0x90) returned 1
	[0209.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1
	[0209.021] SetEvent (hEvent=0x15c) returned 1
	[0209.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1
	[0209.129] SetEvent (hEvent=0x70) returned 1
	[0209.129] SetEvent (hEvent=0x148) returned 1
	[0209.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1
	[0209.149] SetEvent (hEvent=0x90) returned 1
	[0209.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1
	[0209.167] SetEvent (hEvent=0x15c) returned 1
	[0209.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1
	[0209.182] SetEvent (hEvent=0x148) returned 1
	[0209.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd6c900, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cd6c900, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1
	[0209.202] SetEvent (hEvent=0x90) returned 1
	[0209.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1
	[0209.228] SetEvent (hEvent=0x15c) returned 1
	[0209.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1
	[0209.317] SetEvent (hEvent=0x148) returned 1
	[0209.318] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1
	[0209.331] SetEvent (hEvent=0x90) returned 1
	[0209.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1
	[0209.382] SetEvent (hEvent=0x70) returned 1
	[0209.382] SetEvent (hEvent=0x15c) returned 1
	[0209.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1
	[0209.411] SetEvent (hEvent=0x148) returned 1
	[0209.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1
	[0209.440] SetEvent (hEvent=0x90) returned 1
	[0209.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1
	[0209.460] SetEvent (hEvent=0x15c) returned 1
	[0209.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1
	[0209.489] SetEvent (hEvent=0x148) returned 1
	[0209.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1
	[0209.517] SetEvent (hEvent=0x90) returned 1
	[0209.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1
	[0209.538] SetEvent (hEvent=0x15c) returned 1
	[0209.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1
	[0209.556] SetEvent (hEvent=0x148) returned 1
	[0209.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1
	[0209.588] SetEvent (hEvent=0x70) returned 1
	[0209.588] SetEvent (hEvent=0x90) returned 1
	[0209.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1
	[0209.656] SetEvent (hEvent=0x15c) returned 1
	[0209.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1
	[0209.698] SetEvent (hEvent=0x148) returned 1
	[0209.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1
	[0209.718] SetEvent (hEvent=0x90) returned 1
	[0209.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1
	[0209.793] SetEvent (hEvent=0x70) returned 1
	[0209.793] SetEvent (hEvent=0x15c) returned 1
	[0209.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1
	[0209.852] SetEvent (hEvent=0x148) returned 1
	[0209.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1
	[0209.880] SetEvent (hEvent=0x90) returned 1
	[0209.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1
	[0209.892] SetEvent (hEvent=0x15c) returned 1
	[0209.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1
	[0209.910] SetEvent (hEvent=0x148) returned 1
	[0209.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1
	[0209.935] SetEvent (hEvent=0x90) returned 1
	[0209.936] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1
	[0209.953] SetEvent (hEvent=0x15c) returned 1
	[0209.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1
	[0209.969] SetEvent (hEvent=0x148) returned 1
	[0209.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1
	[0209.986] SetEvent (hEvent=0x90) returned 1
	[0209.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1
	[0210.012] SetEvent (hEvent=0x15c) returned 1
	[0210.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1
	[0210.030] SetEvent (hEvent=0x148) returned 1
	[0210.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1
	[0210.044] SetEvent (hEvent=0x90) returned 1
	[0210.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1
	[0210.072] SetEvent (hEvent=0x70) returned 1
	[0210.073] SetEvent (hEvent=0x15c) returned 1
	[0210.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1
	[0210.092] SetEvent (hEvent=0x148) returned 1
	[0210.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1
	[0210.114] SetEvent (hEvent=0x90) returned 1
	[0210.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1
	[0210.127] SetEvent (hEvent=0x15c) returned 1
	[0210.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1
	[0210.145] SetEvent (hEvent=0x148) returned 1
	[0210.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1
	[0210.191] SetEvent (hEvent=0x90) returned 1
	[0210.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1
	[0210.208] SetEvent (hEvent=0x15c) returned 1
	[0210.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1
	[0210.225] SetEvent (hEvent=0xc0) returned 1
	[0210.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1
	[0210.243] SetEvent (hEvent=0x90) returned 1
	[0210.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1
	[0210.270] SetEvent (hEvent=0x15c) returned 1
	[0210.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1
	[0210.286] SetEvent (hEvent=0xc0) returned 1
	[0210.286] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1
	[0210.298] SetEvent (hEvent=0x90) returned 1
	[0210.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1
	[0210.317] SetEvent (hEvent=0x70) returned 1
	[0210.317] SetEvent (hEvent=0x15c) returned 1
	[0210.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1
	[0210.338] SetEvent (hEvent=0xc0) returned 1
	[0210.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1
	[0210.353] SetEvent (hEvent=0x90) returned 1
	[0210.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1
	[0210.387] SetEvent (hEvent=0x15c) returned 1
	[0210.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1
	[0210.406] SetEvent (hEvent=0xc0) returned 1
	[0210.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1
	[0210.441] SetEvent (hEvent=0x90) returned 1
	[0210.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1
	[0210.460] SetEvent (hEvent=0x15c) returned 1
	[0210.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x183cef00, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x183cef00, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1
	[0210.473] SetEvent (hEvent=0xc0) returned 1
	[0210.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4b400, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4b400, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1
	[0210.494] SetEvent (hEvent=0x70) returned 1
	[0210.494] SetEvent (hEvent=0x90) returned 1
	[0210.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1
	[0210.512] SetEvent (hEvent=0x15c) returned 1
	[0210.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1
	[0210.547] SetEvent (hEvent=0x5c) returned 1
	[0210.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1
	[0210.561] SetEvent (hEvent=0x90) returned 1
	[0210.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1
	[0210.577] SetEvent (hEvent=0x15c) returned 1
	[0210.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1
	[0210.600] SetEvent (hEvent=0x5c) returned 1
	[0210.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1
	[0210.619] SetEvent (hEvent=0x90) returned 1
	[0210.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1
	[0210.634] SetEvent (hEvent=0x15c) returned 1
	[0210.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1
	[0210.651] SetEvent (hEvent=0x5c) returned 1
	[0210.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1
	[0210.678] SetEvent (hEvent=0x90) returned 1
	[0210.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1
	[0210.692] SetEvent (hEvent=0x15c) returned 1
	[0210.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1
	[0210.718] SetEvent (hEvent=0x70) returned 1
	[0210.718] SetEvent (hEvent=0x148) returned 1
	[0210.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1
	[0210.732] SetEvent (hEvent=0x90) returned 1
	[0210.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1
	[0210.751] SetEvent (hEvent=0x15c) returned 1
	[0210.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1
	[0210.769] SetEvent (hEvent=0x148) returned 1
	[0210.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1
	[0210.833] SetEvent (hEvent=0x70) returned 1
	[0210.833] SetEvent (hEvent=0x90) returned 1
	[0210.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1
	[0210.849] SetEvent (hEvent=0x15c) returned 1
	[0210.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1
	[0210.868] SetEvent (hEvent=0x148) returned 1
	[0210.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1
	[0210.887] SetEvent (hEvent=0x90) returned 1
	[0210.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20ae00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd20ae00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1
	[0210.899] SetEvent (hEvent=0x15c) returned 1
	[0210.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf830800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf830800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0210.917] SetEvent (hEvent=0x148) returned 1
	[0210.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6aa1600, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6aa1600, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0210.939] SetEvent (hEvent=0x90) returned 1
	[0210.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac703800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac703800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0210.960] SetEvent (hEvent=0x15c) returned 1
	[0210.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed29200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaed29200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0210.972] SetEvent (hEvent=0x148) returned 1
	[0210.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2661900, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2661900, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0210.992] SetEvent (hEvent=0x70) returned 1
	[0210.992] SetEvent (hEvent=0x90) returned 1
	[0210.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f9a000, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5f9a000, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0211.009] SetEvent (hEvent=0x15c) returned 1
	[0211.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e56200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1e56200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0211.029] SetEvent (hEvent=0x148) returned 1
	[0211.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc447bc00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc447bc00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0211.036] SetEvent (hEvent=0x150) returned 1
	[0211.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98d2700, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98d2700, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0211.057] SetEvent (hEvent=0x15c) returned 1
	[0211.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabe5400, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbabe5400, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0211.076] SetEvent (hEvent=0x148) returned 1
	[0211.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0dde00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa0dde00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1
	[0211.117] SetEvent (hEvent=0x70) returned 1
	[0211.117] SetEvent (hEvent=0x150) returned 1
	[0211.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1
	[0211.134] SetEvent (hEvent=0x15c) returned 1
	[0211.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1
	[0211.159] SetEvent (hEvent=0x148) returned 1
	[0211.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1
	[0211.170] SetEvent (hEvent=0xe4) returned 1
	[0211.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1
	[0211.288] SetEvent (hEvent=0x15c) returned 1
	[0211.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1
	[0211.303] SetEvent (hEvent=0x148) returned 1
	[0211.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1
	[0211.331] SetEvent (hEvent=0x70) returned 1
	[0211.331] SetEvent (hEvent=0xe4) returned 1
	[0211.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1
	[0211.350] SetEvent (hEvent=0x15c) returned 1
	[0211.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1
	[0211.365] SetEvent (hEvent=0x148) returned 1
	[0211.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1
	[0211.384] SetEvent (hEvent=0x70) returned 1
	[0211.384] SetEvent (hEvent=0x5c) returned 1
	[0211.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1
	[0211.428] SetEvent (hEvent=0x15c) returned 1
	[0211.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1
	[0211.465] SetEvent (hEvent=0x148) returned 1
	[0211.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0211.483] SetEvent (hEvent=0x5c) returned 1
	[0211.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1
	[0211.490] SetEvent (hEvent=0x15c) returned 1
	[0211.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1
	[0211.512] SetEvent (hEvent=0x148) returned 1
	[0211.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1
	[0211.529] SetEvent (hEvent=0x5c) returned 1
	[0211.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1
	[0211.541] SetEvent (hEvent=0x15c) returned 1
	[0211.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1
	[0211.561] SetEvent (hEvent=0x148) returned 1
	[0211.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1
	[0211.584] SetEvent (hEvent=0x5c) returned 1
	[0211.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1
	[0211.601] SetEvent (hEvent=0x15c) returned 1
	[0211.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1
	[0211.614] SetEvent (hEvent=0x148) returned 1
	[0211.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1
	[0211.640] SetEvent (hEvent=0x70) returned 1
	[0211.640] SetEvent (hEvent=0x5c) returned 1
	[0211.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1
	[0211.659] SetEvent (hEvent=0x15c) returned 1
	[0211.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1
	[0211.673] SetEvent (hEvent=0x148) returned 1
	[0211.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1
	[0211.687] SetEvent (hEvent=0x5c) returned 1
	[0211.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1
	[0211.707] SetEvent (hEvent=0x70) returned 1
	[0211.708] SetEvent (hEvent=0x15c) returned 1
	[0211.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1
	[0211.726] SetEvent (hEvent=0x148) returned 1
	[0211.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1
	[0211.740] SetEvent (hEvent=0x5c) returned 1
	[0211.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1
	[0211.760] SetEvent (hEvent=0x15c) returned 1
	[0211.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1
	[0211.778] SetEvent (hEvent=0x70) returned 1
	[0211.778] SetEvent (hEvent=0x148) returned 1
	[0211.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1
	[0211.797] SetEvent (hEvent=0x5c) returned 1
	[0211.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1
	[0211.812] SetEvent (hEvent=0x15c) returned 1
	[0211.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1
	[0211.825] SetEvent (hEvent=0x148) returned 1
	[0211.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1
	[0211.867] SetEvent (hEvent=0x70) returned 1
	[0211.868] SetEvent (hEvent=0x5c) returned 1
	[0211.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1
	[0211.886] SetEvent (hEvent=0x15c) returned 1
	[0211.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1
	[0211.900] SetEvent (hEvent=0x148) returned 1
	[0211.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1
	[0211.914] SetEvent (hEvent=0x5c) returned 1
	[0211.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1
	[0211.940] SetEvent (hEvent=0x70) returned 1
	[0211.940] SetEvent (hEvent=0xe4) returned 1
	[0211.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1
	[0211.964] SetEvent (hEvent=0x148) returned 1
	[0211.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1
	[0211.978] SetEvent (hEvent=0x5c) returned 1
	[0211.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1
	[0211.990] SetEvent (hEvent=0xe4) returned 1
	[0211.990] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1
	[0212.009] SetEvent (hEvent=0x70) returned 1
	[0212.009] SetEvent (hEvent=0x148) returned 1
	[0212.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1
	[0212.028] SetEvent (hEvent=0x5c) returned 1
	[0212.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1
	[0212.045] SetEvent (hEvent=0xe4) returned 1
	[0212.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1
	[0212.057] SetEvent (hEvent=0x148) returned 1
	[0212.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1
	[0212.077] SetEvent (hEvent=0x5c) returned 1
	[0212.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1
	[0212.099] SetEvent (hEvent=0xe4) returned 1
	[0212.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1
	[0212.118] SetEvent (hEvent=0x148) returned 1
	[0212.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1
	[0212.133] SetEvent (hEvent=0x5c) returned 1
	[0212.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1
	[0212.155] SetEvent (hEvent=0xe4) returned 1
	[0212.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1
	[0212.178] SetEvent (hEvent=0x148) returned 1
	[0212.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1
	[0212.201] SetEvent (hEvent=0x150) returned 1
	[0212.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1
	[0212.213] SetEvent (hEvent=0xe4) returned 1
	[0212.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1
	[0212.233] SetEvent (hEvent=0x148) returned 1
	[0212.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1
	[0212.255] SetEvent (hEvent=0x150) returned 1
	[0212.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1
	[0212.273] SetEvent (hEvent=0xe4) returned 1
	[0212.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1
	[0212.278] SetEvent (hEvent=0x5c) returned 1
	[0212.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1
	[0212.302] SetEvent (hEvent=0x70) returned 1
	[0212.302] SetEvent (hEvent=0x150) returned 1
	[0212.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1
	[0212.324] SetEvent (hEvent=0xe4) returned 1
	[0212.324] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1
	[0212.346] SetEvent (hEvent=0x5c) returned 1
	[0212.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1
	[0212.366] SetEvent (hEvent=0x150) returned 1
	[0212.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1
	[0212.383] SetEvent (hEvent=0xe4) returned 1
	[0212.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1
	[0212.407] SetEvent (hEvent=0x5c) returned 1
	[0212.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1
	[0212.426] SetEvent (hEvent=0x150) returned 1
	[0212.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1
	[0212.483] SetEvent (hEvent=0xe4) returned 1
	[0212.483] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0x1) returned 0x102
	[0212.486] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0212.486] SetEvent (hEvent=0x70) returned 1
	[0212.486] SetEvent (hEvent=0xe4) returned 1
	[0212.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1
	[0212.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1
	[0212.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1
	[0212.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1
	[0212.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1
	[0212.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1
	[0212.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1
	[0212.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1
	[0212.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1
	[0212.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1
	[0212.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1
	[0212.506] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0212.516] SetEvent (hEvent=0x5c) returned 1
	[0212.516] SetEvent (hEvent=0xe4) returned 1
	[0212.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1
	[0212.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1
	[0212.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1
	[0212.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1
	[0212.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1
	[0212.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1
	[0212.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1
	[0212.524] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0212.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1
	[0212.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1
	[0212.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1
	[0212.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1
	[0212.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1
	[0212.647] SetEvent (hEvent=0xe4) returned 1
	[0212.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1
	[0212.744] SetEvent (hEvent=0xc0) returned 1
	[0212.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1
	[0212.929] SetEvent (hEvent=0x70) returned 1
	[0212.929] SetEvent (hEvent=0xac) returned 1
	[0212.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1
	[0212.945] SetEvent (hEvent=0xe4) returned 1
	[0212.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1
	[0212.961] SetEvent (hEvent=0x90) returned 1
	[0212.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1
	[0212.991] SetEvent (hEvent=0xac) returned 1
	[0212.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1
	[0213.008] SetEvent (hEvent=0xe4) returned 1
	[0213.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1
	[0213.017] SetEvent (hEvent=0x90) returned 1
	[0213.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1
	[0213.037] SetEvent (hEvent=0x70) returned 1
	[0213.037] SetEvent (hEvent=0xac) returned 1
	[0213.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1
	[0213.057] SetEvent (hEvent=0xe4) returned 1
	[0213.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1
	[0213.076] SetEvent (hEvent=0x90) returned 1
	[0213.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1
	[0213.088] SetEvent (hEvent=0xac) returned 1
	[0213.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1
	[0213.108] SetEvent (hEvent=0x70) returned 1
	[0213.108] SetEvent (hEvent=0xe4) returned 1
	[0213.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1
	[0213.128] SetEvent (hEvent=0x90) returned 1
	[0213.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1
	[0213.142] SetEvent (hEvent=0xac) returned 1
	[0213.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1
	[0213.159] SetEvent (hEvent=0xe4) returned 1
	[0213.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1
	[0213.179] SetEvent (hEvent=0xc4) returned 1
	[0213.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1
	[0213.205] SetEvent (hEvent=0xac) returned 1
	[0213.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1
	[0213.219] SetEvent (hEvent=0xe4) returned 1
	[0213.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1
	[0213.233] SetEvent (hEvent=0x90) returned 1
	[0213.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1
	[0213.251] SetEvent (hEvent=0xac) returned 1
	[0213.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1
	[0213.363] SetEvent (hEvent=0xe4) returned 1
	[0213.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1
	[0213.378] SetEvent (hEvent=0x90) returned 1
	[0213.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1
	[0213.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1
	[0213.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1
	[0213.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1
	[0213.440] SetEvent (hEvent=0x90) returned 1
	[0213.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1
	[0213.476] SetEvent (hEvent=0xe4) returned 1
	[0213.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1
	[0213.488] SetEvent (hEvent=0x120) returned 1
	[0213.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1
	[0213.572] SetEvent (hEvent=0x70) returned 1
	[0213.572] SetEvent (hEvent=0x90) returned 1
	[0213.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1
	[0213.590] SetEvent (hEvent=0x108) returned 1
	[0213.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1
	[0213.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1
	[0213.617] SetEvent (hEvent=0x68) returned 1
	[0213.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1
	[0213.670] SetEvent (hEvent=0x144) returned 1
	[0213.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1
	[0213.717] SetEvent (hEvent=0x70) returned 1
	[0213.717] SetEvent (hEvent=0xac) returned 1
	[0213.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1
	[0213.737] SetEvent (hEvent=0x120) returned 1
	[0213.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1
	[0213.745] SetEvent (hEvent=0xe4) returned 1
	[0213.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1
	[0213.765] SetEvent (hEvent=0xac) returned 1
	[0213.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1
	[0213.776] SetEvent (hEvent=0x144) returned 1
	[0213.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1
	[0213.808] SetEvent (hEvent=0xe4) returned 1
	[0213.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1
	[0213.813] SetEvent (hEvent=0x120) returned 1
	[0213.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1
	[0213.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1
	[0213.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1
	[0213.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1
	[0213.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1
	[0213.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1
	[0213.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1
	[0213.883] SetEvent (hEvent=0x90) returned 1
	[0213.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1
	[0213.904] SetEvent (hEvent=0x68) returned 1
	[0213.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1
	[0213.945] SetEvent (hEvent=0x108) returned 1
	[0213.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1
	[0214.003] SetEvent (hEvent=0x70) returned 1
	[0214.004] SetEvent (hEvent=0xac) returned 1
	[0214.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1
	[0214.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1
	[0214.039] SetEvent (hEvent=0x108) returned 1
	[0214.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1
	[0214.048] SetEvent (hEvent=0x124) returned 1
	[0214.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1
	[0214.074] SetEvent (hEvent=0x70) returned 1
	[0214.074] SetEvent (hEvent=0x68) returned 1
	[0214.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1
	[0214.102] SetEvent (hEvent=0x108) returned 1
	[0214.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1
	[0214.123] SetEvent (hEvent=0x124) returned 1
	[0214.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1
	[0214.137] SetEvent (hEvent=0x68) returned 1
	[0214.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1
	[0214.148] SetEvent (hEvent=0xac) returned 1
	[0214.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1
	[0214.179] SetEvent (hEvent=0x108) returned 1
	[0214.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1
	[0214.203] SetEvent (hEvent=0x68) returned 1
	[0214.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eb4900, ftCreationTime.dwHighDateTime=0x1bdbf6f, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55eb4900, ftLastWriteTime.dwHighDateTime=0x1bdbf6f, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1
	[0214.219] SetEvent (hEvent=0xac) returned 1
	[0214.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1
	[0214.241] SetEvent (hEvent=0x70) returned 1
	[0214.241] SetEvent (hEvent=0x108) returned 1
	[0214.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1
	[0214.269] SetEvent (hEvent=0x68) returned 1
	[0214.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1
	[0214.279] SetEvent (hEvent=0x124) returned 1
	[0214.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1
	[0214.314] SetEvent (hEvent=0x70) returned 1
	[0214.314] SetEvent (hEvent=0x144) returned 1
	[0214.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c5e300, ftCreationTime.dwHighDateTime=0x1bdbf70, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c5e300, ftLastWriteTime.dwHighDateTime=0x1bdbf70, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1
	[0214.323] SetEvent (hEvent=0x84) returned 1
	[0214.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a35900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a35900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1
	[0214.342] SetEvent (hEvent=0x68) returned 1
	[0214.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a05b300, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a05b300, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1
	[0214.368] SetEvent (hEvent=0x124) returned 1
	[0214.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50dbc900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50dbc900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1
	[0214.377] SetEvent (hEvent=0xac) returned 1
	[0214.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d84e00, ftCreationTime.dwHighDateTime=0x1c026b6, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5d84e00, ftLastWriteTime.dwHighDateTime=0x1c026b6, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1
	[0214.391] SetEvent (hEvent=0x144) returned 1
	[0214.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7962500, ftCreationTime.dwHighDateTime=0x1c03d89, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7962500, ftLastWriteTime.dwHighDateTime=0x1c03d89, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1
	[0214.421] SetEvent (hEvent=0x68) returned 1
	[0214.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912cb00, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa912cb00, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1
	[0214.425] SetEvent (hEvent=0x84) returned 1
	[0214.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1
	[0214.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1
	[0214.450] SetEvent (hEvent=0x120) returned 1
	[0214.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1
	[0214.458] SetEvent (hEvent=0xe4) returned 1
	[0214.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1
	[0214.586] SetEvent (hEvent=0x68) returned 1
	[0214.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1
	[0214.600] SetEvent (hEvent=0x144) returned 1
	[0214.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1
	[0214.613] SetEvent (hEvent=0x90) returned 1
	[0214.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1
	[0214.622] SetEvent (hEvent=0x84) returned 1
	[0214.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1
	[0214.636] SetEvent (hEvent=0xac) returned 1
	[0214.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1
	[0214.671] SetEvent (hEvent=0x90) returned 1
	[0214.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1
	[0214.676] SetEvent (hEvent=0x120) returned 1
	[0214.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1
	[0214.687] SetEvent (hEvent=0x104) returned 1
	[0214.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1
	[0214.749] SetEvent (hEvent=0x90) returned 1
	[0214.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1
	[0214.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1
	[0214.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1
	[0214.803] SetEvent (hEvent=0x90) returned 1
	[0214.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1
	[0214.811] SetEvent (hEvent=0xc4) returned 1
	[0214.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0214.843] SetEvent (hEvent=0x70) returned 1
	[0214.843] SetEvent (hEvent=0x104) returned 1
	[0214.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1
	[0214.861] SetEvent (hEvent=0x90) returned 1
	[0214.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1
	[0214.880] SetEvent (hEvent=0xc4) returned 1
	[0214.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1
	[0214.895] SetEvent (hEvent=0x104) returned 1
	[0214.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1
	[0214.918] SetEvent (hEvent=0x70) returned 1
	[0214.918] SetEvent (hEvent=0x90) returned 1
	[0214.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1
	[0214.938] SetEvent (hEvent=0xc4) returned 1
	[0214.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1
	[0214.956] SetEvent (hEvent=0x104) returned 1
	[0214.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1
	[0214.969] SetEvent (hEvent=0x90) returned 1
	[0214.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1
	[0214.991] SetEvent (hEvent=0x70) returned 1
	[0214.991] SetEvent (hEvent=0xc4) returned 1
	[0214.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1
	[0215.010] SetEvent (hEvent=0x104) returned 1
	[0215.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1
	[0215.026] SetEvent (hEvent=0x90) returned 1
	[0215.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1
	[0215.039] SetEvent (hEvent=0xc4) returned 1
	[0215.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1
	[0215.058] SetEvent (hEvent=0x120) returned 1
	[0215.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1
	[0215.087] SetEvent (hEvent=0x90) returned 1
	[0215.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1
	[0215.107] SetEvent (hEvent=0xc4) returned 1
	[0215.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1
	[0215.122] SetEvent (hEvent=0x104) returned 1
	[0215.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1
	[0215.136] SetEvent (hEvent=0x120) returned 1
	[0215.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1
	[0215.175] SetEvent (hEvent=0x144) returned 1
	[0215.175] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1
	[0215.189] SetEvent (hEvent=0x104) returned 1
	[0215.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1
	[0215.208] SetEvent (hEvent=0x120) returned 1
	[0215.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1
	[0215.232] SetEvent (hEvent=0x144) returned 1
	[0215.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1
	[0215.262] SetEvent (hEvent=0x104) returned 1
	[0215.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1
	[0215.273] SetEvent (hEvent=0x120) returned 1
	[0215.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1
	[0215.291] SetEvent (hEvent=0x144) returned 1
	[0215.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1
	[0215.316] SetEvent (hEvent=0x104) returned 1
	[0215.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1
	[0215.422] SetEvent (hEvent=0xc4) returned 1
	[0215.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1
	[0215.437] SetEvent (hEvent=0x144) returned 1
	[0215.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1
	[0215.455] SetEvent (hEvent=0x120) returned 1
	[0215.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1
	[0215.497] SetEvent (hEvent=0xc4) returned 1
	[0215.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1
	[0215.517] SetEvent (hEvent=0x144) returned 1
	[0215.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1
	[0215.533] SetEvent (hEvent=0x104) returned 1
	[0215.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1
	[0215.602] SetEvent (hEvent=0x70) returned 1
	[0215.602] SetEvent (hEvent=0xc4) returned 1
	[0215.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1
	[0215.624] SetEvent (hEvent=0x144) returned 1
	[0215.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1
	[0215.641] SetEvent (hEvent=0x104) returned 1
	[0215.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1
	[0215.659] SetEvent (hEvent=0xc4) returned 1
	[0215.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1
	[0215.677] SetEvent (hEvent=0x144) returned 1
	[0215.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1
	[0215.704] SetEvent (hEvent=0x104) returned 1
	[0215.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1
	[0215.725] SetEvent (hEvent=0xc4) returned 1
	[0215.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1
	[0215.739] SetEvent (hEvent=0x144) returned 1
	[0215.739] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1
	[0215.757] SetEvent (hEvent=0x104) returned 1
	[0215.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1
	[0215.781] SetEvent (hEvent=0xc4) returned 1
	[0215.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1
	[0215.800] SetEvent (hEvent=0x144) returned 1
	[0215.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1
	[0215.813] SetEvent (hEvent=0x104) returned 1
	[0215.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1
	[0215.832] SetEvent (hEvent=0xc4) returned 1
	[0215.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1
	[0215.855] SetEvent (hEvent=0x144) returned 1
	[0215.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1
	[0215.873] SetEvent (hEvent=0x104) returned 1
	[0215.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1
	[0215.886] SetEvent (hEvent=0xc4) returned 1
	[0215.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1
	[0215.912] SetEvent (hEvent=0x70) returned 1
	[0215.912] SetEvent (hEvent=0x120) returned 1
	[0215.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1
	[0215.938] SetEvent (hEvent=0x104) returned 1
	[0215.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1
	[0215.957] SetEvent (hEvent=0xc4) returned 1
	[0215.957] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1
	[0215.972] SetEvent (hEvent=0x120) returned 1
	[0215.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1
	[0215.991] SetEvent (hEvent=0x70) returned 1
	[0215.991] SetEvent (hEvent=0x104) returned 1
	[0215.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1
	[0216.013] SetEvent (hEvent=0xc4) returned 1
	[0216.013] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1
	[0216.029] SetEvent (hEvent=0x120) returned 1
	[0216.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1
	[0216.043] SetEvent (hEvent=0x104) returned 1
	[0216.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1
	[0216.064] SetEvent (hEvent=0x70) returned 1
	[0216.064] SetEvent (hEvent=0xc4) returned 1
	[0216.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1
	[0216.082] SetEvent (hEvent=0x120) returned 1
	[0216.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1
	[0216.116] SetEvent (hEvent=0x104) returned 1
	[0216.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1
	[0216.129] SetEvent (hEvent=0xc4) returned 1
	[0216.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1
	[0216.146] SetEvent (hEvent=0x120) returned 1
	[0216.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1
	[0216.174] SetEvent (hEvent=0x104) returned 1
	[0216.174] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1
	[0216.190] SetEvent (hEvent=0xc4) returned 1
	[0216.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1
	[0216.208] SetEvent (hEvent=0x120) returned 1
	[0216.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1
	[0216.230] SetEvent (hEvent=0x104) returned 1
	[0216.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1
	[0216.258] SetEvent (hEvent=0xc4) returned 1
	[0216.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1
	[0216.278] SetEvent (hEvent=0x120) returned 1
	[0216.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1
	[0216.291] SetEvent (hEvent=0x104) returned 1
	[0216.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1
	[0216.314] SetEvent (hEvent=0x70) returned 1
	[0216.314] SetEvent (hEvent=0xc4) returned 1
	[0216.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1
	[0216.339] SetEvent (hEvent=0x120) returned 1
	[0216.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1
	[0216.359] SetEvent (hEvent=0x104) returned 1
	[0216.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1
	[0216.372] SetEvent (hEvent=0xc4) returned 1
	[0216.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1
	[0216.399] SetEvent (hEvent=0x70) returned 1
	[0216.399] SetEvent (hEvent=0x120) returned 1
	[0216.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1
	[0216.419] SetEvent (hEvent=0x104) returned 1
	[0216.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1
	[0216.435] SetEvent (hEvent=0xc4) returned 1
	[0216.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1
	[0216.449] SetEvent (hEvent=0x120) returned 1
	[0216.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1
	[0216.489] SetEvent (hEvent=0x70) returned 1
	[0216.489] SetEvent (hEvent=0x104) returned 1
	[0216.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1
	[0216.520] SetEvent (hEvent=0xc4) returned 1
	[0216.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1
	[0216.533] SetEvent (hEvent=0x120) returned 1
	[0216.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1
	[0216.554] SetEvent (hEvent=0x104) returned 1
	[0216.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1
	[0216.591] SetEvent (hEvent=0x70) returned 1
	[0216.591] SetEvent (hEvent=0xc4) returned 1
	[0216.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1
	[0216.607] SetEvent (hEvent=0x120) returned 1
	[0216.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff99200, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ff99200, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1
	[0216.634] SetEvent (hEvent=0x124) returned 1
	[0216.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1
	[0216.649] SetEvent (hEvent=0xc4) returned 1
	[0216.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1
	[0216.660] SetEvent (hEvent=0x120) returned 1
	[0216.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1
	[0216.682] SetEvent (hEvent=0x70) returned 1
	[0216.682] SetEvent (hEvent=0x124) returned 1
	[0216.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1
	[0216.703] SetEvent (hEvent=0xc4) returned 1
	[0216.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1
	[0216.717] SetEvent (hEvent=0x120) returned 1
	[0216.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1
	[0216.734] SetEvent (hEvent=0x124) returned 1
	[0216.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1
	[0216.754] SetEvent (hEvent=0x70) returned 1
	[0216.754] SetEvent (hEvent=0xc4) returned 1
	[0216.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1
	[0216.779] SetEvent (hEvent=0x120) returned 1
	[0216.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1
	[0216.797] SetEvent (hEvent=0x124) returned 1
	[0216.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21290a00, ftCreationTime.dwHighDateTime=0x1bdf6f5, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21290a00, ftLastWriteTime.dwHighDateTime=0x1bdf6f5, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1
	[0216.810] SetEvent (hEvent=0xc4) returned 1
	[0216.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1
	[0216.830] SetEvent (hEvent=0x70) returned 1
	[0216.830] SetEvent (hEvent=0x120) returned 1
	[0216.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1
	[0216.851] SetEvent (hEvent=0x124) returned 1
	[0216.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1
	[0216.865] SetEvent (hEvent=0xc4) returned 1
	[0216.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1
	[0216.880] SetEvent (hEvent=0x120) returned 1
	[0216.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1
	[0216.897] SetEvent (hEvent=0x124) returned 1
	[0216.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1
	[0216.923] SetEvent (hEvent=0x90) returned 1
	[0216.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1
	[0216.942] SetEvent (hEvent=0x120) returned 1
	[0216.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1
	[0216.962] SetEvent (hEvent=0x124) returned 1
	[0216.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1
	[0216.979] SetEvent (hEvent=0x90) returned 1
	[0216.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1
	[0217.005] SetEvent (hEvent=0x70) returned 1
	[0217.005] SetEvent (hEvent=0x120) returned 1
	[0217.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1
	[0217.033] SetEvent (hEvent=0x124) returned 1
	[0217.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1
	[0217.054] SetEvent (hEvent=0x90) returned 1
	[0217.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1
	[0217.070] SetEvent (hEvent=0x120) returned 1
	[0217.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1
	[0217.091] SetEvent (hEvent=0x70) returned 1
	[0217.091] SetEvent (hEvent=0x124) returned 1
	[0217.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1
	[0217.111] SetEvent (hEvent=0x90) returned 1
	[0217.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1
	[0217.127] SetEvent (hEvent=0x120) returned 1
	[0217.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1
	[0217.139] SetEvent (hEvent=0x124) returned 1
	[0217.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1
	[0217.157] SetEvent (hEvent=0x90) returned 1
	[0217.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1
	[0217.192] SetEvent (hEvent=0x120) returned 1
	[0217.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1
	[0217.206] SetEvent (hEvent=0x124) returned 1
	[0217.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1
	[0217.216] SetEvent (hEvent=0x90) returned 1
	[0217.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1
	[0217.234] SetEvent (hEvent=0x120) returned 1
	[0217.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1
	[0217.255] SetEvent (hEvent=0x124) returned 1
	[0217.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1
	[0217.274] SetEvent (hEvent=0x90) returned 1
	[0217.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1
	[0217.287] SetEvent (hEvent=0x120) returned 1
	[0217.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1
	[0217.308] SetEvent (hEvent=0x124) returned 1
	[0217.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1
	[0217.331] SetEvent (hEvent=0x90) returned 1
	[0217.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1
	[0217.349] SetEvent (hEvent=0x120) returned 1
	[0217.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1
	[0217.361] SetEvent (hEvent=0x124) returned 1
	[0217.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1
	[0217.492] SetEvent (hEvent=0x70) returned 1
	[0217.492] SetEvent (hEvent=0x90) returned 1
	[0217.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1
	[0217.524] SetEvent (hEvent=0x120) returned 1
	[0217.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1
	[0217.542] SetEvent (hEvent=0x124) returned 1
	[0217.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1
	[0217.555] SetEvent (hEvent=0x90) returned 1
	[0217.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1
	[0217.578] SetEvent (hEvent=0x70) returned 1
	[0217.579] SetEvent (hEvent=0x120) returned 1
	[0217.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1
	[0217.642] SetEvent (hEvent=0x124) returned 1
	[0217.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1
	[0217.698] SetEvent (hEvent=0x90) returned 1
	[0217.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1
	[0217.718] SetEvent (hEvent=0x120) returned 1
	[0217.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1
	[0217.758] SetEvent (hEvent=0x124) returned 1
	[0217.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1
	[0217.786] SetEvent (hEvent=0x90) returned 1
	[0217.786] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1
	[0217.797] SetEvent (hEvent=0x120) returned 1
	[0217.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1
	[0217.823] SetEvent (hEvent=0x124) returned 1
	[0217.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1
	[0217.846] SetEvent (hEvent=0x90) returned 1
	[0217.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1
	[0217.859] SetEvent (hEvent=0x120) returned 1
	[0217.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1
	[0217.877] SetEvent (hEvent=0x124) returned 1
	[0217.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1
	[0217.903] SetEvent (hEvent=0x90) returned 1
	[0217.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1
	[0217.920] SetEvent (hEvent=0x120) returned 1
	[0217.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1
	[0217.933] SetEvent (hEvent=0x124) returned 1
	[0217.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1
	[0217.950] SetEvent (hEvent=0x90) returned 1
	[0217.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1
	[0217.980] SetEvent (hEvent=0xc4) returned 1
	[0217.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1
	[0217.997] SetEvent (hEvent=0x124) returned 1
	[0217.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1
	[0218.011] SetEvent (hEvent=0x90) returned 1
	[0218.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81dcbf00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81dcbf00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1
	[0218.030] SetEvent (hEvent=0xc4) returned 1
	[0218.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85704600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85704600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1
	[0218.057] SetEvent (hEvent=0x124) returned 1
	[0218.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98831600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98831600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1
	[0218.079] SetEvent (hEvent=0x90) returned 1
	[0218.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9338c00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9338c00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1
	[0218.092] SetEvent (hEvent=0xc4) returned 1
	[0218.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1
	[0218.109] SetEvent (hEvent=0x124) returned 1
	[0218.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1
	[0218.132] SetEvent (hEvent=0x90) returned 1
	[0218.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1
	[0218.152] SetEvent (hEvent=0xc4) returned 1
	[0218.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1
	[0218.164] SetEvent (hEvent=0x124) returned 1
	[0218.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1
	[0218.183] SetEvent (hEvent=0x90) returned 1
	[0218.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1
	[0218.217] SetEvent (hEvent=0xc4) returned 1
	[0218.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4f00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x739e4f00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1
	[0218.230] SetEvent (hEvent=0x124) returned 1
	[0218.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cf7c00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74cf7c00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1
	[0218.248] SetEvent (hEvent=0x90) returned 1
	[0218.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78630300, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78630300, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1
	[0218.261] SetEvent (hEvent=0xc4) returned 1
	[0218.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1
	[0218.293] SetEvent (hEvent=0x70) returned 1
	[0218.293] SetEvent (hEvent=0x124) returned 1
	[0218.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23edc800, ftCreationTime.dwHighDateTime=0x1be3d01, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23edc800, ftLastWriteTime.dwHighDateTime=0x1be3d01, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1
	[0218.314] SetEvent (hEvent=0x90) returned 1
	[0218.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fe6800, ftCreationTime.dwHighDateTime=0x1c0323c, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9fe6800, ftLastWriteTime.dwHighDateTime=0x1c0323c, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1
	[0218.329] SetEvent (hEvent=0xc4) returned 1
	[0218.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94700, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71f94700, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1
	[0218.343] SetEvent (hEvent=0x124) returned 1
	[0218.343] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745ba100, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x745ba100, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1
	[0218.361] SetEvent (hEvent=0x90) returned 1
	[0218.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fcfa00, ftCreationTime.dwHighDateTime=0x1c0323d, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18fcfa00, ftLastWriteTime.dwHighDateTime=0x1c0323d, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1
	[0218.385] SetEvent (hEvent=0xc4) returned 1
	[0218.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de50900, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7de50900, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1
	[0218.405] SetEvent (hEvent=0x124) returned 1
	[0218.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb570900, ftCreationTime.dwHighDateTime=0x1bd9f2f, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb570900, ftLastWriteTime.dwHighDateTime=0x1bd9f2f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1
	[0218.422] SetEvent (hEvent=0x104) returned 1
	[0218.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce00a00, ftCreationTime.dwHighDateTime=0x1bd9fdf, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcce00a00, ftLastWriteTime.dwHighDateTime=0x1bd9fdf, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1
	[0218.437] SetEvent (hEvent=0xc4) returned 1
	[0218.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1
	[0218.602] SetEvent (hEvent=0x124) returned 1
	[0218.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1
	[0218.976] SetEvent (hEvent=0x104) returned 1
	[0218.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1
	[0218.992] SetEvent (hEvent=0xc4) returned 1
	[0218.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1925100, ftCreationTime.dwHighDateTime=0x1be3a08, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1925100, ftLastWriteTime.dwHighDateTime=0x1be3a08, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1
	[0219.019] SetEvent (hEvent=0x70) returned 1
	[0219.019] SetEvent (hEvent=0x124) returned 1
	[0219.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1
	[0219.045] SetEvent (hEvent=0x104) returned 1
	[0219.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1
	[0219.065] SetEvent (hEvent=0xc4) returned 1
	[0219.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1
	[0219.091] SetEvent (hEvent=0x124) returned 1
	[0219.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1
	[0219.109] SetEvent (hEvent=0x104) returned 1
	[0219.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1
	[0219.134] SetEvent (hEvent=0xc4) returned 1
	[0219.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1
	[0219.150] SetEvent (hEvent=0x124) returned 1
	[0219.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1
	[0219.164] SetEvent (hEvent=0x104) returned 1
	[0219.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1
	[0219.184] SetEvent (hEvent=0x70) returned 1
	[0219.185] SetEvent (hEvent=0xc4) returned 1
	[0219.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1
	[0219.205] SetEvent (hEvent=0x124) returned 1
	[0219.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1
	[0219.225] SetEvent (hEvent=0x144) returned 1
	[0219.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1
	[0219.235] SetEvent (hEvent=0xc4) returned 1
	[0219.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1
	[0219.249] SetEvent (hEvent=0x124) returned 1
	[0219.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1
	[0219.270] SetEvent (hEvent=0x144) returned 1
	[0219.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbde600, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6dbde600, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1
	[0219.290] SetEvent (hEvent=0xc4) returned 1
	[0219.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1
	[0219.314] SetEvent (hEvent=0x104) returned 1
	[0219.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1
	[0219.336] SetEvent (hEvent=0x70) returned 1
	[0219.336] SetEvent (hEvent=0x144) returned 1
	[0219.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1
	[0219.354] SetEvent (hEvent=0xc4) returned 1
	[0219.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1
	[0219.370] SetEvent (hEvent=0x104) returned 1
	[0219.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65cc000, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa65cc000, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1
	[0219.382] SetEvent (hEvent=0x144) returned 1
	[0219.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f04700, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9f04700, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1
	[0219.401] SetEvent (hEvent=0x124) returned 1
	[0219.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb379af00, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb379af00, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1
	[0219.426] SetEvent (hEvent=0x104) returned 1
	[0219.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec38100, ftCreationTime.dwHighDateTime=0x1be3e99, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec38100, ftLastWriteTime.dwHighDateTime=0x1be3e99, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1
	[0220.426] SetEvent (hEvent=0x70) returned 1
	[0220.426] SetEvent (hEvent=0x124) returned 1
	[0220.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1
	[0221.792] SetEvent (hEvent=0x70) returned 1
	[0221.792] SetEvent (hEvent=0xe4) returned 1
	[0221.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770 | out: lpFileInformation=0xc000151770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1
	[0223.364] SetEvent (hEvent=0x70) returned 1
	[0223.364] SetEvent (hEvent=0xc4) returned 1
	[0223.364] GetFileAttributesExW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000151770) 

Thread:
	id = 4
	os_tid = 0x9f0

	[0051.357] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x2e7feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2e7feb0*=0x58) returned 1
	[0051.357] VirtualQuery (in: lpAddress=0x2e7fed0, lpBuffer=0x2e7fed0, dwLength=0x30 | out: lpBuffer=0x2e7fed0*(BaseAddress=0x2e7f000, AllocationBase=0x2c80000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0051.357] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5c
	[0051.358] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0055.938] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0057.441] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0057.780] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0058.716] SetEvent (hEvent=0x68) returned 1
	[0058.804] GetProcAddress (hModule=0x76f20000, lpProcName="ReadFile") returned 0x76f31500
	[0058.805] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc0000d1d64*=0x1c2, lpOverlapped=0x0) returned 1
	[0059.129] SetEvent (hEvent=0x70) returned 1
	[0059.129] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000e21c2, nNumberOfBytesToRead=0x43e, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000e21c2*, lpNumberOfBytesRead=0xc0000d1d64*=0x43e, lpOverlapped=0x0) returned 1
	[0059.133] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000e4600, nNumberOfBytesToRead=0x800, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000e4600*, lpNumberOfBytesRead=0xc0000d1d64*=0x800, lpOverlapped=0x0) returned 1
	[0059.146] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000e6e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000e6e00*, lpNumberOfBytesRead=0xc0000d1d64*=0x1000, lpOverlapped=0x0) returned 1
	[0059.155] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000e9e00, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000e9e00*, lpNumberOfBytesRead=0xc0000d1d64*=0x867, lpOverlapped=0x0) returned 1
	[0059.155] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000ea667, nNumberOfBytesToRead=0x1799, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000ea667*, lpNumberOfBytesRead=0xc0000d1d64*=0x1c4, lpOverlapped=0x0) returned 1
	[0059.192] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000ea82b, nNumberOfBytesToRead=0x15d5, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000ea82b*, lpNumberOfBytesRead=0xc0000d1d64*=0x11b4, lpOverlapped=0x0) returned 1
	[0059.215] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000eb9df, nNumberOfBytesToRead=0x421, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000eb9df*, lpNumberOfBytesRead=0xc0000d1d64*=0x421, lpOverlapped=0x0) returned 1
	[0059.219] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000efe00, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000efe00*, lpNumberOfBytesRead=0xc0000d1d64*=0x1122, lpOverlapped=0x0) returned 1
	[0059.231] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000f0f22, nNumberOfBytesToRead=0x2ede, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000f0f22*, lpNumberOfBytesRead=0xc0000d1d64*=0x376, lpOverlapped=0x0) returned 1
	[0059.232] ReadFile (in: hFile=0x8c, lpBuffer=0xc0000f1298, nNumberOfBytesToRead=0x2b68, lpNumberOfBytesRead=0xc0000d1d64, lpOverlapped=0x0 | out: lpBuffer=0xc0000f1298, lpNumberOfBytesRead=0xc0000d1d64*=0x0, lpOverlapped=0x0) returned 0
	[0059.317] CloseHandle (hObject=0x8c) returned 1
	[0059.317] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0061.218] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0061.219] SetEvent (hEvent=0x68) returned 1
	[0061.219] SetEvent (hEvent=0x60) returned 1
	[0061.219] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0061.223] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0061.224] SetEvent (hEvent=0x68) returned 1
	[0061.224] SetEvent (hEvent=0x60) returned 1
	[0061.224] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0061.640] SetEvent (hEvent=0x60) returned 1
	[0061.640] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0062.060] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0063.233] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0065.173] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0065.192] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0065.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc000036e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa4
	[0065.399] CloseHandle (hObject=0xa4) returned 1
	[0065.440] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0065.441] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0065.444] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0066.871] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.957] SetEvent (hEvent=0x60) returned 1
	[0066.957] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.966] SetEvent (hEvent=0x60) returned 1
	[0066.967] SetEvent (hEvent=0xc8) returned 1
	[0066.967] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4
	[0066.967] GetConsoleMode (in: hConsoleHandle=0xa4, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0066.967] ReadFile (in: hFile=0xa4, lpBuffer=0xc0001fa700, nNumberOfBytesToRead=0x61d, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001fa700*, lpNumberOfBytesRead=0xc00016bcec*=0x61d, lpOverlapped=0x0) returned 1
	[0067.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000522c0 | out: pbBuffer=0xc0000522c0) returned 1
	[0067.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000522da | out: pbBuffer=0xc0000522da) returned 1
	[0067.026] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214802 | out: pbBuffer=0xc000214802) returned 1
	[0067.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214844 | out: pbBuffer=0xc000214844) returned 1
	[0067.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002148a0 | out: pbBuffer=0xc0002148a0) returned 1
	[0067.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052300 | out: pbBuffer=0xc000052300) returned 1
	[0067.027] GetFileType (hFile=0xa4) returned 0x1
	[0067.027] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=1565) returned 1
	[0067.027] WriteFile (in: hFile=0xa4, lpBuffer=0xc000433000*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc000433000*, lpNumberOfBytesWritten=0xc00021dccc*=0x61d, lpOverlapped=0xc00021dce8) returned 1
	[0067.027] GetFileType (hFile=0xa4) returned 0x1
	[0067.027] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x61d, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=1565) returned 1
	[0067.028] GetFileType (hFile=0xa4) returned 0x1
	[0067.028] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=1565) returned 1
	[0067.028] WriteFile (in: hFile=0xa4, lpBuffer=0xc0002c0a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc0002c0a80*, lpNumberOfBytesWritten=0xc00021dccc*=0x22a, lpOverlapped=0xc00021dce8) returned 1
	[0067.028] GetFileType (hFile=0xa4) returned 0x1
	[0067.028] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x61d, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=1565) returned 1
	[0067.029] CloseHandle (hObject=0xa4) returned 1
	[0067.033] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.egmwv")) returned 0x2020
	[0067.033] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0067.034] SwitchToThread () returned 1
	[0067.319] GetFileType (hFile=0xa8) returned 0x1
	[0067.319] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000219ca0*=175436) returned 1
	[0067.319] WriteFile (in: hFile=0xa8, lpBuffer=0xc0007ae000*, nNumberOfBytesToWrite=0x2ad4c, lpNumberOfBytesWritten=0xc000219ccc, lpOverlapped=0xc000219ce8 | out: lpBuffer=0xc0007ae000*, lpNumberOfBytesWritten=0xc000219ccc*=0x2ad4c, lpOverlapped=0xc000219ce8) returned 1
	[0067.321] GetFileType (hFile=0xa8) returned 0x1
	[0067.322] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2ad4c, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000219ca0*=175436) returned 1
	[0067.322] GetFileType (hFile=0xa8) returned 0x1
	[0067.322] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000219ca0*=175436) returned 1
	[0067.322] WriteFile (in: hFile=0xa8, lpBuffer=0xc000099000*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0xc000219ccc, lpOverlapped=0xc000219ce8 | out: lpBuffer=0xc000099000*, lpNumberOfBytesWritten=0xc000219ccc*=0x24b, lpOverlapped=0xc000219ce8) returned 1
	[0067.369] GetFileType (hFile=0xa8) returned 0x1
	[0067.369] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2ad4c, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000219ca0*=175436) returned 1
	[0067.369] CloseHandle (hObject=0xa8) returned 1
	[0067.929] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.940] SetEvent (hEvent=0xc8) returned 1
	[0067.940] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.025] SwitchToThread () returned 1
	[0068.079] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.603] SetEvent (hEvent=0xc8) returned 1
	[0069.604] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.626] SetEvent (hEvent=0x90) returned 1
	[0069.627] SetEvent (hEvent=0xc4) returned 1
	[0069.627] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0069.706] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.706] SetEvent (hEvent=0xc0) returned 1
	[0069.706] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0069.748] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.748] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0069.842] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.843] SetEvent (hEvent=0xc8) returned 1
	[0069.843] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0069.906] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.906] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0069.906] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0069.946] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0075.346] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.470] SetEvent (hEvent=0xac) returned 1
	[0075.470] SetEvent (hEvent=0xe4) returned 1
	[0075.470] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0075.471] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0075.482] ReadFile (in: hFile=0xd0, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000199cec*=0x100000, lpOverlapped=0x0) returned 1
	[0076.837] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0077.422] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0077.847] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0078.010] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.011] SetEvent (hEvent=0xe4) returned 1
	[0078.011] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0078.177] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.178] SetEvent (hEvent=0xe4) returned 1
	[0078.178] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0078.294] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.304] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0150 | out: pbBuffer=0xc0003a0150) returned 1
	[0078.305] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214802 | out: pbBuffer=0xc000214802) returned 1
	[0078.305] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0190 | out: pbBuffer=0xc0003a0190) returned 1
	[0078.306] VirtualAlloc (lpAddress=0xc000350000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000350000
	[0078.307] VirtualFree (lpAddress=0xc00023e000, dwSize=0x30000, dwFreeType=0x4000) returned 1
	[0078.314] VirtualAlloc (lpAddress=0xc00032e000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00032e000
	[0078.321] VirtualAlloc (lpAddress=0xc000644000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000644000
	[0078.440] VirtualFree (lpAddress=0xc000900000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0078.817] VirtualAlloc (lpAddress=0xc000700000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000700000
	[0078.969] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.620] SwitchToThread () returned 1
	[0085.807] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.114] VirtualAlloc (lpAddress=0xc000346000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000346000
	[0086.116] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010160 | out: pbBuffer=0xc000010160) returned 1
	[0086.116] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214702 | out: pbBuffer=0xc000214702) returned 1
	[0086.116] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101a0 | out: pbBuffer=0xc0000101a0) returned 1
	[0086.116] VirtualAlloc (lpAddress=0xc000150000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000150000
	[0086.118] VirtualAlloc (lpAddress=0xc0003d2000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003d2000
	[0086.122] VirtualAlloc (lpAddress=0xc000154000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000154000
	[0086.124] VirtualAlloc (lpAddress=0xc000158000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000158000
	[0086.134] VirtualAlloc (lpAddress=0xc000900000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000900000
	[0086.139] VirtualFree (lpAddress=0xc000538000, dwSize=0x7a000, dwFreeType=0x4000) returned 1
	[0086.147] VirtualFree (lpAddress=0xc000538000, dwSize=0x90000, dwFreeType=0x4000) returned 1
	[0086.261] VirtualAlloc (lpAddress=0xc000980000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000980000
	[0086.418] VirtualFree (lpAddress=0xc0005c8000, dwSize=0x5c000, dwFreeType=0x4000) returned 1
	[0086.426] VirtualFree (lpAddress=0xc000538000, dwSize=0xec000, dwFreeType=0x4000) returned 1
	[0086.426] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x4c000, dwFreeType=0x4000) returned 1
	[0086.431] VirtualFree (lpAddress=0xc0002fe000, dwSize=0x3e000, dwFreeType=0x4000) returned 1
	[0086.435] SetEvent (hEvent=0xb0) returned 1
	[0086.583] SetEvent (hEvent=0xe4) returned 1
	[0086.583] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0086.642] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.642] SetEvent (hEvent=0x70) returned 1
	[0086.642] SetEvent (hEvent=0xe4) returned 1
	[0086.642] SetEvent (hEvent=0x68) returned 1
	[0086.643] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.egmwv")) returned 0x2020
	[0086.643] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0086.644] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0086.731] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.731] SetEvent (hEvent=0x68) returned 1
	[0086.731] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0086.815] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0086.940] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.940] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0087.041] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0087.041] SetEvent (hEvent=0x70) returned 1
	[0087.041] SetEvent (hEvent=0x90) returned 1
	[0087.041] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0090.766] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0090.773] VirtualAlloc (lpAddress=0xc000c00000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000c00000
	[0090.774] VirtualAlloc (lpAddress=0xc000c00000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000c00000
	[0091.192] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x47a0000
	[0091.193] VirtualFree (lpAddress=0xc000686000, dwSize=0x7a000, dwFreeType=0x4000) returned 1
	[0092.531] VirtualFree (lpAddress=0xc0000e2000, dwSize=0x6e000, dwFreeType=0x4000) returned 1
	[0092.538] VirtualFree (lpAddress=0xc000624000, dwSize=0x5e000, dwFreeType=0x4000) returned 1
	[0092.545] VirtualFree (lpAddress=0xc000538000, dwSize=0x14a000, dwFreeType=0x4000) returned 1
	[0092.545] VirtualFree (lpAddress=0xc000216000, dwSize=0x28000, dwFreeType=0x4000) returned 1
	[0092.548] VirtualFree (lpAddress=0xc000216000, dwSize=0x58000, dwFreeType=0x4000) returned 1
	[0092.548] VirtualFree (lpAddress=0xc0001ce000, dwSize=0x28000, dwFreeType=0x4000) returned 1
	[0092.551] VirtualFree (lpAddress=0xc0000aa000, dwSize=0x22000, dwFreeType=0x4000) returned 1
	[0092.553] VirtualFree (lpAddress=0xc0003fa000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0092.554] VirtualFree (lpAddress=0xc0003fa000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0092.554] VirtualFree (lpAddress=0xc0003fa000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0092.554] VirtualFree (lpAddress=0xc0003fa000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0092.554] VirtualFree (lpAddress=0xc0003fa000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.554] VirtualFree (lpAddress=0xc0003fe000, dwSize=0x1c000, dwFreeType=0x4000) returned 0
	[0092.555] VirtualFree (lpAddress=0xc0003fe000, dwSize=0xe000, dwFreeType=0x4000) returned 0
	[0092.555] VirtualFree (lpAddress=0xc0003fe000, dwSize=0x7000, dwFreeType=0x4000) returned 0
	[0092.555] VirtualFree (lpAddress=0xc0003fe000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0092.555] VirtualFree (lpAddress=0xc0003fe000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0092.555] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0092.556] VirtualFree (lpAddress=0xc0003ff000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0092.556] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0092.556] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0092.556] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0092.556] VirtualFree (lpAddress=0xc000400000, dwSize=0x1a000, dwFreeType=0x4000) returned 1
	[0092.558] VirtualFree (lpAddress=0xc0002e0000, dwSize=0x1e000, dwFreeType=0x4000) returned 1
	[0092.560] VirtualFree (lpAddress=0xc0002e0000, dwSize=0x5c000, dwFreeType=0x4000) returned 1
	[0092.560] VirtualFree (lpAddress=0xc00034a000, dwSize=0x18000, dwFreeType=0x4000) returned 1
	[0092.562] VirtualFree (lpAddress=0xc0003ce000, dwSize=0x16000, dwFreeType=0x4000) returned 1
	[0092.563] VirtualFree (lpAddress=0xc0002a0000, dwSize=0xe000, dwFreeType=0x4000) returned 1
	[0092.564] VirtualFree (lpAddress=0xc0007ee000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0092.657] VirtualFree (lpAddress=0xc0007ca000, dwSize=0x30000, dwFreeType=0x4000) returned 1
	[0092.658] VirtualFree (lpAddress=0xc00042a000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0092.659] VirtualFree (lpAddress=0xc00033c000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0092.660] VirtualFree (lpAddress=0xc0002e0000, dwSize=0x68000, dwFreeType=0x4000) returned 1
	[0092.660] VirtualFree (lpAddress=0xc0002c4000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0092.661] VirtualFree (lpAddress=0xc000068000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0092.662] VirtualFree (lpAddress=0xc0007c0000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0092.663] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x3a000, dwFreeType=0x4000) returned 1
	[0092.663] VirtualFree (lpAddress=0xc000370000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0092.664] VirtualFree (lpAddress=0xc0000d4000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0092.665] VirtualFree (lpAddress=0xc0003ea000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0092.665] VirtualFree (lpAddress=0xc00020e000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0092.666] VirtualFree (lpAddress=0xc000206000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0092.666] VirtualFree (lpAddress=0xc000180000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0092.667] VirtualFree (lpAddress=0xc000b00000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.667] VirtualFree (lpAddress=0xc000a82000, dwSize=0x82000, dwFreeType=0x4000) returned 1
	[0092.668] VirtualFree (lpAddress=0xc0007fc000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.668] VirtualFree (lpAddress=0xc00041c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.669] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.669] VirtualFree (lpAddress=0xc000364000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.669] VirtualFree (lpAddress=0xc000298000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.670] VirtualFree (lpAddress=0xc000282000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.670] VirtualFree (lpAddress=0xc00019a000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.671] VirtualFree (lpAddress=0xc00018e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.671] VirtualFree (lpAddress=0xc000188000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.672] VirtualFree (lpAddress=0xc000176000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0092.676] VirtualFree (lpAddress=0xc0003e6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.676] VirtualFree (lpAddress=0xc00039e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.677] VirtualFree (lpAddress=0xc000384000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.677] VirtualFree (lpAddress=0xc0002be000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.687] VirtualFree (lpAddress=0xc0002b2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.688] VirtualFree (lpAddress=0xc000294000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.688] VirtualFree (lpAddress=0xc000290000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.688] VirtualFree (lpAddress=0xc00028a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.689] VirtualFree (lpAddress=0xc00027e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.689] VirtualFree (lpAddress=0xc000202000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.689] VirtualFree (lpAddress=0xc0001ca000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.690] VirtualFree (lpAddress=0xc000050000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.690] VirtualFree (lpAddress=0xc00004c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0092.691] VirtualAlloc (lpAddress=0xc000538000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000538000
	[0092.698] VirtualFree (lpAddress=0xc000c00000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0092.854] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x44c000, dwFreeType=0x4000) returned 0
	[0092.854] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x44c000, dwFreeType=0x4000) returned 0
	[0092.854] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x226000, dwFreeType=0x4000) returned 0
	[0092.855] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x113000, dwFreeType=0x4000) returned 0
	[0092.855] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x89000, dwFreeType=0x4000) returned 0
	[0092.855] VirtualFree (lpAddress=0xc000bb4000, dwSize=0x44000, dwFreeType=0x4000) returned 1
	[0092.855] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x408000, dwFreeType=0x4000) returned 0
	[0092.855] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x204000, dwFreeType=0x4000) returned 0
	[0092.855] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x102000, dwFreeType=0x4000) returned 0
	[0092.856] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x81000, dwFreeType=0x4000) returned 0
	[0092.856] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0092.856] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0092.857] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0092.857] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0092.857] VirtualFree (lpAddress=0xc000c00000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0092.857] SetEvent (hEvent=0x90) returned 1
	[0093.526] VirtualAlloc (lpAddress=0xc000176000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000176000
	[0093.528] VirtualAlloc (lpAddress=0xc000188000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000188000
	[0093.529] VirtualAlloc (lpAddress=0xc00018e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018e000
	[0093.530] VirtualAlloc (lpAddress=0xc00019a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019a000
	[0093.531] VirtualAlloc (lpAddress=0xc000282000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000282000
	[0093.532] VirtualAlloc (lpAddress=0xc000298000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000298000
	[0093.533] VirtualAlloc (lpAddress=0xc000364000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000364000
	[0093.534] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f2000
	[0093.535] VirtualAlloc (lpAddress=0xc00041c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00041c000
	[0093.536] VirtualAlloc (lpAddress=0xc0007fc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007fc000
	[0093.537] VirtualAlloc (lpAddress=0xc000180000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000180000
	[0093.538] VirtualAlloc (lpAddress=0xc000206000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000206000
	[0093.543] VirtualAlloc (lpAddress=0xc0007c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007c0000
	[0093.544] VirtualAlloc (lpAddress=0xc0002e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e0000
	[0093.545] VirtualAlloc (lpAddress=0xc0000e2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e2000
	[0093.659] VirtualAlloc (lpAddress=0xc000370000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000370000
	[0093.660] VirtualAlloc (lpAddress=0xc000374000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000374000
	[0093.661] VirtualAlloc (lpAddress=0xc0002c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c4000
	[0093.662] VirtualAlloc (lpAddress=0xc00063a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00063a000
	[0093.664] VirtualAlloc (lpAddress=0xc00063e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00063e000
	[0093.665] VirtualAlloc (lpAddress=0xc000642000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000642000
	[0093.666] VirtualAlloc (lpAddress=0xc000a82000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000a82000
	[0093.666] VirtualAlloc (lpAddress=0xc000378000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000378000
	[0093.667] VirtualAlloc (lpAddress=0xc0002c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c8000
	[0093.667] VirtualAlloc (lpAddress=0xc0002ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ca000
	[0093.668] VirtualAlloc (lpAddress=0xc0002cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002cc000
	[0093.669] VirtualAlloc (lpAddress=0xc00042a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00042a000
	[0093.669] VirtualAlloc (lpAddress=0xc00042e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00042e000
	[0093.671] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.671] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.671] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.671] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fa000
	[0093.671] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.672] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.672] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.672] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fe000
	[0093.672] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.672] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.672] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.673] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ff000
	[0093.673] VirtualAlloc (lpAddress=0xc000400000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0093.675] VirtualAlloc (lpAddress=0xc0001ce000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ce000
	[0093.680] VirtualAlloc (lpAddress=0xc0002e4000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e4000
	[0093.689] VirtualAlloc (lpAddress=0xc000cb4000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cb4000
	[0093.786] SetEvent (hEvent=0xb0) returned 1
	[0093.787] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.817] SetEvent (hEvent=0xac) returned 1
	[0101.817] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0102.237] SetEvent (hEvent=0xb0) returned 1
	[0102.237] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0102.569] SwitchToThread () returned 1
	[0102.760] SetEvent (hEvent=0x60) returned 1
	[0102.760] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0103.074] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.074] SetEvent (hEvent=0x60) returned 1
	[0103.074] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0103.205] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.205] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0103.418] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.418] SetEvent (hEvent=0x60) returned 1
	[0103.419] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0103.579] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.579] SwitchToThread () returned 1
	[0103.771] SwitchToThread () returned 1
	[0108.050] SetEvent (hEvent=0xc4) returned 1
	[0108.051] GetFileType (hFile=0xd4) returned 0x1
	[0108.052] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038fca0*=497919) returned 1
	[0108.052] WriteFile (in: hFile=0xd4, lpBuffer=0xc00008c480*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0xc00038fccc, lpOverlapped=0xc00038fce8 | out: lpBuffer=0xc00008c480*, lpNumberOfBytesWritten=0xc00038fccc*=0x290, lpOverlapped=0xc00038fce8) returned 1
	[0108.886] GetFileType (hFile=0xd4) returned 0x1
	[0108.887] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x798ff, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038fca0*=497919) returned 1
	[0108.887] CloseHandle (hObject=0xd4) returned 1
	[0119.467] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.egmwv")) returned 0x2020
	[0119.468] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0121.069] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.876] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.561] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0131.408] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0133.305] SetEvent (hEvent=0x108) returned 1
	[0133.306] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0135.260] SetEvent (hEvent=0x104) returned 1
	[0135.260] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0135.562] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab")) returned 0x2020
	[0135.563] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", dwFileAttributes=0x2020) returned 1
	[0136.112] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.266] SetEvent (hEvent=0x68) returned 1
	[0137.266] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf")) returned 0x20
	[0201.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x20) returned 1
	[0201.564] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.806] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0201.806] ReadFile (in: hFile=0xd0, lpBuffer=0xc0003e6000, nNumberOfBytesToRead=0x1ccc, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesRead=0xc000169cec*=0x1ccc, lpOverlapped=0x0) returned 1
	[0201.813] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0201.813] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065da | out: pbBuffer=0xc0002065da) returned 1
	[0201.813] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1302 | out: pbBuffer=0xc0002c1302) returned 1
	[0201.813] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c135e | out: pbBuffer=0xc0002c135e) returned 1
	[0201.813] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0201.814] GetFileType (hFile=0xd0) returned 0x1
	[0201.814] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7372) returned 1
	[0201.814] WriteFile (in: hFile=0xd0, lpBuffer=0xc000074000*, nNumberOfBytesToWrite=0x1ccc, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000074000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1ccc, lpOverlapped=0xc000151ce8) returned 1
	[0201.814] GetFileType (hFile=0xd0) returned 0x1
	[0201.815] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1ccc, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7372) returned 1
	[0201.815] GetFileType (hFile=0xd0) returned 0x1
	[0201.815] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7372) returned 1
	[0201.815] WriteFile (in: hFile=0xd0, lpBuffer=0xc0003dd880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003dd880*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0201.815] GetFileType (hFile=0xd0) returned 0x1
	[0201.816] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1ccc, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7372) returned 1
	[0201.816] CloseHandle (hObject=0xd0) returned 1
	[0201.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf.egmwv")) returned 0x20
	[0201.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.833] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.330] SetEvent (hEvent=0xc8) returned 1
	[0203.330] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.364] SetEvent (hEvent=0x15c) returned 1
	[0208.364] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.372] SetEvent (hEvent=0x14c) returned 1
	[0208.372] SetEvent (hEvent=0x90) returned 1
	[0208.372] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.497] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid")) returned 0x20
	[0208.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x20) returned 1
	[0208.509] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0208.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.574] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0208.574] ReadFile (in: hFile=0x170, lpBuffer=0xc000124000, nNumberOfBytesToRead=0x1c0a, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000124000*, lpNumberOfBytesRead=0xc00038dcec*=0x1c0a, lpOverlapped=0x0) returned 1
	[0208.585] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0208.585] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000132102 | out: pbBuffer=0xc000132102) returned 1
	[0208.585] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0208.586] GetFileType (hFile=0x170) returned 0x1
	[0208.586] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=7178) returned 1
	[0208.587] WriteFile (in: hFile=0x170, lpBuffer=0xc000148000*, nNumberOfBytesToWrite=0x1c0a, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000148000*, lpNumberOfBytesWritten=0xc000455ccc*=0x1c0a, lpOverlapped=0xc000455ce8) returned 1
	[0208.587] GetFileType (hFile=0x170) returned 0x1
	[0208.588] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1c0a, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=7178) returned 1
	[0208.588] GetFileType (hFile=0x170) returned 0x1
	[0208.588] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=7178) returned 1
	[0208.588] WriteFile (in: hFile=0x170, lpBuffer=0xc000136380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000136380*, lpNumberOfBytesWritten=0xc000455ccc*=0x227, lpOverlapped=0xc000455ce8) returned 1
	[0208.588] GetFileType (hFile=0x170) returned 0x1
	[0208.588] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1c0a, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=7178) returned 1
	[0208.588] CloseHandle (hObject=0x170) returned 1
	[0208.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid.egmwv")) returned 0x20
	[0208.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0208.594] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.608] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.611] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.617] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.639] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.668] SetEvent (hEvent=0xe4) returned 1
	[0208.668] SetEvent (hEvent=0x148) returned 1
	[0208.669] SetEvent (hEvent=0x150) returned 1
	[0208.669] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x0
	[0208.672] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x0
	[0208.673] SetEvent (hEvent=0x148) returned 1
	[0208.673] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x0
	[0208.696] SwitchToThread () returned 1
	[0208.699] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.983] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.985] SetEvent (hEvent=0x150) returned 1
	[0208.985] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.988] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.001] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.016] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.024] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.131] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.156] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.177] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.185] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.205] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.306] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.323] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.333] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.347] SetEvent (hEvent=0x150) returned 1
	[0209.348] SetEvent (hEvent=0xc0) returned 1
	[0209.348] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0209.349] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.350] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x102
	[0209.351] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.352] SetEvent (hEvent=0x150) returned 1
	[0209.352] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x0
	[0209.377] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.059] SetEvent (hEvent=0xc0) returned 1
	[0210.061] SetEvent (hEvent=0x150) returned 1
	[0210.061] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.219] SetEvent (hEvent=0xc0) returned 1
	[0210.219] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.524] SetEvent (hEvent=0x148) returned 1
	[0210.524] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.527] SetEvent (hEvent=0x148) returned 1
	[0210.527] SetEvent (hEvent=0xe4) returned 1
	[0210.527] SwitchToThread () returned 1
	[0210.539] SwitchToThread () returned 1
	[0210.540] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.553] SetEvent (hEvent=0xe4) returned 1
	[0210.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg")) returned 0x20
	[0210.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x20) returned 1
	[0210.555] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.580] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.580] ReadFile (in: hFile=0xe0, lpBuffer=0xc0001a0000, nNumberOfBytesToRead=0x1f8c, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001a0000*, lpNumberOfBytesRead=0xc000429cec*=0x1f8c, lpOverlapped=0x0) returned 1
	[0210.585] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0210.585] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020643a | out: pbBuffer=0xc00020643a) returned 1
	[0210.585] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003bf402 | out: pbBuffer=0xc0003bf402) returned 1
	[0210.585] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bf4a9 | out: pbBuffer=0xc0003bf4a9) returned 1
	[0210.586] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0210.586] GetFileType (hFile=0xe0) returned 0x1
	[0210.586] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=8076) returned 1
	[0210.586] WriteFile (in: hFile=0xe0, lpBuffer=0xc00016e000*, nNumberOfBytesToWrite=0x1f8c, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x1f8c, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.587] GetFileType (hFile=0xe0) returned 0x1
	[0210.587] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1f8c, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=8076) returned 1
	[0210.587] GetFileType (hFile=0xe0) returned 0x1
	[0210.587] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=8076) returned 1
	[0210.587] WriteFile (in: hFile=0xe0, lpBuffer=0xc000464e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000464e00*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x230, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.588] GetFileType (hFile=0xe0) returned 0x1
	[0210.588] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1f8c, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=8076) returned 1
	[0210.588] CloseHandle (hObject=0xe0) returned 1
	[0210.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.egmwv")) returned 0x20
	[0210.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.590] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.594] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.606] SetEvent (hEvent=0xe4) returned 1
	[0210.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif")) returned 0x20
	[0210.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x20) returned 1
	[0210.609] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.637] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0210.637] ReadFile (in: hFile=0x178, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x462c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc00038dcec*=0x462c, lpOverlapped=0x0) returned 1
	[0210.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b80 | out: pbBuffer=0xc000052b80) returned 1
	[0210.643] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215202 | out: pbBuffer=0xc000215202) returned 1
	[0210.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bc0 | out: pbBuffer=0xc000052bc0) returned 1
	[0210.644] GetFileType (hFile=0x178) returned 0x1
	[0210.644] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=17964) returned 1
	[0210.644] WriteFile (in: hFile=0x178, lpBuffer=0xc0001ae000*, nNumberOfBytesToWrite=0x462c, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0001ae000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x462c, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.644] GetFileType (hFile=0x178) returned 0x1
	[0210.644] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x462c, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=17964) returned 1
	[0210.645] GetFileType (hFile=0x178) returned 0x1
	[0210.645] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=17964) returned 1
	[0210.645] WriteFile (in: hFile=0x178, lpBuffer=0xc000359500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000359500*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22a, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.645] GetFileType (hFile=0x178) returned 0x1
	[0210.645] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x462c, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=17964) returned 1
	[0210.646] CloseHandle (hObject=0x178) returned 1
	[0210.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif.egmwv")) returned 0x20
	[0210.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.648] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif")) returned 0x20
	[0210.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x20) returned 1
	[0210.654] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.689] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0210.689] ReadFile (in: hFile=0xe0, lpBuffer=0xc00025a000, nNumberOfBytesToRead=0x4dd3, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00025a000*, lpNumberOfBytesRead=0xc00038dcec*=0x4dd3, lpOverlapped=0x0) returned 1
	[0210.695] SetEvent (hEvent=0xe4) returned 1
	[0210.696] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a80 | out: pbBuffer=0xc000206a80) returned 1
	[0210.696] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000206a9a | out: pbBuffer=0xc000206a9a) returned 1
	[0210.696] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000000b02 | out: pbBuffer=0xc000000b02) returned 1
	[0210.696] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206ac0 | out: pbBuffer=0xc000206ac0) returned 1
	[0210.696] GetFileType (hFile=0xe0) returned 0x1
	[0210.696] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=19923) returned 1
	[0210.696] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001e8000*, nNumberOfBytesToWrite=0x4dd3, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc0001e8000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x4dd3, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.697] GetFileType (hFile=0xe0) returned 0x1
	[0210.697] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4dd3, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=19923) returned 1
	[0210.697] GetFileType (hFile=0xe0) returned 0x1
	[0210.697] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=19923) returned 1
	[0210.697] WriteFile (in: hFile=0xe0, lpBuffer=0xc000267180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000267180*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x233, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.698] GetFileType (hFile=0xe0) returned 0x1
	[0210.698] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4dd3, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=19923) returned 1
	[0210.698] CloseHandle (hObject=0xe0) returned 1
	[0210.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif.egmwv")) returned 0x20
	[0210.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.715] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.951] SetEvent (hEvent=0x15c) returned 1
	[0210.951] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.087] SetEvent (hEvent=0x90) returned 1
	[0211.087] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.113] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.374] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.377] SetEvent (hEvent=0x150) returned 1
	[0211.377] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.379] SetEvent (hEvent=0x150) returned 1
	[0211.379] SwitchToThread () returned 1
	[0211.381] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.385] SetEvent (hEvent=0xe4) returned 1
	[0211.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf")) returned 0x20
	[0211.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF", dwFileAttributes=0x20) returned 1
	[0211.386] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.460] SetEvent (hEvent=0x70) returned 1
	[0211.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.461] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0211.461] ReadFile (in: hFile=0x178, lpBuffer=0xc0003d6000, nNumberOfBytesToRead=0x1714, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003d6000*, lpNumberOfBytesRead=0xc000429cec*=0x1714, lpOverlapped=0x0) returned 1
	[0211.466] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0211.466] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039e02 | out: pbBuffer=0xc000039e02) returned 1
	[0211.466] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0211.467] GetFileType (hFile=0x178) returned 0x1
	[0211.467] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=5908) returned 1
	[0211.467] WriteFile (in: hFile=0x178, lpBuffer=0xc000398000*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000398000*, lpNumberOfBytesWritten=0xc000351ccc*=0x1714, lpOverlapped=0xc000351ce8) returned 1
	[0211.467] GetFileType (hFile=0x178) returned 0x1
	[0211.467] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1714, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=5908) returned 1
	[0211.468] GetFileType (hFile=0x178) returned 0x1
	[0211.468] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=5908) returned 1
	[0211.468] WriteFile (in: hFile=0x178, lpBuffer=0xc0003e7180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0003e7180*, lpNumberOfBytesWritten=0xc000351ccc*=0x22a, lpOverlapped=0xc000351ce8) returned 1
	[0211.468] GetFileType (hFile=0x178) returned 0x1
	[0211.468] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1714, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=5908) returned 1
	[0211.469] CloseHandle (hObject=0x178) returned 1
	[0211.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf.egmwv")) returned 0x20
	[0211.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.473] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf")) returned 0x20
	[0211.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF", dwFileAttributes=0x20) returned 1
	[0211.486] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.509] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0211.509] ReadFile (in: hFile=0x170, lpBuffer=0xc0001b2000, nNumberOfBytesToRead=0x1600, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001b2000*, lpNumberOfBytesRead=0xc00016bcec*=0x1600, lpOverlapped=0x0) returned 1
	[0211.514] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0211.514] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020611a | out: pbBuffer=0xc00020611a) returned 1
	[0211.515] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215102 | out: pbBuffer=0xc000215102) returned 1
	[0211.515] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0211.515] GetFileType (hFile=0x170) returned 0x1
	[0211.515] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=5632) returned 1
	[0211.515] WriteFile (in: hFile=0x170, lpBuffer=0xc0002fa000*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc0002fa000*, lpNumberOfBytesWritten=0xc0000bfccc*=0x1600, lpOverlapped=0xc0000bfce8) returned 1
	[0211.516] GetFileType (hFile=0x170) returned 0x1
	[0211.516] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1600, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=5632) returned 1
	[0211.516] GetFileType (hFile=0x170) returned 0x1
	[0211.516] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=5632) returned 1
	[0211.516] WriteFile (in: hFile=0x170, lpBuffer=0xc0000c7500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc0000c7500*, lpNumberOfBytesWritten=0xc0000bfccc*=0x221, lpOverlapped=0xc0000bfce8) returned 1
	[0211.516] GetFileType (hFile=0x170) returned 0x1
	[0211.517] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1600, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=5632) returned 1
	[0211.517] CloseHandle (hObject=0x170) returned 1
	[0211.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf.egmwv")) returned 0x20
	[0211.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.521] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.534] SetEvent (hEvent=0xe4) returned 1
	[0211.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf")) returned 0x20
	[0211.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF", dwFileAttributes=0x20) returned 1
	[0211.536] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.565] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0211.565] ReadFile (in: hFile=0xe0, lpBuffer=0xc00025e000, nNumberOfBytesToRead=0x2d0c, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00025e000*, lpNumberOfBytesRead=0xc000169cec*=0x2d0c, lpOverlapped=0x0) returned 1
	[0211.571] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206280 | out: pbBuffer=0xc000206280) returned 1
	[0211.571] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020629a | out: pbBuffer=0xc00020629a) returned 1
	[0211.571] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215d02 | out: pbBuffer=0xc000215d02) returned 1
	[0211.571] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0211.571] GetFileType (hFile=0xe0) returned 0x1
	[0211.571] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=11532) returned 1
	[0211.572] WriteFile (in: hFile=0xe0, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x2d0c, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc0000bfccc*=0x2d0c, lpOverlapped=0xc0000bfce8) returned 1
	[0211.572] GetFileType (hFile=0xe0) returned 0x1
	[0211.572] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2d0c, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=11532) returned 1
	[0211.572] GetFileType (hFile=0xe0) returned 0x1
	[0211.573] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=11532) returned 1
	[0211.573] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003bce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc0003bce00*, lpNumberOfBytesWritten=0xc0000bfccc*=0x22a, lpOverlapped=0xc0000bfce8) returned 1
	[0211.573] GetFileType (hFile=0xe0) returned 0x1
	[0211.573] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2d0c, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=11532) returned 1
	[0211.573] CloseHandle (hObject=0xe0) returned 1
	[0211.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf.egmwv")) returned 0x20
	[0211.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.576] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.589] SetEvent (hEvent=0xe4) returned 1
	[0211.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf")) returned 0x20
	[0211.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF", dwFileAttributes=0x20) returned 1
	[0211.591] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.619] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0211.619] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002a5300, nNumberOfBytesToRead=0x1214, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a5300*, lpNumberOfBytesRead=0xc0002d3cec*=0x1214, lpOverlapped=0x0) returned 1
	[0211.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414440 | out: pbBuffer=0xc000414440) returned 1
	[0211.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041445a | out: pbBuffer=0xc00041445a) returned 1
	[0211.625] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1102 | out: pbBuffer=0xc0002c1102) returned 1
	[0211.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414480 | out: pbBuffer=0xc000414480) returned 1
	[0211.625] SetEvent (hEvent=0xe4) returned 1
	[0211.625] GetFileType (hFile=0xe0) returned 0x1
	[0211.626] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=4628) returned 1
	[0211.626] WriteFile (in: hFile=0xe0, lpBuffer=0xc000314000*, nNumberOfBytesToWrite=0x1214, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc000314000*, lpNumberOfBytesWritten=0xc00034dccc*=0x1214, lpOverlapped=0xc00034dce8) returned 1
	[0211.626] GetFileType (hFile=0xe0) returned 0x1
	[0211.627] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1214, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=4628) returned 1
	[0211.627] GetFileType (hFile=0xe0) returned 0x1
	[0211.627] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=4628) returned 1
	[0211.627] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001f6700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc0001f6700*, lpNumberOfBytesWritten=0xc00034dccc*=0x224, lpOverlapped=0xc00034dce8) returned 1
	[0211.627] GetFileType (hFile=0xe0) returned 0x1
	[0211.627] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1214, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=4628) returned 1
	[0211.628] CloseHandle (hObject=0xe0) returned 1
	[0211.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf.egmwv")) returned 0x20
	[0211.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.634] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.636] SetEvent (hEvent=0xe4) returned 1
	[0211.636] SetEvent (hEvent=0x150) returned 1
	[0211.636] SwitchToThread () returned 1
	[0211.637] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.641] SetEvent (hEvent=0x150) returned 1
	[0211.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf")) returned 0x20
	[0211.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF", dwFileAttributes=0x20) returned 1
	[0211.642] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.669] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0211.670] ReadFile (in: hFile=0x178, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0x4b28, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc000169cec*=0x4b28, lpOverlapped=0x0) returned 1
	[0211.676] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0211.676] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0211.676] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0211.676] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000012e5 | out: pbBuffer=0xc0000012e5) returned 1
	[0211.676] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0211.677] GetFileType (hFile=0x178) returned 0x1
	[0211.677] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=19240) returned 1
	[0211.677] WriteFile (in: hFile=0x178, lpBuffer=0xc0003d6000*, nNumberOfBytesToWrite=0x4b28, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc0003d6000*, lpNumberOfBytesWritten=0xc000201ccc*=0x4b28, lpOverlapped=0xc000201ce8) returned 1
	[0211.677] GetFileType (hFile=0x178) returned 0x1
	[0211.678] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4b28, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=19240) returned 1
	[0211.678] GetFileType (hFile=0x178) returned 0x1
	[0211.678] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=19240) returned 1
	[0211.678] WriteFile (in: hFile=0x178, lpBuffer=0xc0002c9500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc0002c9500*, lpNumberOfBytesWritten=0xc000201ccc*=0x22a, lpOverlapped=0xc000201ce8) returned 1
	[0211.678] GetFileType (hFile=0x178) returned 0x1
	[0211.679] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4b28, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=19240) returned 1
	[0211.679] CloseHandle (hObject=0x178) returned 1
	[0211.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf.egmwv")) returned 0x20
	[0211.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.684] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf")) returned 0x20
	[0211.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF", dwFileAttributes=0x20) returned 1
	[0211.690] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.722] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0211.722] ReadFile (in: hFile=0x170, lpBuffer=0xc0001bc000, nNumberOfBytesToRead=0x19a8, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001bc000*, lpNumberOfBytesRead=0xc00016bcec*=0x19a8, lpOverlapped=0x0) returned 1
	[0211.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0211.727] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000332102 | out: pbBuffer=0xc000332102) returned 1
	[0211.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000332102 | out: pbBuffer=0xc000332102) returned 1
	[0211.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000332135 | out: pbBuffer=0xc000332135) returned 1
	[0211.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00033217a | out: pbBuffer=0xc00033217a) returned 1
	[0211.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0211.728] GetFileType (hFile=0x170) returned 0x1
	[0211.728] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=6568) returned 1
	[0211.728] WriteFile (in: hFile=0x170, lpBuffer=0xc000344000*, nNumberOfBytesToWrite=0x19a8, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc000344000*, lpNumberOfBytesWritten=0xc000201ccc*=0x19a8, lpOverlapped=0xc000201ce8) returned 1
	[0211.728] GetFileType (hFile=0x170) returned 0x1
	[0211.728] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x19a8, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=6568) returned 1
	[0211.729] GetFileType (hFile=0x170) returned 0x1
	[0211.729] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=6568) returned 1
	[0211.729] WriteFile (in: hFile=0x170, lpBuffer=0xc000330e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc000330e00*, lpNumberOfBytesWritten=0xc000201ccc*=0x22a, lpOverlapped=0xc000201ce8) returned 1
	[0211.729] GetFileType (hFile=0x170) returned 0x1
	[0211.729] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x19a8, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=6568) returned 1
	[0211.729] CloseHandle (hObject=0x170) returned 1
	[0211.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf.egmwv")) returned 0x20
	[0211.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.733] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf")) returned 0x20
	[0211.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF", dwFileAttributes=0x20) returned 1
	[0211.754] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.781] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.781] ReadFile (in: hFile=0xe0, lpBuffer=0xc0001e4000, nNumberOfBytesToRead=0x1580, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesRead=0xc00016dcec*=0x1580, lpOverlapped=0x0) returned 1
	[0211.786] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053040 | out: pbBuffer=0xc000053040) returned 1
	[0211.786] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000333802 | out: pbBuffer=0xc000333802) returned 1
	[0211.786] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00033380c | out: pbBuffer=0xc00033380c) returned 1
	[0211.786] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000333874 | out: pbBuffer=0xc000333874) returned 1
	[0211.787] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000333899 | out: pbBuffer=0xc000333899) returned 1
	[0211.787] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053080 | out: pbBuffer=0xc000053080) returned 1
	[0211.787] GetFileType (hFile=0xe0) returned 0x1
	[0211.787] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=5504) returned 1
	[0211.787] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002ec000*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesWritten=0xc000201ccc*=0x1580, lpOverlapped=0xc000201ce8) returned 1
	[0211.788] GetFileType (hFile=0xe0) returned 0x1
	[0211.788] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1580, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=5504) returned 1
	[0211.788] GetFileType (hFile=0xe0) returned 0x1
	[0211.788] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=5504) returned 1
	[0211.788] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002f0000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesWritten=0xc000201ccc*=0x224, lpOverlapped=0xc000201ce8) returned 1
	[0211.788] GetFileType (hFile=0xe0) returned 0x1
	[0211.788] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1580, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=5504) returned 1
	[0211.789] CloseHandle (hObject=0xe0) returned 1
	[0211.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf.egmwv")) returned 0x20
	[0211.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.790] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.801] SetEvent (hEvent=0x150) returned 1
	[0211.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf")) returned 0x20
	[0211.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF", dwFileAttributes=0x20) returned 1
	[0211.803] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.829] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0211.829] ReadFile (in: hFile=0xe0, lpBuffer=0xc000311800, nNumberOfBytesToRead=0x7e4, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000311800*, lpNumberOfBytesRead=0xc000429cec*=0x7e4, lpOverlapped=0x0) returned 1
	[0211.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531c0 | out: pbBuffer=0xc0000531c0) returned 1
	[0211.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531da | out: pbBuffer=0xc0000531da) returned 1
	[0211.835] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003ac602 | out: pbBuffer=0xc0003ac602) returned 1
	[0211.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053200 | out: pbBuffer=0xc000053200) returned 1
	[0211.835] GetFileType (hFile=0xe0) returned 0x1
	[0211.836] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=2020) returned 1
	[0211.836] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003b6000*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc0003b6000*, lpNumberOfBytesWritten=0xc000201ccc*=0x7e4, lpOverlapped=0xc000201ce8) returned 1
	[0211.837] GetFileType (hFile=0xe0) returned 0x1
	[0211.837] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7e4, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=2020) returned 1
	[0211.837] GetFileType (hFile=0xe0) returned 0x1
	[0211.837] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=2020) returned 1
	[0211.837] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002f1880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc0002f1880*, lpNumberOfBytesWritten=0xc000201ccc*=0x22d, lpOverlapped=0xc000201ce8) returned 1
	[0211.837] GetFileType (hFile=0xe0) returned 0x1
	[0211.838] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7e4, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=2020) returned 1
	[0211.838] CloseHandle (hObject=0xe0) returned 1
	[0211.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf.egmwv")) returned 0x20
	[0211.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.840] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.866] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.869] SetEvent (hEvent=0x150) returned 1
	[0211.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf")) returned 0x20
	[0211.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF", dwFileAttributes=0x20) returned 1
	[0211.870] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.897] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0211.897] ReadFile (in: hFile=0x178, lpBuffer=0xc000116000, nNumberOfBytesToRead=0xb54, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000116000*, lpNumberOfBytesRead=0xc00038dcec*=0xb54, lpOverlapped=0x0) returned 1
	[0211.903] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053340 | out: pbBuffer=0xc000053340) returned 1
	[0211.903] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003ad302 | out: pbBuffer=0xc0003ad302) returned 1
	[0211.903] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003ad31d | out: pbBuffer=0xc0003ad31d) returned 1
	[0211.903] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053380 | out: pbBuffer=0xc000053380) returned 1
	[0211.903] GetFileType (hFile=0x178) returned 0x1
	[0211.903] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=2900) returned 1
	[0211.904] WriteFile (in: hFile=0x178, lpBuffer=0xc00012e000*, nNumberOfBytesToWrite=0xb54, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesWritten=0xc000201ccc*=0xb54, lpOverlapped=0xc000201ce8) returned 1
	[0211.904] GetFileType (hFile=0x178) returned 0x1
	[0211.904] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xb54, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=2900) returned 1
	[0211.904] GetFileType (hFile=0x178) returned 0x1
	[0211.904] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=2900) returned 1
	[0211.905] WriteFile (in: hFile=0x178, lpBuffer=0xc000123180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc000123180*, lpNumberOfBytesWritten=0xc000201ccc*=0x22a, lpOverlapped=0xc000201ce8) returned 1
	[0211.905] GetFileType (hFile=0x178) returned 0x1
	[0211.905] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xb54, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=2900) returned 1
	[0211.905] CloseHandle (hObject=0x178) returned 1
	[0211.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf.egmwv")) returned 0x20
	[0211.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.911] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf")) returned 0x20
	[0211.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF", dwFileAttributes=0x20) returned 1
	[0211.917] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.960] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0211.960] ReadFile (in: hFile=0x170, lpBuffer=0xc0004ae500, nNumberOfBytesToRead=0x229c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ae500*, lpNumberOfBytesRead=0xc000387cec*=0x229c, lpOverlapped=0x0) returned 1
	[0211.965] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0211.965] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0211.965] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0211.965] GetFileType (hFile=0x170) returned 0x1
	[0211.966] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8860) returned 1
	[0211.966] WriteFile (in: hFile=0x170, lpBuffer=0xc0003da000*, nNumberOfBytesToWrite=0x229c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003da000*, lpNumberOfBytesWritten=0xc000155ccc*=0x229c, lpOverlapped=0xc000155ce8) returned 1
	[0211.966] GetFileType (hFile=0x170) returned 0x1
	[0211.966] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x229c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8860) returned 1
	[0211.966] GetFileType (hFile=0x170) returned 0x1
	[0211.966] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8860) returned 1
	[0211.967] WriteFile (in: hFile=0x170, lpBuffer=0xc000141500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000141500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0211.967] GetFileType (hFile=0x170) returned 0x1
	[0211.967] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x229c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8860) returned 1
	[0211.967] CloseHandle (hObject=0x170) returned 1
	[0211.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf.egmwv")) returned 0x20
	[0211.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.970] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.983] SetEvent (hEvent=0x15c) returned 1
	[0211.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf")) returned 0x20
	[0211.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF", dwFileAttributes=0x20) returned 1
	[0211.986] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.012] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0212.012] ReadFile (in: hFile=0xe0, lpBuffer=0xc000392000, nNumberOfBytesToRead=0x1364, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000392000*, lpNumberOfBytesRead=0xc00038dcec*=0x1364, lpOverlapped=0x0) returned 1
	[0212.017] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0212.017] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0212.017] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394e2 | out: pbBuffer=0xc0000394e2) returned 1
	[0212.018] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0212.018] GetFileType (hFile=0xe0) returned 0x1
	[0212.018] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4964) returned 1
	[0212.018] WriteFile (in: hFile=0xe0, lpBuffer=0xc00034a000*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesWritten=0xc00019dccc*=0x1364, lpOverlapped=0xc00019dce8) returned 1
	[0212.018] GetFileType (hFile=0xe0) returned 0x1
	[0212.018] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1364, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4964) returned 1
	[0212.019] GetFileType (hFile=0xe0) returned 0x1
	[0212.019] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4964) returned 1
	[0212.019] WriteFile (in: hFile=0xe0, lpBuffer=0xc000107500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000107500*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0212.019] GetFileType (hFile=0xe0) returned 0x1
	[0212.019] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1364, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4964) returned 1
	[0212.019] CloseHandle (hObject=0xe0) returned 1
	[0212.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf.egmwv")) returned 0x20
	[0212.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.021] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.032] SetEvent (hEvent=0x15c) returned 1
	[0212.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf")) returned 0x20
	[0212.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF", dwFileAttributes=0x20) returned 1
	[0212.036] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.064] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0212.064] ReadFile (in: hFile=0xe0, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x175c, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc00016dcec*=0x175c, lpOverlapped=0x0) returned 1
	[0212.070] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0212.070] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d0a | out: pbBuffer=0xc000052d0a) returned 1
	[0212.070] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000bc102 | out: pbBuffer=0xc0000bc102) returned 1
	[0212.070] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0212.071] GetFileType (hFile=0xe0) returned 0x1
	[0212.071] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=5980) returned 1
	[0212.071] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0x175c, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc00019dccc*=0x175c, lpOverlapped=0xc00019dce8) returned 1
	[0212.071] GetFileType (hFile=0xe0) returned 0x1
	[0212.071] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x175c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=5980) returned 1
	[0212.071] GetFileType (hFile=0xe0) returned 0x1
	[0212.072] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=5980) returned 1
	[0212.072] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000bae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000bae00*, lpNumberOfBytesWritten=0xc00019dccc*=0x230, lpOverlapped=0xc00019dce8) returned 1
	[0212.072] GetFileType (hFile=0xe0) returned 0x1
	[0212.072] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x175c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=5980) returned 1
	[0212.072] CloseHandle (hObject=0xe0) returned 1
	[0212.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf.egmwv")) returned 0x20
	[0212.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.074] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf")) returned 0x20
	[0212.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF", dwFileAttributes=0x20) returned 1
	[0212.080] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.114] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0212.114] ReadFile (in: hFile=0x178, lpBuffer=0xc00043c000, nNumberOfBytesToRead=0x2b04, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00043c000*, lpNumberOfBytesRead=0xc00016dcec*=0x2b04, lpOverlapped=0x0) returned 1
	[0212.121] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6780 | out: pbBuffer=0xc0002b6780) returned 1
	[0212.121] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b679a | out: pbBuffer=0xc0002b679a) returned 1
	[0212.121] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000442902 | out: pbBuffer=0xc000442902) returned 1
	[0212.121] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67c0 | out: pbBuffer=0xc0002b67c0) returned 1
	[0212.121] GetFileType (hFile=0x178) returned 0x1
	[0212.121] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=11012) returned 1
	[0212.122] WriteFile (in: hFile=0x178, lpBuffer=0xc000256000*, nNumberOfBytesToWrite=0x2b04, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000256000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2b04, lpOverlapped=0xc000155ce8) returned 1
	[0212.123] GetFileType (hFile=0x178) returned 0x1
	[0212.123] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2b04, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=11012) returned 1
	[0212.123] GetFileType (hFile=0x178) returned 0x1
	[0212.123] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=11012) returned 1
	[0212.123] WriteFile (in: hFile=0x178, lpBuffer=0xc0001c3880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001c3880*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0212.124] GetFileType (hFile=0x178) returned 0x1
	[0212.124] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2b04, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=11012) returned 1
	[0212.124] CloseHandle (hObject=0x178) returned 1
	[0212.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf.egmwv")) returned 0x20
	[0212.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.130] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf")) returned 0x20
	[0212.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF", dwFileAttributes=0x20) returned 1
	[0212.136] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.174] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0212.174] ReadFile (in: hFile=0x170, lpBuffer=0xc0001e2000, nNumberOfBytesToRead=0x24b8, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesRead=0xc00016dcec*=0x24b8, lpOverlapped=0x0) returned 1
	[0212.181] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002066a0 | out: pbBuffer=0xc0002066a0) returned 1
	[0212.181] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002066ba | out: pbBuffer=0xc0002066ba) returned 1
	[0212.181] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000355902 | out: pbBuffer=0xc000355902) returned 1
	[0212.181] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00035592b | out: pbBuffer=0xc00035592b) returned 1
	[0212.182] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002066e0 | out: pbBuffer=0xc0002066e0) returned 1
	[0212.182] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0x1) returned 0x0
	[0212.183] SetEvent (hEvent=0x70) returned 1
	[0212.183] SetEvent (hEvent=0x148) returned 1
	[0212.184] GetFileType (hFile=0x170) returned 0x1
	[0212.184] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=9400) returned 1
	[0212.184] WriteFile (in: hFile=0x170, lpBuffer=0xc00031e000*, nNumberOfBytesToWrite=0x24b8, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00031e000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x24b8, lpOverlapped=0xc0001a1ce8) returned 1
	[0212.185] GetFileType (hFile=0x170) returned 0x1
	[0212.185] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x24b8, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=9400) returned 1
	[0212.185] GetFileType (hFile=0x170) returned 0x1
	[0212.185] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=9400) returned 1
	[0212.185] WriteFile (in: hFile=0x170, lpBuffer=0xc0001f7180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0001f7180*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22a, lpOverlapped=0xc0001a1ce8) returned 1
	[0212.186] GetFileType (hFile=0x170) returned 0x1
	[0212.186] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x24b8, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=9400) returned 1
	[0212.186] CloseHandle (hObject=0x170) returned 1
	[0212.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf.egmwv")) returned 0x20
	[0212.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.191] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.194] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.208] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.215] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.235] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.257] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.274] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf")) returned 0x20
	[0212.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF", dwFileAttributes=0x20) returned 1
	[0212.284] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.320] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0212.320] ReadFile (in: hFile=0xe0, lpBuffer=0xc0001de000, nNumberOfBytesToRead=0x43b4, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001de000*, lpNumberOfBytesRead=0xc00016bcec*=0x43b4, lpOverlapped=0x0) returned 1
	[0212.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0212.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0212.326] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0f02 | out: pbBuffer=0xc0002c0f02) returned 1
	[0212.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0f23 | out: pbBuffer=0xc0002c0f23) returned 1
	[0212.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0f6c | out: pbBuffer=0xc0002c0f6c) returned 1
	[0212.327] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0212.327] GetFileType (hFile=0xe0) returned 0x1
	[0212.327] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001c3ca0*=17332) returned 1
	[0212.327] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002f2000*, nNumberOfBytesToWrite=0x43b4, lpNumberOfBytesWritten=0xc0001c3ccc, lpOverlapped=0xc0001c3ce8 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesWritten=0xc0001c3ccc*=0x43b4, lpOverlapped=0xc0001c3ce8) returned 1
	[0212.328] GetFileType (hFile=0xe0) returned 0x1
	[0212.328] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x43b4, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001c3ca0*=17332) returned 1
	[0212.328] GetFileType (hFile=0xe0) returned 0x1
	[0212.328] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001c3ca0*=17332) returned 1
	[0212.329] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000b3500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001c3ccc, lpOverlapped=0xc0001c3ce8 | out: lpBuffer=0xc0000b3500*, lpNumberOfBytesWritten=0xc0001c3ccc*=0x22d, lpOverlapped=0xc0001c3ce8) returned 1
	[0212.329] GetFileType (hFile=0xe0) returned 0x1
	[0212.329] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x43b4, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001c3ca0*=17332) returned 1
	[0212.329] CloseHandle (hObject=0xe0) returned 1
	[0212.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf.egmwv")) returned 0x20
	[0212.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.336] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.351] SetEvent (hEvent=0x148) returned 1
	[0212.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf")) returned 0x20
	[0212.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF", dwFileAttributes=0x20) returned 1
	[0212.362] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.387] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0212.387] ReadFile (in: hFile=0x178, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x21e8, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc00016bcec*=0x21e8, lpOverlapped=0x0) returned 1
	[0212.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206400 | out: pbBuffer=0xc000206400) returned 1
	[0212.393] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ff002 | out: pbBuffer=0xc0000ff002) returned 1
	[0212.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000ff069 | out: pbBuffer=0xc0000ff069) returned 1
	[0212.394] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206440 | out: pbBuffer=0xc000206440) returned 1
	[0212.394] GetFileType (hFile=0x178) returned 0x1
	[0212.394] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8680) returned 1
	[0212.395] WriteFile (in: hFile=0x178, lpBuffer=0xc0003b8000*, nNumberOfBytesToWrite=0x21e8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003b8000*, lpNumberOfBytesWritten=0xc000155ccc*=0x21e8, lpOverlapped=0xc000155ce8) returned 1
	[0212.395] GetFileType (hFile=0x178) returned 0x1
	[0212.395] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x21e8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8680) returned 1
	[0212.395] GetFileType (hFile=0x178) returned 0x1
	[0212.395] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8680) returned 1
	[0212.396] WriteFile (in: hFile=0x178, lpBuffer=0xc000452a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000452a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0212.396] GetFileType (hFile=0x178) returned 0x1
	[0212.396] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x21e8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8680) returned 1
	[0212.396] CloseHandle (hObject=0x178) returned 1
	[0212.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf.egmwv")) returned 0x20
	[0212.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.399] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.402] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.413] SetEvent (hEvent=0x148) returned 1
	[0212.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf")) returned 0x20
	[0212.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF", dwFileAttributes=0x20) returned 1
	[0212.415] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.484] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.494] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0212.494] ReadFile (in: hFile=0x170, lpBuffer=0xc000136000, nNumberOfBytesToRead=0x2030, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc00016bcec*=0x2030, lpOverlapped=0x0) returned 1
	[0212.506] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206740 | out: pbBuffer=0xc000206740) returned 1
	[0212.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020675a | out: pbBuffer=0xc00020675a) returned 1
	[0212.513] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00012d302 | out: pbBuffer=0xc00012d302) returned 1
	[0212.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00012d354 | out: pbBuffer=0xc00012d354) returned 1
	[0212.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206780 | out: pbBuffer=0xc000206780) returned 1
	[0212.513] GetFileType (hFile=0x170) returned 0x1
	[0212.513] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8240) returned 1
	[0212.513] WriteFile (in: hFile=0x170, lpBuffer=0xc000506000*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000506000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2030, lpOverlapped=0xc000155ce8) returned 1
	[0212.514] GetFileType (hFile=0x170) returned 0x1
	[0212.514] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2030, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8240) returned 1
	[0212.514] GetFileType (hFile=0x170) returned 0x1
	[0212.514] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8240) returned 1
	[0212.514] WriteFile (in: hFile=0x170, lpBuffer=0xc000119c00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000119c00*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0212.514] GetFileType (hFile=0x170) returned 0x1
	[0212.515] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2030, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8240) returned 1
	[0212.515] CloseHandle (hObject=0x170) returned 1
	[0212.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf.egmwv")) returned 0x20
	[0212.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.515] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.519] SetEvent (hEvent=0x150) returned 1
	[0212.519] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.524] SetEvent (hEvent=0xe4) returned 1
	[0212.525] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.526] SetEvent (hEvent=0xe4) returned 1
	[0212.526] SetEvent (hEvent=0x150) returned 1
	[0212.526] SetEvent (hEvent=0x54) returned 1
	[0212.526] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf")) returned 0x20
	[0212.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF", dwFileAttributes=0x20) returned 1
	[0212.554] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.660] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00050dcc4 | out: lpMode=0xc00050dcc4) returned 0
	[0212.660] ReadFile (in: hFile=0x178, lpBuffer=0xc00019c000, nNumberOfBytesToRead=0x5804, lpNumberOfBytesRead=0xc00050dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00019c000*, lpNumberOfBytesRead=0xc00050dcec*=0x5804, lpOverlapped=0x0) returned 1
	[0212.668] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0212.668] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0212.668] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001cb3 | out: pbBuffer=0xc000001cb3) returned 1
	[0212.668] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0212.669] GetFileType (hFile=0x178) returned 0x1
	[0212.669] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=22532) returned 1
	[0212.669] WriteFile (in: hFile=0x178, lpBuffer=0xc00044a000*, nNumberOfBytesToWrite=0x5804, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc00044a000*, lpNumberOfBytesWritten=0xc000377ccc*=0x5804, lpOverlapped=0xc000377ce8) returned 1
	[0212.670] GetFileType (hFile=0x178) returned 0x1
	[0212.670] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5804, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=22532) returned 1
	[0212.671] GetFileType (hFile=0x178) returned 0x1
	[0212.671] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=22532) returned 1
	[0212.671] WriteFile (in: hFile=0x178, lpBuffer=0xc0002c9500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0002c9500*, lpNumberOfBytesWritten=0xc000377ccc*=0x224, lpOverlapped=0xc000377ce8) returned 1
	[0212.671] GetFileType (hFile=0x178) returned 0x1
	[0212.671] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5804, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=22532) returned 1
	[0212.671] CloseHandle (hObject=0x178) returned 1
	[0212.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf.egmwv")) returned 0x20
	[0212.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.674] WaitForSingleObject (hHandle=0x5c, dwMilliseconds=0xffffffff) 

Thread:
	id = 5
	os_tid = 0xa30

	[0051.823] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x307feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x307feb0*=0x64) returned 1
	[0051.823] VirtualQuery (in: lpAddress=0x307fed0, lpBuffer=0x307fed0, dwLength=0x30 | out: lpBuffer=0x307fed0*(BaseAddress=0x307f000, AllocationBase=0x2e80000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0051.898] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x68
	[0051.899] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0054.637] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0055.103] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0055.692] SetEvent (hEvent=0x54) returned 1
	[0055.693] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0055.862] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0058.803] SetEvent (hEvent=0x54) returned 1
	[0058.803] SwitchToThread () returned 1
	[0058.809] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x38f0000
	[0058.811] ReadFile (in: hFile=0x94, lpBuffer=0xc0000d6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000d3dd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000d6000, lpNumberOfBytesRead=0xc0000d3dd4*=0x0, lpOverlapped=0x0) returned 0
	[0059.317] CloseHandle (hObject=0x94) returned 1
	[0059.318] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0059.359] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0059.431] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.217] SetEvent (hEvent=0x5c) returned 1
	[0061.217] SetEvent (hEvent=0x60) returned 1
	[0061.218] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.220] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.222] SetEvent (hEvent=0x5c) returned 1
	[0061.222] SetEvent (hEvent=0x60) returned 1
	[0061.222] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.224] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.231] SetEvent (hEvent=0x60) returned 1
	[0061.231] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.232] SetEvent (hEvent=0x60) returned 1
	[0061.232] SwitchToThread () returned 1
	[0061.235] SetEvent (hEvent=0x54) returned 1
	[0061.236] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.561] SetEvent (hEvent=0x5c) returned 1
	[0061.566] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.566] FindFirstFileW (in: lpFileName="K:\\*", lpFindFileData=0xc00039da38 | out: lpFindFileData=0xc00039da38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.571] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.571] FindFirstFileW (in: lpFileName="I:\\*", lpFindFileData=0xc000391a38 | out: lpFindFileData=0xc000391a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.575] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.576] FindFirstFileW (in: lpFileName="J:\\*", lpFindFileData=0xc000393a38 | out: lpFindFileData=0xc000393a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.580] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.580] FindFirstFileW (in: lpFileName="T:\\*", lpFindFileData=0xc00015fa38 | out: lpFindFileData=0xc00015fa38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.585] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.585] FindFirstFileW (in: lpFileName="O:\\*", lpFindFileData=0xc000165a38 | out: lpFindFileData=0xc000165a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.589] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.591] FindFirstFileW (in: lpFileName="P:\\*", lpFindFileData=0xc000397a38 | out: lpFindFileData=0xc000397a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.595] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.641] FindFirstFileW (in: lpFileName="Q:\\*", lpFindFileData=0xc000161a38 | out: lpFindFileData=0xc000161a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.645] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.645] FindFirstFileW (in: lpFileName="Y:\\*", lpFindFileData=0xc000171a38 | out: lpFindFileData=0xc000171a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0061.646] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0061.904] GetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log")) returned 0x26
	[0061.905] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG", dwFileAttributes=0x26) returned 1
	[0062.070] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), lpNewFileName="C:\\Boot\\BCD.LOG.egmwv" (normalized: "c:\\boot\\bcd.log.egmwv"), dwFlags=0x1) returned 0
	[0062.119] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26
	[0062.177] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT", dwFileAttributes=0x26) returned 1
	[0062.178] MoveFileExW (lpExistingFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\Boot\\BOOTSTAT.DAT.egmwv" (normalized: "c:\\boot\\bootstat.dat.egmwv"), dwFlags=0x1) returned 1
	[0062.180] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.egmwv" (normalized: "c:\\boot\\bootstat.dat.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90
	[0062.181] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0062.181] ReadFile (in: hFile=0x90, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x6666, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc000429cec*=0x6666, lpOverlapped=0x0) returned 1
	[0063.057] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00017e2a0 | out: pbBuffer=0xc00017e2a0) returned 1
	[0063.057] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00017e2ba | out: pbBuffer=0xc00017e2ba) returned 1
	[0063.057] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214802 | out: pbBuffer=0xc000214802) returned 1
	[0063.057] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002148cc | out: pbBuffer=0xc0002148cc) returned 1
	[0063.057] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00017e2e0 | out: pbBuffer=0xc00017e2e0) returned 1
	[0063.063] GetFileType (hFile=0x90) returned 0x1
	[0063.063] SetFilePointerEx (in: hFile=0x90, liDistanceToMove=0x0, lpNewFilePointer=0xc00022fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022fca0*=26214) returned 1
	[0063.063] WriteFile (in: hFile=0x90, lpBuffer=0xc00026e000*, nNumberOfBytesToWrite=0x6666, lpNumberOfBytesWritten=0xc00022fccc, lpOverlapped=0xc00022fce8 | out: lpBuffer=0xc00026e000*, lpNumberOfBytesWritten=0xc00022fccc*=0x6666, lpOverlapped=0xc00022fce8) returned 1
	[0063.064] GetFileType (hFile=0x90) returned 0x1
	[0063.064] SetFilePointerEx (in: hFile=0x90, liDistanceToMove=0x6666, lpNewFilePointer=0xc00022fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022fca0*=26214) returned 1
	[0063.064] GetFileType (hFile=0x90) returned 0x1
	[0063.065] SetFilePointerEx (in: hFile=0x90, liDistanceToMove=0x0, lpNewFilePointer=0xc00022fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022fca0*=26214) returned 1
	[0063.065] WriteFile (in: hFile=0x90, lpBuffer=0xc000237500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00022fccc, lpOverlapped=0xc00022fce8 | out: lpBuffer=0xc000237500*, lpNumberOfBytesWritten=0xc00022fccc*=0x230, lpOverlapped=0xc00022fce8) returned 1
	[0063.065] GetFileType (hFile=0x90) returned 0x1
	[0063.065] SetFilePointerEx (in: hFile=0x90, liDistanceToMove=0x6666, lpNewFilePointer=0xc00022fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022fca0*=26214) returned 1
	[0063.066] CloseHandle (hObject=0x90) returned 1
	[0063.069] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.egmwv" (normalized: "c:\\boot\\bootstat.dat.egmwv")) returned 0x26
	[0063.069] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.egmwv", dwFileAttributes=0x27) returned 1
	[0063.070] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0063.201] SetEvent (hEvent=0x90) returned 1
	[0063.201] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20
	[0063.202] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", dwFileAttributes=0x20) returned 0
	[0063.202] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.egmwv" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.egmwv"), dwFlags=0x1) returned 0
	[0063.213] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20
	[0063.213] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", dwFileAttributes=0x20) returned 0
	[0063.213] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.egmwv" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.egmwv"), dwFlags=0x1) returned 0
	[0063.322] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0063.432] SetEvent (hEvent=0x90) returned 1
	[0063.432] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0063.442] SetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.443] MoveFileExW (lpExistingFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.443] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0063.443] SetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.443] MoveFileExW (lpExistingFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.443] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0063.494] SetEvent (hEvent=0xac) returned 1
	[0063.494] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20
	[0063.495] SetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.495] MoveFileExW (lpExistingFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\en-US\\memtest.exe.mui.egmwv" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.691] SetEvent (hEvent=0x70) returned 1
	[0063.692] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0063.822] SetEvent (hEvent=0x90) returned 1
	[0063.823] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0063.824] SetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.824] MoveFileExW (lpExistingFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.011] SetEvent (hEvent=0x70) returned 1
	[0064.011] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0064.329] SetEvent (hEvent=0x90) returned 1
	[0064.329] GetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20
	[0064.330] SetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.330] MoveFileExW (lpExistingFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.330] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0064.420] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0064.439] SetEvent (hEvent=0x90) returned 1
	[0064.440] GetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20
	[0064.440] SetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.440] MoveFileExW (lpExistingFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.440] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0064.595] SetEvent (hEvent=0x90) returned 1
	[0064.595] GetFileAttributesW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20
	[0064.596] SetFileAttributesW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.596] MoveFileExW (lpExistingFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.596] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0064.713] SetEvent (hEvent=0x90) returned 1
	[0064.713] GetFileAttributesW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20
	[0064.713] SetFileAttributesW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.713] MoveFileExW (lpExistingFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.714] GetFileAttributesW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20
	[0064.714] SetFileAttributesW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.714] MoveFileExW (lpExistingFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.714] GetFileAttributesW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20
	[0064.714] SetFileAttributesW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.714] MoveFileExW (lpExistingFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.715] GetFileAttributesW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20
	[0064.715] SetFileAttributesW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.715] MoveFileExW (lpExistingFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.715] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0064.934] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0065.129] SetEvent (hEvent=0x90) returned 1
	[0065.130] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab")) returned 0x2020
	[0065.130] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", dwFileAttributes=0x2020) returned 1
	[0065.166] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.egmwv"), dwFlags=0x1) returned 1
	[0065.451] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0065.457] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0065.459] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x3f30000
	[0065.460] SetEvent (hEvent=0xb0) returned 1
	[0065.460] ReadFile (in: hFile=0x84, lpBuffer=0xc000448000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000448000*, lpNumberOfBytesRead=0xc00016dcec*=0x100000, lpOverlapped=0x0) returned 1
	[0065.621] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0065.627] SetEvent (hEvent=0xb0) returned 1
	[0065.627] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0065.693] SetEvent (hEvent=0xb0) returned 1
	[0065.693] SetEvent (hEvent=0xc8) returned 1
	[0065.693] CloseHandle (hObject=0xa0) returned 1
	[0065.694] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00017e100 | out: pbBuffer=0xc00017e100) returned 1
	[0065.695] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214802 | out: pbBuffer=0xc000214802) returned 1
	[0065.695] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00017e140 | out: pbBuffer=0xc00017e140) returned 1
	[0066.808] SetEvent (hEvent=0x90) returned 1
	[0066.808] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0066.843] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0067.451] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0067.765] SetEvent (hEvent=0xc8) returned 1
	[0067.765] SetEvent (hEvent=0x90) returned 1
	[0067.765] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0067.823] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0067.823] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4
	[0067.823] GetConsoleMode (in: hConsoleHandle=0xa4, lpMode=0xc00038fcc4 | out: lpMode=0xc00038fcc4) returned 0
	[0067.823] ReadFile (in: hFile=0xa4, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x8f8, lpNumberOfBytesRead=0xc00038fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc00038fcec*=0x8f8, lpOverlapped=0x0) returned 1
	[0067.907] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a170 | out: pbBuffer=0xc00041a170) returned 1
	[0067.907] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a18a | out: pbBuffer=0xc00041a18a) returned 1
	[0067.908] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002b7402 | out: pbBuffer=0xc0002b7402) returned 1
	[0067.908] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b745d | out: pbBuffer=0xc0002b745d) returned 1
	[0067.908] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b74ce | out: pbBuffer=0xc0002b74ce) returned 1
	[0067.908] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b74e2 | out: pbBuffer=0xc0002b74e2) returned 1
	[0067.908] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a1b0 | out: pbBuffer=0xc00041a1b0) returned 1
	[0067.908] GetFileType (hFile=0xa4) returned 0x1
	[0067.908] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2296) returned 1
	[0067.909] WriteFile (in: hFile=0xa4, lpBuffer=0xc000402000*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000402000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x8f8, lpOverlapped=0xc0003f9ce8) returned 1
	[0067.911] GetFileType (hFile=0xa4) returned 0x1
	[0067.913] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x8f8, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2296) returned 1
	[0067.917] GetFileType (hFile=0xa4) returned 0x1
	[0067.917] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2296) returned 1
	[0067.917] WriteFile (in: hFile=0xa4, lpBuffer=0xc0007ff500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0007ff500*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x22a, lpOverlapped=0xc0003f9ce8) returned 1
	[0067.917] GetFileType (hFile=0xa4) returned 0x1
	[0067.917] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x8f8, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2296) returned 1
	[0067.918] CloseHandle (hObject=0xa4) returned 1
	[0067.921] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0067.921] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0067.922] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0069.512] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 0x2020
	[0069.513] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", dwFileAttributes=0x2020) returned 1
	[0069.605] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0069.738] GetFileType (hFile=0x84) returned 0x1
	[0069.738] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x0, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0069.738] WriteFile (in: hFile=0x84, lpBuffer=0xc000900000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc00016dccc, lpOverlapped=0xc00016dce8 | out: lpBuffer=0xc000900000*, lpNumberOfBytesWritten=0xc00016dccc*=0x100000, lpOverlapped=0xc00016dce8) returned 1
	[0069.747] GetFileType (hFile=0x84) returned 0x1
	[0069.747] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0069.748] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0070.012] SetEvent (hEvent=0xc4) returned 1
	[0070.012] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0070.012] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0070.013] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0070.014] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc
	[0070.014] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0070.014] ReadFile (in: hFile=0xdc, lpBuffer=0xc0000a4300, nNumberOfBytesToRead=0x648, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000a4300*, lpNumberOfBytesRead=0xc000161cec*=0x648, lpOverlapped=0x0) returned 1
	[0070.051] VirtualAlloc (lpAddress=0xc000074000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000074000
	[0070.052] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a02f0 | out: pbBuffer=0xc0003a02f0) returned 1
	[0070.053] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215f02 | out: pbBuffer=0xc000215f02) returned 1
	[0070.053] VirtualAlloc (lpAddress=0xc000076000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000076000
	[0070.054] VirtualAlloc (lpAddress=0xc000176000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000176000
	[0070.055] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0330 | out: pbBuffer=0xc0003a0330) returned 1
	[0070.055] VirtualAlloc (lpAddress=0xc000178000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000178000
	[0070.056] GetFileType (hFile=0xdc) returned 0x1
	[0070.142] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0073.381] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=1608) returned 1
	[0073.381] WriteFile (in: hFile=0xdc, lpBuffer=0xc000179000*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc000179000*, lpNumberOfBytesWritten=0xc00021dccc*=0x648, lpOverlapped=0xc00021dce8) returned 1
	[0073.382] GetFileType (hFile=0xdc) returned 0x1
	[0073.382] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x648, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=1608) returned 1
	[0073.383] VirtualAlloc (lpAddress=0xc00040a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00040a000
	[0073.383] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0075.252] SwitchToThread () returned 1
	[0075.318] SwitchToThread () returned 1
	[0075.343] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0078.842] SwitchToThread () returned 1
	[0078.970] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0084.022] SetEvent (hEvent=0xc4) returned 1
	[0084.022] SwitchToThread () returned 1
	[0085.421] SetEvent (hEvent=0x5c) returned 1
	[0085.422] SetEvent (hEvent=0xe4) returned 1
	[0085.422] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0085.621] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0085.621] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0085.808] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0085.809] SetEvent (hEvent=0xe4) returned 1
	[0085.809] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0085.940] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0085.942] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 0x2020
	[0085.942] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", dwFileAttributes=0x2020) returned 1
	[0085.943] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.egmwv"), dwFlags=0x1) returned 1
	[0085.944] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0085.944] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0085.944] ReadFile (in: hFile=0xe8, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x708, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc000389cec*=0x708, lpOverlapped=0x0) returned 1
	[0086.159] SwitchToThread () returned 1
	[0086.267] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0086.640] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0086.729] SetEvent (hEvent=0x5c) returned 1
	[0086.729] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0086.730] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000399904 | out: lpMode=0xc000399904) returned 0
	[0086.730] SetEvent (hEvent=0xc4) returned 1
	[0086.730] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0086.814] SwitchToThread () returned 1
	[0086.851] SetEvent (hEvent=0x5c) returned 1
	[0086.852] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0091.150] SetEvent (hEvent=0x90) returned 1
	[0091.152] SwitchToThread () returned 1
	[0092.530] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0093.356] SwitchToThread () returned 1
	[0093.508] SwitchToThread () returned 1
	[0093.636] VirtualAlloc (lpAddress=0xc00006e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006e000
	[0093.637] VirtualAlloc (lpAddress=0xc000070000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000070000
	[0093.638] VirtualAlloc (lpAddress=0xc000072000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000072000
	[0093.639] WriteFile (in: hFile=0xd8, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0003998a4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0003998a4*=0x25d, lpOverlapped=0x0) returned 1
	[0093.642] CloseHandle (hObject=0xd8) returned 1
	[0093.643] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000
	[0093.644] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0xc000399880 | out: lpFileInformation=0xc000399880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9990d4b0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x9990d4b0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0093.644] VirtualAlloc (lpAddress=0xc0000d6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d6000
	[0093.645] VirtualAlloc (lpAddress=0xc0000d8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d8000
	[0093.646] VirtualAlloc (lpAddress=0xc0000da000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000da000
	[0093.647] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0093.647] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0xc0003995f8 | out: lpFindFileData=0xc0003995f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0093.649] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc000399698 | out: lpFindFileData=0xc000399698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.649] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc000399698 | out: lpFindFileData=0xc000399698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0093.649] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc000399698 | out: lpFindFileData=0xc000399698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0093.649] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc000399698 | out: lpFindFileData=0xc000399698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0093.649] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc000399698 | out: lpFindFileData=0xc000399698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0093.649] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0093.651] VirtualAlloc (lpAddress=0xc0000dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000dc000
	[0093.652] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0xc0000ad770 | out: lpFileInformation=0xc0000ad770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1
	[0093.740] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0xc0000ad770 | out: lpFileInformation=0xc0000ad770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1
	[0093.741] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0000ad770 | out: lpFileInformation=0xc0000ad770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1
	[0093.742] SwitchToThread () returned 1
	[0093.914] VirtualAlloc (lpAddress=0xc0001ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ee000
	[0093.914] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0094.234] VirtualAlloc (lpAddress=0xc0001f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f4000
	[0094.235] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0094.237] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00038d904 | out: lpMode=0xc00038d904) returned 0
	[0094.237] VirtualAlloc (lpAddress=0xc0002a0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a0000
	[0094.237] VirtualAlloc (lpAddress=0xc0002a2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a2000
	[0094.239] VirtualAlloc (lpAddress=0xc0002a6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a6000
	[0094.239] VirtualAlloc (lpAddress=0xc0002a8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a8000
	[0094.240] SwitchToThread () returned 1
	[0094.312] SwitchToThread () returned 1
	[0094.350] SetEvent (hEvent=0xb0) returned 1
	[0094.350] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0094.435] SetEvent (hEvent=0xb0) returned 1
	[0094.435] SetEvent (hEvent=0x90) returned 1
	[0094.436] VirtualAlloc (lpAddress=0xc001000000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc001000000
	[0094.437] VirtualAlloc (lpAddress=0xc001000000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001000000
	[0098.758] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x47d0000
	[0098.780] VirtualFree (lpAddress=0xc000438000, dwSize=0x100000, dwFreeType=0x4000) returned 1
	[0099.361] VirtualFree (lpAddress=0xc000700000, dwSize=0x80000, dwFreeType=0x4000) returned 1
	[0099.371] VirtualFree (lpAddress=0xc000686000, dwSize=0xfa000, dwFreeType=0x4000) returned 1
	[0099.371] VirtualFree (lpAddress=0xc0001ce000, dwSize=0x20000, dwFreeType=0x4000) returned 1
	[0099.374] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x18000, dwFreeType=0x4000) returned 0
	[0099.374] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x18000, dwFreeType=0x4000) returned 0
	[0099.375] VirtualFree (lpAddress=0xc0003f2000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0099.376] VirtualFree (lpAddress=0xc0003fe000, dwSize=0xc000, dwFreeType=0x4000) returned 0
	[0099.376] VirtualFree (lpAddress=0xc0003fe000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0099.384] VirtualFree (lpAddress=0xc0003fe000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0099.384] VirtualFree (lpAddress=0xc0003fe000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0099.384] VirtualFree (lpAddress=0xc0003ff000, dwSize=0xb000, dwFreeType=0x4000) returned 0
	[0099.384] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x5000, dwFreeType=0x4000) returned 0
	[0099.385] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0099.385] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0099.385] VirtualFree (lpAddress=0xc000400000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0099.386] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0099.386] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0099.387] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x14000, dwFreeType=0x4000) returned 0
	[0099.387] VirtualFree (lpAddress=0xc0003f2000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0099.387] VirtualFree (lpAddress=0xc0003fc000, dwSize=0x1e000, dwFreeType=0x4000) returned 0
	[0099.387] VirtualFree (lpAddress=0xc0003fc000, dwSize=0xf000, dwFreeType=0x4000) returned 0
	[0099.387] VirtualFree (lpAddress=0xc0003fc000, dwSize=0x7000, dwFreeType=0x4000) returned 0
	[0099.387] VirtualFree (lpAddress=0xc0003fc000, dwSize=0x3000, dwFreeType=0x4000) returned 1
	[0099.388] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0099.388] VirtualFree (lpAddress=0xc0003ff000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0099.388] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0099.388] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0099.388] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0099.388] VirtualFree (lpAddress=0xc000400000, dwSize=0x1a000, dwFreeType=0x4000) returned 1
	[0099.389] VirtualFree (lpAddress=0xc000364000, dwSize=0x16000, dwFreeType=0x4000) returned 1
	[0099.390] VirtualFree (lpAddress=0xc000068000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0099.392] VirtualFree (lpAddress=0xc000272000, dwSize=0xe000, dwFreeType=0x4000) returned 1
	[0099.393] VirtualFree (lpAddress=0xc0001f6000, dwSize=0xe000, dwFreeType=0x4000) returned 1
	[0099.395] VirtualFree (lpAddress=0xc000150000, dwSize=0xe000, dwFreeType=0x4000) returned 1
	[0099.396] VirtualFree (lpAddress=0xc0000e6000, dwSize=0x78000, dwFreeType=0x4000) returned 1
	[0099.396] VirtualFree (lpAddress=0xc00063a000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0099.398] VirtualFree (lpAddress=0xc00063a000, dwSize=0x48000, dwFreeType=0x4000) returned 1
	[0099.398] VirtualFree (lpAddress=0xc00042a000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0099.656] VirtualFree (lpAddress=0xc0002b6000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0099.657] VirtualFree (lpAddress=0xc0003e6000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0099.658] VirtualFree (lpAddress=0xc00037c000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0099.659] VirtualFree (lpAddress=0xc0002c4000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0099.660] VirtualFree (lpAddress=0xc0000d4000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0099.661] VirtualFree (lpAddress=0xc0000aa000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0099.662] VirtualFree (lpAddress=0xc0000aa000, dwSize=0x22000, dwFreeType=0x4000) returned 1
	[0099.662] VirtualFree (lpAddress=0xc0007fa000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0099.663] VirtualFree (lpAddress=0xc0007c4000, dwSize=0x3c000, dwFreeType=0x4000) returned 1
	[0099.663] VirtualFree (lpAddress=0xc00020e000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0099.664] VirtualFree (lpAddress=0xc000206000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0099.665] VirtualFree (lpAddress=0xc000180000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0099.666] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.666] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x40000, dwFreeType=0x4000) returned 1
	[0099.667] VirtualFree (lpAddress=0xc000682000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.667] VirtualFree (lpAddress=0xc00063a000, dwSize=0x146000, dwFreeType=0x4000) returned 1
	[0099.667] VirtualFree (lpAddress=0xc00041c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.668] VirtualFree (lpAddress=0xc0002e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.668] VirtualFree (lpAddress=0xc000298000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.669] VirtualFree (lpAddress=0xc00028e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.669] VirtualFree (lpAddress=0xc000288000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.670] VirtualFree (lpAddress=0xc000282000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.670] VirtualFree (lpAddress=0xc00019a000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.671] VirtualFree (lpAddress=0xc00018e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.671] VirtualFree (lpAddress=0xc000188000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.672] VirtualFree (lpAddress=0xc000176000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.672] VirtualFree (lpAddress=0xc0000e2000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0099.673] VirtualFree (lpAddress=0xc0000e2000, dwSize=0x7c000, dwFreeType=0x4000) returned 1
	[0099.673] VirtualFree (lpAddress=0xc000b32000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.673] VirtualFree (lpAddress=0xc00039e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.674] VirtualFree (lpAddress=0xc0002b2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.674] VirtualFree (lpAddress=0xc000294000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.674] VirtualFree (lpAddress=0xc0001ca000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.675] VirtualFree (lpAddress=0xc000080000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.675] VirtualFree (lpAddress=0xc000050000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.676] VirtualFree (lpAddress=0xc00004c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0099.677] SetEvent (hEvent=0x90) returned 1
	[0101.610] GetFileType (hFile=0xd0) returned 0x1
	[0101.610] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000195ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000195ca0*=1048576) returned 1
	[0101.610] WriteFile (in: hFile=0xd0, lpBuffer=0xc001000000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000195ccc, lpOverlapped=0xc000195ce8 | out: lpBuffer=0xc001000000*, lpNumberOfBytesWritten=0xc000195ccc*=0x100000, lpOverlapped=0xc000195ce8) returned 1
	[0101.748] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0101.896] GetFileType (hFile=0xd0) returned 0x1
	[0101.896] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x100000, lpNewFilePointer=0xc000195ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000195ca0*=1048576) returned 1
	[0101.896] SwitchToThread () returned 1
	[0101.974] VirtualAlloc (lpAddress=0xc00020a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020a000
	[0101.975] VirtualAlloc (lpAddress=0xc00020e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020e000
	[0101.975] GetFileType (hFile=0xd0) returned 0x1
	[0101.975] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000195ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000195ca0*=1048576) returned 1
	[0101.976] WriteFile (in: hFile=0xd0, lpBuffer=0xc00020e000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000195ccc, lpOverlapped=0xc000195ce8 | out: lpBuffer=0xc00020e000*, lpNumberOfBytesWritten=0xc000195ccc*=0x2d8, lpOverlapped=0xc000195ce8) returned 1
	[0102.117] GetFileType (hFile=0xd0) returned 0x1
	[0102.117] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x100000, lpNewFilePointer=0xc000195ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000195ca0*=1048576) returned 1
	[0102.117] CloseHandle (hObject=0xd0) returned 1
	[0112.531] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0112.923] SwitchToThread () returned 1
	[0113.067] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0117.315] VirtualAlloc (lpAddress=0xc000130000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000130000
	[0117.317] VirtualAlloc (lpAddress=0xc000134000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000134000
	[0117.320] VirtualAlloc (lpAddress=0xc000138000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000138000
	[0117.321] VirtualAlloc (lpAddress=0xc00013c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013c000
	[0117.324] VirtualAlloc (lpAddress=0xc000140000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000140000
	[0117.325] VirtualAlloc (lpAddress=0xc000144000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000144000
	[0117.327] VirtualAlloc (lpAddress=0xc000148000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000148000
	[0117.329] VirtualAlloc (lpAddress=0xc00014c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014c000
	[0117.330] VirtualAlloc (lpAddress=0xc000150000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000150000
	[0117.332] VirtualAlloc (lpAddress=0xc0011dc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011dc000
	[0117.334] VirtualAlloc (lpAddress=0xc0011e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011e0000
	[0117.335] VirtualAlloc (lpAddress=0xc0011e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011e4000
	[0117.337] VirtualAlloc (lpAddress=0xc0011e8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011e8000
	[0117.338] VirtualAlloc (lpAddress=0xc0011ec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011ec000
	[0117.340] VirtualAlloc (lpAddress=0xc0011f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011f0000
	[0117.341] VirtualAlloc (lpAddress=0xc0011f4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011f4000
	[0117.343] VirtualAlloc (lpAddress=0xc0011f8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011f8000
	[0117.344] VirtualAlloc (lpAddress=0xc0011fc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011fc000
	[0117.345] VirtualAlloc (lpAddress=0xc0001ce000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ce000
	[0117.347] VirtualAlloc (lpAddress=0xc0001d2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001d2000
	[0117.578] VirtualAlloc (lpAddress=0xc0001d6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001d6000
	[0117.580] VirtualAlloc (lpAddress=0xc0001da000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001da000
	[0117.581] VirtualAlloc (lpAddress=0xc0001de000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001de000
	[0117.582] VirtualAlloc (lpAddress=0xc0001e2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001e2000
	[0117.583] VirtualAlloc (lpAddress=0xc0001e6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001e6000
	[0117.585] VirtualAlloc (lpAddress=0xc0001ea000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ea000
	[0117.586] VirtualAlloc (lpAddress=0xc0001ee000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ee000
	[0117.587] VirtualAlloc (lpAddress=0xc0001f2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f2000
	[0117.588] VirtualAlloc (lpAddress=0xc000912000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000912000
	[0117.590] VirtualAlloc (lpAddress=0xc000916000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000916000
	[0117.591] VirtualAlloc (lpAddress=0xc00091a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00091a000
	[0117.594] VirtualAlloc (lpAddress=0xc00091e000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00091e000
	[0117.597] VirtualAlloc (lpAddress=0xc00092e000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00092e000
	[0117.598] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x140000, dwFreeType=0x4000) returned 0
	[0117.598] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x140000, dwFreeType=0x4000) returned 0
	[0117.598] VirtualFree (lpAddress=0xc0007c0000, dwSize=0xa0000, dwFreeType=0x4000) returned 0
	[0117.599] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x50000, dwFreeType=0x4000) returned 0
	[0117.599] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x28000, dwFreeType=0x4000) returned 1
	[0117.601] VirtualFree (lpAddress=0xc0007e8000, dwSize=0x118000, dwFreeType=0x4000) returned 0
	[0117.601] VirtualFree (lpAddress=0xc0007e8000, dwSize=0x8c000, dwFreeType=0x4000) returned 0
	[0117.601] VirtualFree (lpAddress=0xc0007e8000, dwSize=0x46000, dwFreeType=0x4000) returned 0
	[0117.601] VirtualFree (lpAddress=0xc0007e8000, dwSize=0x23000, dwFreeType=0x4000) returned 0
	[0117.602] VirtualFree (lpAddress=0xc0007e8000, dwSize=0x11000, dwFreeType=0x4000) returned 1
	[0117.603] VirtualFree (lpAddress=0xc0007f9000, dwSize=0x107000, dwFreeType=0x4000) returned 0
	[0117.604] VirtualFree (lpAddress=0xc0007f9000, dwSize=0x83000, dwFreeType=0x4000) returned 0
	[0117.604] VirtualFree (lpAddress=0xc0007f9000, dwSize=0x41000, dwFreeType=0x4000) returned 0
	[0117.604] VirtualFree (lpAddress=0xc0007f9000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0117.604] VirtualFree (lpAddress=0xc0007f9000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0117.604] VirtualFree (lpAddress=0xc0007f9000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0117.605] VirtualFree (lpAddress=0xc0007f9000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0117.605] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x103000, dwFreeType=0x4000) returned 0
	[0117.605] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x81000, dwFreeType=0x4000) returned 0
	[0117.605] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0117.605] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0117.606] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0117.606] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0117.606] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0117.606] VirtualFree (lpAddress=0xc0007fd000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0117.606] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x101000, dwFreeType=0x4000) returned 0
	[0117.607] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0117.607] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0117.607] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0117.607] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0117.607] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0117.607] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0117.608] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0117.608] VirtualFree (lpAddress=0xc0007ff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0117.608] VirtualFree (lpAddress=0xc000800000, dwSize=0x100000, dwFreeType=0x4000) returned 1
	[0117.712] VirtualAlloc (lpAddress=0xc000baa000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.712] VirtualAlloc (lpAddress=0xc000baa000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.712] VirtualAlloc (lpAddress=0xc000baa000, dwSize=0x81000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.712] VirtualAlloc (lpAddress=0xc000baa000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000baa000
	[0117.715] VirtualAlloc (lpAddress=0xc000bea000, dwSize=0xc2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.715] VirtualAlloc (lpAddress=0xc000bea000, dwSize=0x61000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.715] VirtualAlloc (lpAddress=0xc000bea000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.715] VirtualAlloc (lpAddress=0xc000bea000, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.715] VirtualAlloc (lpAddress=0xc000bea000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bea000
	[0117.716] VirtualAlloc (lpAddress=0xc000bf6000, dwSize=0xb6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.716] VirtualAlloc (lpAddress=0xc000bf6000, dwSize=0x5b000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.716] VirtualAlloc (lpAddress=0xc000bf6000, dwSize=0x2d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.717] VirtualAlloc (lpAddress=0xc000bf6000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.717] VirtualAlloc (lpAddress=0xc000bf6000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.717] VirtualAlloc (lpAddress=0xc000bf6000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bf6000
	[0117.717] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0xb1000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.718] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x58000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.718] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x2c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.718] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.755] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0117.755] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bfb000
	[0117.756] VirtualAlloc (lpAddress=0xc000c00000, dwSize=0xac000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000c00000
	[0117.836] SwitchToThread () returned 1
	[0117.897] SetEvent (hEvent=0xac) returned 1
	[0117.897] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0117.935] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0117.935] SetEvent (hEvent=0x70) returned 1
	[0117.935] SetEvent (hEvent=0xac) returned 1
	[0117.935] SetEvent (hEvent=0xe4) returned 1
	[0117.936] VirtualAlloc (lpAddress=0xc000cac000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cac000
	[0117.946] VirtualAlloc (lpAddress=0xc000cf8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cf8000
	[0117.946] VirtualAlloc (lpAddress=0xc000cfc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cfc000
	[0117.948] VirtualAlloc (lpAddress=0xc000d00000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d00000
	[0117.949] VirtualAlloc (lpAddress=0xc000d04000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d04000
	[0117.950] VirtualAlloc (lpAddress=0xc000d08000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d08000
	[0117.950] VirtualAlloc (lpAddress=0xc000d0c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d0c000
	[0117.954] VirtualAlloc (lpAddress=0xc000a86000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000a86000
	[0117.967] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0118.067] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0118.067] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0118.068] SetEvent (hEvent=0xe4) returned 1
	[0118.069] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0118.103] VirtualAlloc (lpAddress=0xc000840000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000840000
	[0118.109] VirtualFree (lpAddress=0xc0003a2000, dwSize=0x42000, dwFreeType=0x4000) returned 1
	[0118.113] VirtualFree (lpAddress=0xc000130000, dwSize=0x2e000, dwFreeType=0x4000) returned 1
	[0118.117] VirtualFree (lpAddress=0xc0001ce000, dwSize=0x28000, dwFreeType=0x4000) returned 1
	[0118.120] VirtualFree (lpAddress=0xc0001ce000, dwSize=0x2a000, dwFreeType=0x4000) returned 1
	[0118.134] VirtualAlloc (lpAddress=0xc000538000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000538000
	[0118.144] VirtualFree (lpAddress=0xc000900000, dwSize=0x2e000, dwFreeType=0x4000) returned 1
	[0118.148] VirtualFree (lpAddress=0xc0008c0000, dwSize=0x6e000, dwFreeType=0x4000) returned 1
	[0118.148] VirtualFree (lpAddress=0xc000798000, dwSize=0x28000, dwFreeType=0x4000) returned 1
	[0118.151] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0118.151] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0118.151] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x14000, dwFreeType=0x4000) returned 0
	[0118.151] VirtualFree (lpAddress=0xc0003f2000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0118.152] VirtualFree (lpAddress=0xc0003fc000, dwSize=0x1e000, dwFreeType=0x4000) returned 0
	[0118.152] VirtualFree (lpAddress=0xc0003fc000, dwSize=0xf000, dwFreeType=0x4000) returned 0
	[0118.153] VirtualFree (lpAddress=0xc0003fc000, dwSize=0x7000, dwFreeType=0x4000) returned 0
	[0118.153] VirtualFree (lpAddress=0xc0003fc000, dwSize=0x3000, dwFreeType=0x4000) returned 1
	[0118.153] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0118.153] VirtualFree (lpAddress=0xc0003ff000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0118.153] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0118.153] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0118.154] VirtualFree (lpAddress=0xc0003ff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0118.154] VirtualFree (lpAddress=0xc000400000, dwSize=0x1a000, dwFreeType=0x4000) returned 1
	[0118.156] VirtualFree (lpAddress=0xc0000aa000, dwSize=0x22000, dwFreeType=0x4000) returned 1
	[0118.158] VirtualFree (lpAddress=0xc0011e4000, dwSize=0x1c000, dwFreeType=0x4000) returned 1
	[0118.161] VirtualFree (lpAddress=0xc00096e000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0118.162] VirtualFree (lpAddress=0xc0002c4000, dwSize=0xe000, dwFreeType=0x4000) returned 1
	[0118.163] VirtualFree (lpAddress=0xc00066e000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0118.210] VirtualAlloc (lpAddress=0xc001400000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc001400000
	[0118.211] VirtualAlloc (lpAddress=0xc001400000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001400000
	[0118.263] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x4800000
	[0118.263] VirtualFree (lpAddress=0xc001200000, dwSize=0x100000, dwFreeType=0x4000) returned 1
	[0118.281] VirtualFree (lpAddress=0xc0011e4000, dwSize=0x11c000, dwFreeType=0x4000) returned 1
	[0118.281] VirtualFree (lpAddress=0xc000d34000, dwSize=0x8c000, dwFreeType=0x4000) returned 1
	[0118.308] VirtualFree (lpAddress=0xc000d34000, dwSize=0x108000, dwFreeType=0x4000) returned 1
	[0118.308] VirtualFree (lpAddress=0xc000b1a000, dwSize=0x88000, dwFreeType=0x4000) returned 1
	[0118.321] VirtualFree (lpAddress=0xc001310000, dwSize=0x82000, dwFreeType=0x4000) returned 1
	[0118.332] VirtualFree (lpAddress=0xc001310000, dwSize=0xf0000, dwFreeType=0x4000) returned 1
	[0118.332] VirtualFree (lpAddress=0xc0011be000, dwSize=0x26000, dwFreeType=0x4000) returned 1
	[0118.338] VirtualFree (lpAddress=0xc0011be000, dwSize=0x142000, dwFreeType=0x4000) returned 1
	[0118.338] VirtualFree (lpAddress=0xc000d12000, dwSize=0x20000, dwFreeType=0x4000) returned 1
	[0118.341] VirtualFree (lpAddress=0xc000d10000, dwSize=0x22000, dwFreeType=0x4000) returned 1
	[0118.341] VirtualFree (lpAddress=0xc00094e000, dwSize=0x20000, dwFreeType=0x4000) returned 1
	[0118.344] VirtualFree (lpAddress=0xc00094e000, dwSize=0x30000, dwFreeType=0x4000) returned 1
	[0118.344] VirtualFree (lpAddress=0xc000cac000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0118.346] VirtualFree (lpAddress=0xc000356000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0118.347] VirtualFree (lpAddress=0xc000b10000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.347] VirtualFree (lpAddress=0xc000b06000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.348] VirtualFree (lpAddress=0xc000ac6000, dwSize=0x48000, dwFreeType=0x4000) returned 1
	[0118.348] VirtualFree (lpAddress=0xc00042c000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.349] VirtualFree (lpAddress=0xc0003e6000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.350] VirtualFree (lpAddress=0xc0001fa000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.351] VirtualFree (lpAddress=0xc0001ac000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.352] VirtualFree (lpAddress=0xc0000d4000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.353] VirtualFree (lpAddress=0xc000380000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0118.353] VirtualFree (lpAddress=0xc000206000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0118.354] VirtualFree (lpAddress=0xc000180000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0118.355] VirtualFree (lpAddress=0xc000a82000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.355] VirtualFree (lpAddress=0xc00077c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.356] VirtualFree (lpAddress=0xc00063a000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.357] VirtualFree (lpAddress=0xc000638000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0118.357] VirtualFree (lpAddress=0xc00041c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.358] VirtualFree (lpAddress=0xc0002bc000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.358] VirtualFree (lpAddress=0xc0002b6000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.359] VirtualFree (lpAddress=0xc0002aa000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.359] VirtualFree (lpAddress=0xc0002a2000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.360] VirtualFree (lpAddress=0xc000298000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.360] VirtualFree (lpAddress=0xc00028e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.361] VirtualFree (lpAddress=0xc000288000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.361] VirtualFree (lpAddress=0xc00020e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.362] VirtualFree (lpAddress=0xc00019e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.363] VirtualFree (lpAddress=0xc00018e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.363] VirtualFree (lpAddress=0xc000188000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.364] VirtualFree (lpAddress=0xc00039e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.364] VirtualFree (lpAddress=0xc00037c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.365] VirtualFree (lpAddress=0xc000378000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.365] VirtualFree (lpAddress=0xc0002b2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.366] VirtualFree (lpAddress=0xc000294000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.366] VirtualFree (lpAddress=0xc000282000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.366] VirtualFree (lpAddress=0xc0001c4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.367] VirtualFree (lpAddress=0xc00019a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.367] VirtualFree (lpAddress=0xc000178000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.367] VirtualFree (lpAddress=0xc000080000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.368] VirtualFree (lpAddress=0xc000050000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.368] VirtualFree (lpAddress=0xc00004c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.370] SetEvent (hEvent=0xac) returned 1
	[0118.430] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0118.530] SetEvent (hEvent=0xc8) returned 1
	[0118.751] GetFileType (hFile=0xa0) returned 0x1
	[0118.752] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0118.752] WriteFile (in: hFile=0xa0, lpBuffer=0xc001400000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000163ccc, lpOverlapped=0xc000163ce8 | out: lpBuffer=0xc001400000*, lpNumberOfBytesWritten=0xc000163ccc*=0x100000, lpOverlapped=0xc000163ce8) returned 1
	[0119.888] GetFileType (hFile=0xa0) returned 0x1
	[0119.888] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x100000, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0119.888] GetFileType (hFile=0xa0) returned 0x1
	[0119.889] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0119.889] WriteFile (in: hFile=0xa0, lpBuffer=0xc000378500*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000163ccc, lpOverlapped=0xc000163ce8 | out: lpBuffer=0xc000378500*, lpNumberOfBytesWritten=0xc000163ccc*=0x2d8, lpOverlapped=0xc000163ce8) returned 1
	[0120.925] GetFileType (hFile=0xa0) returned 0x1
	[0120.926] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x100000, lpNewFilePointer=0xc000163ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000163ca0*=1048576) returned 1
	[0120.926] CloseHandle (hObject=0xa0) returned 1
	[0137.091] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.461] SetEvent (hEvent=0x100) returned 1
	[0137.461] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0159.400] SetEvent (hEvent=0x148) returned 1
	[0159.437] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0159.443] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0201.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf")) returned 0x20
	[0201.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x20) returned 1
	[0201.547] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0201.549] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.782] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0201.782] ReadFile (in: hFile=0xd0, lpBuffer=0xc00020ec00, nNumberOfBytesToRead=0xbc4, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00020ec00*, lpNumberOfBytesRead=0xc00016bcec*=0xbc4, lpOverlapped=0x0) returned 1
	[0201.790] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0201.790] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020644a | out: pbBuffer=0xc00020644a) returned 1
	[0201.790] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0602 | out: pbBuffer=0xc0002c0602) returned 1
	[0201.790] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0201.790] GetFileType (hFile=0xd0) returned 0x1
	[0201.790] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3012) returned 1
	[0201.791] WriteFile (in: hFile=0xd0, lpBuffer=0xc0003da000*, nNumberOfBytesToWrite=0xbc4, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003da000*, lpNumberOfBytesWritten=0xc000151ccc*=0xbc4, lpOverlapped=0xc000151ce8) returned 1
	[0201.792] GetFileType (hFile=0xd0) returned 0x1
	[0201.792] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xbc4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3012) returned 1
	[0201.792] GetFileType (hFile=0xd0) returned 0x1
	[0201.792] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3012) returned 1
	[0201.792] WriteFile (in: hFile=0xd0, lpBuffer=0xc0003dc000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003dc000*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0201.792] GetFileType (hFile=0xd0) returned 0x1
	[0201.792] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xbc4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3012) returned 1
	[0201.793] CloseHandle (hObject=0xd0) returned 1
	[0201.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf.egmwv")) returned 0x20
	[0201.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.811] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0212.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf")) returned 0x20
	[0212.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF", dwFileAttributes=0x20) returned 1
	[0212.587] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.808] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0212.818] SetEvent (hEvent=0x14c) returned 1
	[0212.818] SetEvent (hEvent=0x15c) returned 1
	[0212.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0212.828] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0212.828] ReadFile (in: hFile=0xd8, lpBuffer=0xc00021b800, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00021b800*, lpNumberOfBytesRead=0xc00016dcec*=0x3734, lpOverlapped=0x0) returned 1
	[0212.838] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0212.838] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038802 | out: pbBuffer=0xc000038802) returned 1
	[0212.838] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000388e0 | out: pbBuffer=0xc0000388e0) returned 1
	[0212.838] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206490 | out: pbBuffer=0xc000206490) returned 1
	[0212.838] GetFileType (hFile=0xd8) returned 0x1
	[0212.839] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=14132) returned 1
	[0212.839] WriteFile (in: hFile=0xd8, lpBuffer=0xc0003ea000*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0003ea000*, lpNumberOfBytesWritten=0xc000377ccc*=0x3734, lpOverlapped=0xc000377ce8) returned 1
	[0212.839] GetFileType (hFile=0xd8) returned 0x1
	[0212.839] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x3734, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=14132) returned 1
	[0212.839] GetFileType (hFile=0xd8) returned 0x1
	[0212.840] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=14132) returned 1
	[0212.840] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002cf880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0002cf880*, lpNumberOfBytesWritten=0xc000377ccc*=0x230, lpOverlapped=0xc000377ce8) returned 1
	[0212.840] GetFileType (hFile=0xd8) returned 0x1
	[0212.840] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x3734, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=14132) returned 1
	[0212.840] CloseHandle (hObject=0xd8) returned 1
	[0212.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf.egmwv")) returned 0x20
	[0212.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.869] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.608] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.635] SetEvent (hEvent=0x90) returned 1
	[0213.635] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.644] SetEvent (hEvent=0x144) returned 1
	[0213.644] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.659] SetEvent (hEvent=0x120) returned 1
	[0213.659] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.874] SetEvent (hEvent=0xac) returned 1
	[0213.874] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.881] SetEvent (hEvent=0x84) returned 1
	[0213.882] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.885] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0213.906] SetEvent (hEvent=0xe4) returned 1
	[0213.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf")) returned 0x20
	[0213.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF", dwFileAttributes=0x20) returned 1
	[0213.908] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0214.008] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0214.008] ReadFile (in: hFile=0xd8, lpBuffer=0xc0002ab300, nNumberOfBytesToRead=0x121c, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ab300*, lpNumberOfBytesRead=0xc0002d5cec*=0x121c, lpOverlapped=0x0) returned 1
	[0214.019] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070110 | out: pbBuffer=0xc000070110) returned 1
	[0214.019] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0214.019] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d4a | out: pbBuffer=0xc000214d4a) returned 1
	[0214.019] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d79 | out: pbBuffer=0xc000214d79) returned 1
	[0214.019] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214de5 | out: pbBuffer=0xc000214de5) returned 1
	[0214.020] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070150 | out: pbBuffer=0xc000070150) returned 1
	[0214.020] GetFileType (hFile=0xd8) returned 0x1
	[0214.020] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=4636) returned 1
	[0214.020] WriteFile (in: hFile=0xd8, lpBuffer=0xc000476000*, nNumberOfBytesToWrite=0x121c, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000476000*, lpNumberOfBytesWritten=0xc000309ccc*=0x121c, lpOverlapped=0xc000309ce8) returned 1
	[0214.020] GetFileType (hFile=0xd8) returned 0x1
	[0214.021] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x121c, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=4636) returned 1
	[0214.021] GetFileType (hFile=0xd8) returned 0x1
	[0214.021] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=4636) returned 1
	[0214.021] WriteFile (in: hFile=0xd8, lpBuffer=0xc00016f500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc00016f500*, lpNumberOfBytesWritten=0xc000309ccc*=0x227, lpOverlapped=0xc000309ce8) returned 1
	[0214.021] GetFileType (hFile=0xd8) returned 0x1
	[0214.021] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x121c, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=4636) returned 1
	[0214.021] CloseHandle (hObject=0xd8) returned 1
	[0214.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf.egmwv")) returned 0x20
	[0214.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf")) returned 0x20
	[0214.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF", dwFileAttributes=0x20) returned 1
	[0214.030] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.053] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0214.053] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003dc000, nNumberOfBytesToRead=0x1b68, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003dc000*, lpNumberOfBytesRead=0xc000147cec*=0x1b68, lpOverlapped=0x0) returned 1
	[0214.064] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000702b0 | out: pbBuffer=0xc0000702b0) returned 1
	[0214.065] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000702ca | out: pbBuffer=0xc0000702ca) returned 1
	[0214.065] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0214.065] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0214.065] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021598d | out: pbBuffer=0xc00021598d) returned 1
	[0214.065] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002159b4 | out: pbBuffer=0xc0002159b4) returned 1
	[0214.065] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000702f0 | out: pbBuffer=0xc0000702f0) returned 1
	[0214.065] GetFileType (hFile=0xcc) returned 0x1
	[0214.066] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=7016) returned 1
	[0214.066] WriteFile (in: hFile=0xcc, lpBuffer=0xc000352000*, nNumberOfBytesToWrite=0x1b68, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000352000*, lpNumberOfBytesWritten=0xc000309ccc*=0x1b68, lpOverlapped=0xc000309ce8) returned 1
	[0214.066] GetFileType (hFile=0xcc) returned 0x1
	[0214.066] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1b68, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=7016) returned 1
	[0214.066] GetFileType (hFile=0xcc) returned 0x1
	[0214.067] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=7016) returned 1
	[0214.067] WriteFile (in: hFile=0xcc, lpBuffer=0xc000372e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000372e00*, lpNumberOfBytesWritten=0xc000309ccc*=0x22d, lpOverlapped=0xc000309ce8) returned 1
	[0214.067] GetFileType (hFile=0xcc) returned 0x1
	[0214.067] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1b68, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=7016) returned 1
	[0214.067] CloseHandle (hObject=0xcc) returned 1
	[0214.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf.egmwv")) returned 0x20
	[0214.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.071] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.075] SetEvent (hEvent=0xac) returned 1
	[0214.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf")) returned 0x20
	[0214.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF", dwFileAttributes=0x20) returned 1
	[0214.077] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0214.119] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0214.119] ReadFile (in: hFile=0xd8, lpBuffer=0xc0001b0000, nNumberOfBytesToRead=0xc44, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001b0000*, lpNumberOfBytesRead=0xc000147cec*=0xc44, lpOverlapped=0x0) returned 1
	[0214.126] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6420 | out: pbBuffer=0xc0002b6420) returned 1
	[0214.126] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b643a | out: pbBuffer=0xc0002b643a) returned 1
	[0214.126] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f4d02 | out: pbBuffer=0xc0000f4d02) returned 1
	[0214.126] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000f4d07 | out: pbBuffer=0xc0000f4d07) returned 1
	[0214.127] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6460 | out: pbBuffer=0xc0002b6460) returned 1
	[0214.127] GetFileType (hFile=0xd8) returned 0x1
	[0214.127] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015fca0*=3140) returned 1
	[0214.127] WriteFile (in: hFile=0xd8, lpBuffer=0xc0001c6000*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0xc00015fccc, lpOverlapped=0xc00015fce8 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesWritten=0xc00015fccc*=0xc44, lpOverlapped=0xc00015fce8) returned 1
	[0214.128] GetFileType (hFile=0xd8) returned 0x1
	[0214.128] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xc44, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015fca0*=3140) returned 1
	[0214.128] GetFileType (hFile=0xd8) returned 0x1
	[0214.128] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015fca0*=3140) returned 1
	[0214.128] WriteFile (in: hFile=0xd8, lpBuffer=0xc0001c0700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00015fccc, lpOverlapped=0xc00015fce8 | out: lpBuffer=0xc0001c0700*, lpNumberOfBytesWritten=0xc00015fccc*=0x224, lpOverlapped=0xc00015fce8) returned 1
	[0214.128] GetFileType (hFile=0xd8) returned 0x1
	[0214.129] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xc44, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015fca0*=3140) returned 1
	[0214.129] CloseHandle (hObject=0xd8) returned 1
	[0214.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf.egmwv")) returned 0x20
	[0214.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.133] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf")) returned 0x20
	[0214.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF", dwFileAttributes=0x20) returned 1
	[0214.140] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.173] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0214.173] ReadFile (in: hFile=0xa8, lpBuffer=0xc000225300, nNumberOfBytesToRead=0x12b4, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000225300*, lpNumberOfBytesRead=0xc000389cec*=0x12b4, lpOverlapped=0x0) returned 1
	[0214.184] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065f0 | out: pbBuffer=0xc0002065f0) returned 1
	[0214.184] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001af302 | out: pbBuffer=0xc0001af302) returned 1
	[0214.184] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001af34a | out: pbBuffer=0xc0001af34a) returned 1
	[0214.185] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001af3de | out: pbBuffer=0xc0001af3de) returned 1
	[0214.185] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206630 | out: pbBuffer=0xc000206630) returned 1
	[0214.185] GetFileType (hFile=0xa8) returned 0x1
	[0214.185] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=4788) returned 1
	[0214.185] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002f0000*, nNumberOfBytesToWrite=0x12b4, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesWritten=0xc00030dccc*=0x12b4, lpOverlapped=0xc00030dce8) returned 1
	[0214.186] GetFileType (hFile=0xa8) returned 0x1
	[0214.186] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x12b4, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=4788) returned 1
	[0214.186] GetFileType (hFile=0xa8) returned 0x1
	[0214.186] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=4788) returned 1
	[0214.186] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002f2000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesWritten=0xc00030dccc*=0x22a, lpOverlapped=0xc00030dce8) returned 1
	[0214.186] GetFileType (hFile=0xa8) returned 0x1
	[0214.187] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x12b4, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=4788) returned 1
	[0214.187] CloseHandle (hObject=0xa8) returned 1
	[0214.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf.egmwv")) returned 0x20
	[0214.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.193] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.204] SetEvent (hEvent=0x124) returned 1
	[0214.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf")) returned 0x20
	[0214.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF", dwFileAttributes=0x20) returned 1
	[0214.213] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.245] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0214.245] ReadFile (in: hFile=0xcc, lpBuffer=0xc000434000, nNumberOfBytesToRead=0x4146, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000434000*, lpNumberOfBytesRead=0xc000389cec*=0x4146, lpOverlapped=0x0) returned 1
	[0214.252] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0214.252] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eaa | out: pbBuffer=0xc000052eaa) returned 1
	[0214.253] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000302a02 | out: pbBuffer=0xc000302a02) returned 1
	[0214.253] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0214.253] GetFileType (hFile=0xcc) returned 0x1
	[0214.253] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16710) returned 1
	[0214.253] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003a8000*, nNumberOfBytesToWrite=0x4146, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003a8000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4146, lpOverlapped=0xc000155ce8) returned 1
	[0214.254] GetFileType (hFile=0xcc) returned 0x1
	[0214.254] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4146, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16710) returned 1
	[0214.254] GetFileType (hFile=0xcc) returned 0x1
	[0214.254] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16710) returned 1
	[0214.254] WriteFile (in: hFile=0xcc, lpBuffer=0xc000454a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000454a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0214.254] GetFileType (hFile=0xcc) returned 0x1
	[0214.255] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4146, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16710) returned 1
	[0214.255] CloseHandle (hObject=0xcc) returned 1
	[0214.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf.egmwv")) returned 0x20
	[0214.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.256] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.269] SetEvent (hEvent=0x124) returned 1
	[0214.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg")) returned 0x20
	[0214.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG", dwFileAttributes=0x20) returned 1
	[0214.271] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0214.318] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000149cc4 | out: lpMode=0xc000149cc4) returned 0
	[0214.318] ReadFile (in: hFile=0xd8, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0xf0c1, lpNumberOfBytesRead=0xc000149cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000149cec*=0xf0c1, lpOverlapped=0x0) returned 1
	[0214.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0214.326] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0214.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0947 | out: pbBuffer=0xc0002c0947) returned 1
	[0214.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0957 | out: pbBuffer=0xc0002c0957) returned 1
	[0214.327] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c097f | out: pbBuffer=0xc0002c097f) returned 1
	[0214.327] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0214.327] GetFileType (hFile=0xd8) returned 0x1
	[0214.327] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=61633) returned 1
	[0214.328] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002a0000*, nNumberOfBytesToWrite=0xf0c1, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesWritten=0xc00030dccc*=0xf0c1, lpOverlapped=0xc00030dce8) returned 1
	[0214.328] GetFileType (hFile=0xd8) returned 0x1
	[0214.328] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xf0c1, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=61633) returned 1
	[0214.329] GetFileType (hFile=0xd8) returned 0x1
	[0214.329] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=61633) returned 1
	[0214.329] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002f3500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0002f3500*, lpNumberOfBytesWritten=0xc00030dccc*=0x230, lpOverlapped=0xc00030dce8) returned 1
	[0214.330] GetFileType (hFile=0xd8) returned 0x1
	[0214.330] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xf0c1, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=61633) returned 1
	[0214.330] CloseHandle (hObject=0xd8) returned 1
	[0214.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.egmwv")) returned 0x20
	[0214.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.336] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg")) returned 0x20
	[0214.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG", dwFileAttributes=0x20) returned 1
	[0214.349] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.382] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0214.383] ReadFile (in: hFile=0xa8, lpBuffer=0xc00027a000, nNumberOfBytesToRead=0x7c6a, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00027a000*, lpNumberOfBytesRead=0xc000169cec*=0x7c6a, lpOverlapped=0x0) returned 1
	[0214.408] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6410 | out: pbBuffer=0xc0002b6410) returned 1
	[0214.408] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031e402 | out: pbBuffer=0xc00031e402) returned 1
	[0214.408] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00031e4a0 | out: pbBuffer=0xc00031e4a0) returned 1
	[0214.408] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0214.408] GetFileType (hFile=0xa8) returned 0x1
	[0214.409] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000161ca0*=31850) returned 1
	[0214.409] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000fc000*, nNumberOfBytesToWrite=0x7c6a, lpNumberOfBytesWritten=0xc000161ccc, lpOverlapped=0xc000161ce8 | out: lpBuffer=0xc0000fc000*, lpNumberOfBytesWritten=0xc000161ccc*=0x7c6a, lpOverlapped=0xc000161ce8) returned 1
	[0214.409] GetFileType (hFile=0xa8) returned 0x1
	[0214.409] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7c6a, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000161ca0*=31850) returned 1
	[0214.410] GetFileType (hFile=0xa8) returned 0x1
	[0214.410] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000161ca0*=31850) returned 1
	[0214.410] WriteFile (in: hFile=0xa8, lpBuffer=0xc000368a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000161ccc, lpOverlapped=0xc000161ce8 | out: lpBuffer=0xc000368a80*, lpNumberOfBytesWritten=0xc000161ccc*=0x233, lpOverlapped=0xc000161ce8) returned 1
	[0214.410] GetFileType (hFile=0xa8) returned 0x1
	[0214.410] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7c6a, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000161ca0*=31850) returned 1
	[0214.410] CloseHandle (hObject=0xa8) returned 1
	[0214.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.egmwv")) returned 0x20
	[0214.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.414] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.421] SetEvent (hEvent=0x84) returned 1
	[0214.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg")) returned 0x20
	[0214.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG", dwFileAttributes=0x20) returned 1
	[0214.423] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.436] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000145cc4 | out: lpMode=0xc000145cc4) returned 0
	[0214.436] ReadFile (in: hFile=0xa8, lpBuffer=0xc00011a000, nNumberOfBytesToRead=0x84a6, lpNumberOfBytesRead=0xc000145cec, lpOverlapped=0x0 | out: lpBuffer=0xc00011a000*, lpNumberOfBytesRead=0xc000145cec*=0x84a6, lpOverlapped=0x0) returned 1
	[0214.488] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0214.488] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020642a | out: pbBuffer=0xc00020642a) returned 1
	[0214.488] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000302902 | out: pbBuffer=0xc000302902) returned 1
	[0214.488] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003029da | out: pbBuffer=0xc0003029da) returned 1
	[0214.488] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0214.489] SetEvent (hEvent=0x90) returned 1
	[0214.489] GetFileType (hFile=0xa8) returned 0x1
	[0214.489] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=33958) returned 1
	[0214.490] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004bc000*, nNumberOfBytesToWrite=0x84a6, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004bc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x84a6, lpOverlapped=0xc000155ce8) returned 1
	[0214.490] GetFileType (hFile=0xa8) returned 0x1
	[0214.490] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x84a6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=33958) returned 1
	[0214.490] GetFileType (hFile=0xa8) returned 0x1
	[0214.490] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=33958) returned 1
	[0214.491] WriteFile (in: hFile=0xa8, lpBuffer=0xc000222700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000222700*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0214.491] GetFileType (hFile=0xa8) returned 0x1
	[0214.491] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x84a6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=33958) returned 1
	[0214.491] CloseHandle (hObject=0xa8) returned 1
	[0214.506] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.573] SetEvent (hEvent=0x70) returned 1
	[0214.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.egmwv")) returned 0x20
	[0214.573] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.584] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0214.587] SetEvent (hEvent=0x144) returned 1
	[0214.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg")) returned 0x20
	[0214.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG", dwFileAttributes=0x20) returned 1
	[0214.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0214.608] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0214.608] ReadFile (in: hFile=0x130, lpBuffer=0xc00037c000, nNumberOfBytesToRead=0x955d, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesRead=0xc00016bcec*=0x955d, lpOverlapped=0x0) returned 1
	[0214.707] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6410 | out: pbBuffer=0xc0002b6410) returned 1
	[0214.707] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000000c02 | out: pbBuffer=0xc000000c02) returned 1
	[0214.707] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0214.708] GetFileType (hFile=0x130) returned 0x1
	[0214.708] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=38237) returned 1
	[0214.708] WriteFile (in: hFile=0x130, lpBuffer=0xc0000b2000*, nNumberOfBytesToWrite=0x955d, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0000b2000*, lpNumberOfBytesWritten=0xc00030dccc*=0x955d, lpOverlapped=0xc00030dce8) returned 1
	[0214.709] GetFileType (hFile=0x130) returned 0x1
	[0214.709] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x955d, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=38237) returned 1
	[0214.709] GetFileType (hFile=0x130) returned 0x1
	[0214.709] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=38237) returned 1
	[0214.710] WriteFile (in: hFile=0x130, lpBuffer=0xc000171c00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000171c00*, lpNumberOfBytesWritten=0xc00030dccc*=0x236, lpOverlapped=0xc00030dce8) returned 1
	[0214.710] GetFileType (hFile=0x130) returned 0x1
	[0214.710] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x955d, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=38237) returned 1
	[0214.710] CloseHandle (hObject=0x130) returned 1
	[0214.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.egmwv")) returned 0x20
	[0214.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.727] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) 

Thread:
	id = 9
	os_tid = 0x324

	[0061.693] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x3b2feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3b2feb0*=0x8c) returned 1
	[0061.693] VirtualQuery (in: lpAddress=0x3b2fed0, lpBuffer=0x3b2fed0, dwLength=0x30 | out: lpBuffer=0x3b2fed0*(BaseAddress=0x3b2f000, AllocationBase=0x3930000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0061.694] GetProcAddress (hModule=0x76f20000, lpProcName="GetFileAttributesW") returned 0x76f3bdd0
	[0061.694] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27
	[0061.694] GetProcAddress (hModule=0x76f20000, lpProcName="SetFileAttributesW") returned 0x76f337a0
	[0061.694] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1
	[0061.697] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76f20000
	[0061.697] GetProcAddress (hModule=0x76f20000, lpProcName="MoveFileExW") returned 0x76f23060
	[0061.698] MoveFileExW (lpExistingFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), lpNewFileName="C:\\BOOTSECT.BAK.egmwv" (normalized: "c:\\bootsect.bak.egmwv"), dwFlags=0x1) returned 1
	[0061.699] CreateFileW (lpFileName="C:\\BOOTSECT.BAK.egmwv" (normalized: "c:\\bootsect.bak.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94
	[0061.699] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0061.700] ReadFile (in: hFile=0x94, lpBuffer=0xc0001ac000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac000*, lpNumberOfBytesRead=0xc000199cec*=0x2000, lpOverlapped=0x0) returned 1
	[0061.774] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x7fefddc0000
	[0061.775] GetProcAddress (hModule=0x7fefddc0000, lpProcName="CryptAcquireContextW") returned 0x7fefddcd98c
	[0061.775] CryptAcquireContextW (in: phProv=0xc00000e208, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0xc00000e208*=0x885010) returned 1
	[0062.122] GetProcAddress (hModule=0x7fefddc0000, lpProcName="CryptGenRandom") returned 0x7fefddcdc60
	[0062.122] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000011660 | out: pbBuffer=0xc000011660) returned 1
	[0062.122] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000011698 | out: pbBuffer=0xc000011698) returned 1
	[0062.122] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038c02 | out: pbBuffer=0xc000038c02) returned 1
	[0062.123] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000116e0 | out: pbBuffer=0xc0000116e0) returned 1
	[0062.123] GetProcAddress (hModule=0x76f20000, lpProcName="GetFileType") returned 0x76f42e00
	[0062.123] GetFileType (hFile=0x94) returned 0x1
	[0062.123] GetProcAddress (hModule=0x76f20000, lpProcName="SetFilePointerEx") returned 0x76f2af00
	[0062.123] SetFilePointerEx (in: hFile=0x94, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=8192) returned 1
	[0062.124] GetProcAddress (hModule=0x76f20000, lpProcName="WriteFile") returned 0x76f435a0
	[0062.124] WriteFile (in: hFile=0x94, lpBuffer=0xc0001e4000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesWritten=0xc00006fccc*=0x2000, lpOverlapped=0xc00006fce8) returned 1
	[0062.125] GetFileType (hFile=0x94) returned 0x1
	[0062.125] SetFilePointerEx (in: hFile=0x94, liDistanceToMove=0x2000, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=8192) returned 1
	[0062.125] GetFileType (hFile=0x94) returned 0x1
	[0062.125] SetFilePointerEx (in: hFile=0x94, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=8192) returned 1
	[0062.125] WriteFile (in: hFile=0x94, lpBuffer=0xc0001c1500*, nNumberOfBytesToWrite=0x21b, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc0001c1500*, lpNumberOfBytesWritten=0xc00006fccc*=0x21b, lpOverlapped=0xc00006fce8) returned 1
	[0062.126] GetFileType (hFile=0x94) returned 0x1
	[0062.126] SetFilePointerEx (in: hFile=0x94, liDistanceToMove=0x2000, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=8192) returned 1
	[0062.126] CloseHandle (hObject=0x94) returned 1
	[0062.133] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.egmwv" (normalized: "c:\\bootsect.bak.egmwv")) returned 0x26
	[0063.053] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.egmwv", dwFileAttributes=0x27) returned 1
	[0063.053] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xac
	[0063.054] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0063.232] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20
	[0063.233] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", dwFileAttributes=0x20) returned 0
	[0063.233] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf.egmwv" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.egmwv"), dwFlags=0x1) returned 0
	[0063.322] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0063.544] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0063.599] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0065.172] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 0x2020
	[0065.173] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", dwFileAttributes=0x2020) returned 1
	[0065.180] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.egmwv"), dwFlags=0x1) returned 1
	[0066.830] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0067.929] SetEvent (hEvent=0x5c) returned 1
	[0067.930] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0069.511] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi")) returned 0x2020
	[0069.511] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", dwFileAttributes=0x2020) returned 1
	[0069.512] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.egmwv"), dwFlags=0x1) returned 1
	[0072.701] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0073.543] VirtualAlloc (lpAddress=0xc00041c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00041c000
	[0073.544] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0074.095] SetEvent (hEvent=0x68) returned 1
	[0074.099] SetEvent (hEvent=0xe4) returned 1
	[0074.099] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0075.288] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0075.289] SwitchToThread () returned 1
	[0075.318] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0075.344] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0075.344] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0075.377] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0075.379] SetEvent (hEvent=0x5c) returned 1
	[0075.379] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0075.495] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0075.497] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f2000
	[0075.499] VirtualAlloc (lpAddress=0xc000070000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000070000
	[0075.500] VirtualAlloc (lpAddress=0xc000134000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000134000
	[0075.501] VirtualAlloc (lpAddress=0xc000212000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000212000
	[0075.502] VirtualFree (lpAddress=0xc000606000, dwSize=0xc4000, dwFreeType=0x4000) returned 1
	[0075.517] VirtualFree (lpAddress=0xc000606000, dwSize=0x1e8000, dwFreeType=0x4000) returned 1
	[0075.518] VirtualAlloc (lpAddress=0xc00027e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027e000
	[0075.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a120 | out: pbBuffer=0xc00041a120) returned 1
	[0075.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a13a | out: pbBuffer=0xc00041a13a) returned 1
	[0075.519] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214802 | out: pbBuffer=0xc000214802) returned 1
	[0075.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214854 | out: pbBuffer=0xc000214854) returned 1
	[0075.520] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a160 | out: pbBuffer=0xc00041a160) returned 1
	[0075.520] GetFileType (hFile=0xd8) returned 0x1
	[0075.520] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=1450) returned 1
	[0075.520] WriteFile (in: hFile=0xd8, lpBuffer=0xc00023f000*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc00023f000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x5aa, lpOverlapped=0xc0003f9ce8) returned 1
	[0075.521] GetFileType (hFile=0xd8) returned 0x1
	[0075.521] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x5aa, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=1450) returned 1
	[0075.522] GetFileType (hFile=0xd8) returned 0x1
	[0075.522] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=1450) returned 1
	[0075.522] WriteFile (in: hFile=0xd8, lpBuffer=0xc00027f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc00027f500*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x22a, lpOverlapped=0xc0003f9ce8) returned 1
	[0075.522] GetFileType (hFile=0xd8) returned 0x1
	[0075.522] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x5aa, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=1450) returned 1
	[0075.523] CloseHandle (hObject=0xd8) returned 1
	[0075.525] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.egmwv")) returned 0x2020
	[0075.526] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0075.527] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2a0 | out: pbBuffer=0xc00041a2a0) returned 1
	[0075.527] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a2ba | out: pbBuffer=0xc00041a2ba) returned 1
	[0075.528] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215402 | out: pbBuffer=0xc000215402) returned 1
	[0075.528] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2e0 | out: pbBuffer=0xc00041a2e0) returned 1
	[0075.530] VirtualAlloc (lpAddress=0xc000432000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000432000
	[0075.580] VirtualAlloc (lpAddress=0xc000606000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000606000
	[0075.589] VirtualAlloc (lpAddress=0xc0002bc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002bc000
	[0075.590] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0075.930] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0075.930] SetEvent (hEvent=0x70) returned 1
	[0075.931] SetEvent (hEvent=0xe4) returned 1
	[0075.931] SetEvent (hEvent=0xb0) returned 1
	[0075.932] VirtualAlloc (lpAddress=0xc0002e0000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e0000
	[0075.947] VirtualAlloc (lpAddress=0xc000b34000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b34000
	[0075.951] VirtualFree (lpAddress=0xc0000b2000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0076.441] VirtualFree (lpAddress=0xc000410000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.441] VirtualFree (lpAddress=0xc000410000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0076.442] VirtualFree (lpAddress=0xc000408000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.442] VirtualFree (lpAddress=0xc000350000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.442] VirtualFree (lpAddress=0xc000350000, dwSize=0x12000, dwFreeType=0x4000) returned 1
	[0076.443] VirtualFree (lpAddress=0xc0002d0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.443] VirtualFree (lpAddress=0xc00020a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.201] SwitchToThread () returned 1
	[0077.762] VirtualAlloc (lpAddress=0xc000370000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000370000
	[0077.763] GetFileType (hFile=0x84) returned 0x1
	[0077.763] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x0, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0077.764] WriteFile (in: hFile=0x84, lpBuffer=0xc00020a000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc00016dccc, lpOverlapped=0xc00016dce8 | out: lpBuffer=0xc00020a000*, lpNumberOfBytesWritten=0xc00016dccc*=0x2d8, lpOverlapped=0xc00016dce8) returned 1
	[0077.892] GetFileType (hFile=0x84) returned 0x1
	[0077.892] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0077.892] CloseHandle (hObject=0x84) returned 1
	[0093.355] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.egmwv")) returned 0x2020
	[0093.355] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0093.356] SwitchToThread () returned 1
	[0093.484] VirtualAlloc (lpAddress=0xc000202000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000202000
	[0093.488] VirtualAlloc (lpAddress=0xc00027e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027e000
	[0093.488] VirtualAlloc (lpAddress=0xc00028a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028a000
	[0093.490] VirtualAlloc (lpAddress=0xc000290000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000290000
	[0093.491] VirtualAlloc (lpAddress=0xc000294000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000294000
	[0093.492] VirtualAlloc (lpAddress=0xc0002b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b2000
	[0093.493] VirtualAlloc (lpAddress=0xc0000aa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000aa000
	[0093.497] VirtualAlloc (lpAddress=0xc0002be000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002be000
	[0093.498] VirtualAlloc (lpAddress=0xc000384000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000384000
	[0093.499] VirtualAlloc (lpAddress=0xc00039e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00039e000
	[0093.500] VirtualAlloc (lpAddress=0xc0003e6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e6000
	[0093.501] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0120 | out: pbBuffer=0xc0003a0120) returned 1
	[0093.502] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0093.502] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038b3d | out: pbBuffer=0xc000038b3d) returned 1
	[0093.502] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0160 | out: pbBuffer=0xc0003a0160) returned 1
	[0093.503] GetFileType (hFile=0xdc) returned 0x1
	[0093.503] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000b1ca0*=1347) returned 1
	[0093.503] WriteFile (in: hFile=0xdc, lpBuffer=0xc000b30000*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0xc0000b1ccc, lpOverlapped=0xc0000b1ce8 | out: lpBuffer=0xc000b30000*, lpNumberOfBytesWritten=0xc0000b1ccc*=0x543, lpOverlapped=0xc0000b1ce8) returned 1
	[0093.504] GetFileType (hFile=0xdc) returned 0x1
	[0093.504] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x543, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000b1ca0*=1347) returned 1
	[0093.504] GetFileType (hFile=0xdc) returned 0x1
	[0093.504] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000b1ca0*=1347) returned 1
	[0093.505] WriteFile (in: hFile=0xdc, lpBuffer=0xc00039f500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000b1ccc, lpOverlapped=0xc0000b1ce8 | out: lpBuffer=0xc00039f500*, lpNumberOfBytesWritten=0xc0000b1ccc*=0x227, lpOverlapped=0xc0000b1ce8) returned 1
	[0093.505] GetFileType (hFile=0xdc) returned 0x1
	[0093.506] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x543, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000b1ca0*=1347) returned 1
	[0093.506] CloseHandle (hObject=0xdc) returned 1
	[0093.507] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.egmwv")) returned 0x2020
	[0093.507] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0093.508] SetEvent (hEvent=0xb0) returned 1
	[0093.508] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0093.915] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0094.061] SetEvent (hEvent=0x68) returned 1
	[0094.062] VirtualAlloc (lpAddress=0xc000e3c000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000e3c000
	[0094.093] GetFileType (hFile=0xd4) returned 0x1
	[0094.093] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038fca0*=497919) returned 1
	[0094.094] WriteFile (in: hFile=0xd4, lpBuffer=0xc000e3c000*, nNumberOfBytesToWrite=0x798ff, lpNumberOfBytesWritten=0xc00038fccc, lpOverlapped=0xc00038fce8 | out: lpBuffer=0xc000e3c000*, lpNumberOfBytesWritten=0xc00038fccc*=0x798ff, lpOverlapped=0xc00038fce8) returned 1
	[0094.249] GetFileType (hFile=0xd4) returned 0x1
	[0094.250] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x798ff, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038fca0*=497919) returned 1
	[0094.314] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0099.350] SwitchToThread () returned 1
	[0099.655] SwitchToThread () returned 1
	[0099.997] VirtualAlloc (lpAddress=0xc00004c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004c000
	[0100.227] VirtualFree (lpAddress=0xc001200000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0101.357] SetEvent (hEvent=0xb0) returned 1
	[0101.358] VirtualAlloc (lpAddress=0xc000050000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000050000
	[0101.360] VirtualAlloc (lpAddress=0xc000080000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000080000
	[0101.364] VirtualAlloc (lpAddress=0xc0001ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ca000
	[0101.366] VirtualAlloc (lpAddress=0xc000294000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000294000
	[0101.520] WriteFile (in: hFile=0xd8, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038d8a4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc00038d8a4*=0x25d, lpOverlapped=0x0) returned 1
	[0101.525] CloseHandle (hObject=0xd8) returned 1
	[0101.527] VirtualAlloc (lpAddress=0xc000288000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000288000
	[0101.528] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99f45170, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x99f45170, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0101.529] VirtualAlloc (lpAddress=0xc00028a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028a000
	[0101.530] VirtualAlloc (lpAddress=0xc00028e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028e000
	[0101.531] VirtualAlloc (lpAddress=0xc000290000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000290000
	[0101.531] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0101.533] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0xc00038d5f8 | out: lpFindFileData=0xc00038d5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0101.536] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0101.536] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0101.540] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0101.540] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0101.540] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0101.540] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0101.541] VirtualAlloc (lpAddress=0xc000298000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000298000
	[0101.542] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0xc00038d770 | out: lpFileInformation=0xc00038d770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1
	[0101.543] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0xc00038d770 | out: lpFileInformation=0xc00038d770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1
	[0101.779] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0101.896] SwitchToThread () returned 1
	[0101.980] VirtualAlloc (lpAddress=0xc000210000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000210000
	[0101.981] VirtualAlloc (lpAddress=0xc0003e6000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e6000
	[0101.982] VirtualAlloc (lpAddress=0xc000212000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000212000
	[0101.983] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0003ed770 | out: lpFileInformation=0xc0003ed770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1
	[0101.985] VirtualAlloc (lpAddress=0xc0003ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ee000
	[0101.985] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0101.987] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc0003ed904 | out: lpMode=0xc0003ed904) returned 0
	[0101.987] VirtualAlloc (lpAddress=0xc0002c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c4000
	[0101.988] VirtualAlloc (lpAddress=0xc0002c6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c6000
	[0101.989] VirtualAlloc (lpAddress=0xc0002c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c8000
	[0101.990] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002c8000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0003ed8a4, lpOverlapped=0x0 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesWritten=0xc0003ed8a4*=0x25d, lpOverlapped=0x0) returned 1
	[0101.994] CloseHandle (hObject=0xd8) returned 1
	[0101.994] VirtualAlloc (lpAddress=0xc0002ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ca000
	[0101.995] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0xc0003ed880 | out: lpFileInformation=0xc0003ed880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9df7b140, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x9df7b140, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0101.995] VirtualAlloc (lpAddress=0xc0002cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002cc000
	[0101.996] VirtualAlloc (lpAddress=0xc00037c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00037c000
	[0101.997] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0xc0003ed880 | out: lpFileInformation=0xc0003ed880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0101.997] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0003ed880 | out: lpFileInformation=0xc0003ed880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1
	[0101.998] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0003ed880 | out: lpFileInformation=0xc0003ed880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1
	[0101.998] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0102.000] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc0003eda14 | out: lpMode=0xc0003eda14) returned 0
	[0102.000] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002c8000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0003ed9b4, lpOverlapped=0x0 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesWritten=0xc0003ed9b4*=0x25d, lpOverlapped=0x0) returned 1
	[0102.003] CloseHandle (hObject=0xd8) returned 1
	[0102.004] VirtualAlloc (lpAddress=0xc00037e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00037e000
	[0102.005] VirtualAlloc (lpAddress=0xc000380000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000380000
	[0102.006] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc0003ed990 | out: lpFileInformation=0xc0003ed990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9df9ad10, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x9df9ad10, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0102.007] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0102.007] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc0003ed708 | out: lpFindFileData=0xc0003ed708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0102.668] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0103.053] VirtualAlloc (lpAddress=0xc00063a000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00063a000
	[0103.071] GetFileType (hFile=0xec) returned 0x1
	[0103.071] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc00038bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038bca0*=176583) returned 1
	[0103.072] WriteFile (in: hFile=0xec, lpBuffer=0xc00063a000*, nNumberOfBytesToWrite=0x2b1c7, lpNumberOfBytesWritten=0xc00038bccc, lpOverlapped=0xc00038bce8 | out: lpBuffer=0xc00063a000*, lpNumberOfBytesWritten=0xc00038bccc*=0x2b1c7, lpOverlapped=0xc00038bce8) returned 1
	[0103.336] GetFileType (hFile=0xec) returned 0x1
	[0103.336] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x2b1c7, lpNewFilePointer=0xc00038bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038bca0*=176583) returned 1
	[0103.336] VirtualAlloc (lpAddress=0xc0001c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c4000
	[0103.337] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007fe000
	[0103.338] GetFileType (hFile=0xec) returned 0x1
	[0103.338] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc00038bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038bca0*=176583) returned 1
	[0103.338] WriteFile (in: hFile=0xec, lpBuffer=0xc0007fe000*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0xc00038bccc, lpOverlapped=0xc00038bce8 | out: lpBuffer=0xc0007fe000*, lpNumberOfBytesWritten=0xc00038bccc*=0x24e, lpOverlapped=0xc00038bce8) returned 1
	[0103.630] GetFileType (hFile=0xec) returned 0x1
	[0103.631] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x2b1c7, lpNewFilePointer=0xc00038bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038bca0*=176583) returned 1
	[0103.631] CloseHandle (hObject=0xec) returned 1
	[0111.286] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0112.143] VirtualAlloc (lpAddress=0xc000ba2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ba2000
	[0112.267] SwitchToThread () returned 1
	[0112.424] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0112.776] SetEvent (hEvent=0xe4) returned 1
	[0112.776] SetEvent (hEvent=0x68) returned 1
	[0112.777] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0117.719] SwitchToThread () returned 1
	[0117.789] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0117.934] SetEvent (hEvent=0x68) returned 1
	[0117.934] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0118.065] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 0x2020
	[0118.065] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", dwFileAttributes=0x2020) returned 1
	[0118.066] SwitchToThread () returned 1
	[0118.068] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0118.135] SetEvent (hEvent=0xc4) returned 1
	[0118.135] SwitchToThread () returned 1
	[0118.174] SwitchToThread () returned 1
	[0118.213] SwitchToThread () returned 1
	[0118.249] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0118.403] VirtualAlloc (lpAddress=0xc001600000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001600000
	[0118.426] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0118.467] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0118.480] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0118.481] SetEvent (hEvent=0x70) returned 1
	[0118.481] SetEvent (hEvent=0xc4) returned 1
	[0118.481] SetEvent (hEvent=0x68) returned 1
	[0118.594] GetFileType (hFile=0xcc) returned 0x1
	[0118.595] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000399ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000399ca0*=1048576) returned 1
	[0118.595] WriteFile (in: hFile=0xcc, lpBuffer=0xc001600000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000399ccc, lpOverlapped=0xc000399ce8 | out: lpBuffer=0xc001600000*, lpNumberOfBytesWritten=0xc000399ccc*=0x100000, lpOverlapped=0xc000399ce8) returned 1
	[0119.697] GetFileType (hFile=0xcc) returned 0x1
	[0119.698] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x100000, lpNewFilePointer=0xc000399ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000399ca0*=1048576) returned 1
	[0119.698] GetFileType (hFile=0xcc) returned 0x1
	[0119.698] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000399ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000399ca0*=1048576) returned 1
	[0119.698] WriteFile (in: hFile=0xcc, lpBuffer=0xc000294000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000399ccc, lpOverlapped=0xc000399ce8 | out: lpBuffer=0xc000294000*, lpNumberOfBytesWritten=0xc000399ccc*=0x2d8, lpOverlapped=0xc000399ce8) returned 1
	[0120.893] GetFileType (hFile=0xcc) returned 0x1
	[0120.894] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x100000, lpNewFilePointer=0xc000399ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000399ca0*=1048576) returned 1
	[0120.894] CloseHandle (hObject=0xcc) returned 1
	[0137.464] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0138.068] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.egmwv")) returned 0x2020
	[0138.069] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0138.072] SetEvent (hEvent=0x54) returned 1
	[0138.072] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0141.537] SetEvent (hEvent=0xc4) returned 1
	[0141.648] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0142.265] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi")) returned 0x2020
	[0142.265] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", dwFileAttributes=0x2020) returned 1
	[0143.925] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0144.029] SwitchToThread () returned 1
	[0144.378] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.egmwv"), dwFlags=0x1) returned 1
	[0150.223] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0150.341] SetEvent (hEvent=0x70) returned 1
	[0150.341] SetEvent (hEvent=0xc4) returned 1
	[0150.341] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0150.342] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0150.494] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0150.494] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0150.508] SetEvent (hEvent=0x144) returned 1
	[0150.508] SetEvent (hEvent=0x108) returned 1
	[0150.508] GetFileType (hFile=0xe0) returned 0x1
	[0150.508] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=195829) returned 1
	[0150.509] WriteFile (in: hFile=0xe0, lpBuffer=0xc000098800*, nNumberOfBytesToWrite=0x257, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc000098800*, lpNumberOfBytesWritten=0xc000175ccc*=0x257, lpOverlapped=0xc000175ce8) returned 1
	[0150.512] GetFileType (hFile=0xe0) returned 0x1
	[0150.512] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2fcf5, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=195829) returned 1
	[0150.512] CloseHandle (hObject=0xe0) returned 1
	[0150.513] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.egmwv")) returned 0x2020
	[0150.513] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0150.514] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0150.514] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0150.515] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0150.516] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0150.516] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0150.516] ReadFile (in: hFile=0xe0, lpBuffer=0xc000178000, nNumberOfBytesToRead=0x7c4, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000178000*, lpNumberOfBytesRead=0xc000169cec*=0x7c4, lpOverlapped=0x0) returned 1
	[0153.726] SwitchToThread () returned 1
	[0154.043] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0155.967] SetEvent (hEvent=0x144) returned 1
	[0155.967] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0156.013] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0156.039] SwitchToThread () returned 1
	[0156.100] SetEvent (hEvent=0x144) returned 1
	[0156.100] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0156.957] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0158.819] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0158.946] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0158.946] SetEvent (hEvent=0x120) returned 1
	[0158.946] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0159.040] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0159.040] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0159.040] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0160.757] SetEvent (hEvent=0x70) returned 1
	[0160.757] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0168.832] SetEvent (hEvent=0x70) returned 1
	[0168.832] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0168.912] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0168.912] ReadFile (in: hFile=0x164, lpBuffer=0xc00041c000, nNumberOfBytesToRead=0x750, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc00041c000*, lpNumberOfBytesRead=0xc00016fcec*=0x750, lpOverlapped=0x0) returned 1
	[0169.270] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010320 | out: pbBuffer=0xc000010320) returned 1
	[0169.270] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00001033a | out: pbBuffer=0xc00001033a) returned 1
	[0169.271] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0169.272] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010360 | out: pbBuffer=0xc000010360) returned 1
	[0169.272] GetFileType (hFile=0x164) returned 0x1
	[0169.272] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b9ca0*=1872) returned 1
	[0169.272] WriteFile (in: hFile=0x164, lpBuffer=0xc0010a1000*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0xc0002b9ccc, lpOverlapped=0xc0002b9ce8 | out: lpBuffer=0xc0010a1000*, lpNumberOfBytesWritten=0xc0002b9ccc*=0x750, lpOverlapped=0xc0002b9ce8) returned 1
	[0169.273] GetFileType (hFile=0x164) returned 0x1
	[0169.273] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x750, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b9ca0*=1872) returned 1
	[0169.273] GetFileType (hFile=0x164) returned 0x1
	[0169.273] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b9ca0*=1872) returned 1
	[0169.273] WriteFile (in: hFile=0x164, lpBuffer=0xc0002e3500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002b9ccc, lpOverlapped=0xc0002b9ce8 | out: lpBuffer=0xc0002e3500*, lpNumberOfBytesWritten=0xc0002b9ccc*=0x227, lpOverlapped=0xc0002b9ce8) returned 1
	[0169.274] GetFileType (hFile=0x164) returned 0x1
	[0169.274] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x750, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b9ca0*=1872) returned 1
	[0169.274] CloseHandle (hObject=0x164) returned 1
	[0169.392] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0169.392] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0169.471] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0170.446] SetEvent (hEvent=0x148) returned 1
	[0170.447] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0170.584] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0170.584] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0170.585] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0170.586] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0170.586] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0170.586] ReadFile (in: hFile=0xcc, lpBuffer=0xc000278000, nNumberOfBytesToRead=0x5ac, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000278000*, lpNumberOfBytesRead=0xc000193cec*=0x5ac, lpOverlapped=0x0) returned 1
	[0170.674] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0170.762] SetEvent (hEvent=0x148) returned 1
	[0170.762] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0170.762] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0170.895] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038502 | out: pbBuffer=0xc000038502) returned 1
	[0170.895] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000385ab | out: pbBuffer=0xc0000385ab) returned 1
	[0170.895] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0030 | out: pbBuffer=0xc0003a0030) returned 1
	[0170.896] GetFileType (hFile=0xcc) returned 0x1
	[0170.896] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00032fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00032fca0*=1452) returned 1
	[0170.896] WriteFile (in: hFile=0xcc, lpBuffer=0xc000207000*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0xc00032fccc, lpOverlapped=0xc00032fce8 | out: lpBuffer=0xc000207000*, lpNumberOfBytesWritten=0xc00032fccc*=0x5ac, lpOverlapped=0xc00032fce8) returned 1
	[0170.896] GetFileType (hFile=0xcc) returned 0x1
	[0170.896] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5ac, lpNewFilePointer=0xc00032fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00032fca0*=1452) returned 1
	[0170.897] GetFileType (hFile=0xcc) returned 0x1
	[0170.897] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00032fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00032fca0*=1452) returned 1
	[0170.897] WriteFile (in: hFile=0xcc, lpBuffer=0xc000418700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00032fccc, lpOverlapped=0xc00032fce8 | out: lpBuffer=0xc000418700*, lpNumberOfBytesWritten=0xc00032fccc*=0x22a, lpOverlapped=0xc00032fce8) returned 1
	[0170.897] GetFileType (hFile=0xcc) returned 0x1
	[0170.897] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5ac, lpNewFilePointer=0xc00032fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00032fca0*=1452) returned 1
	[0170.897] CloseHandle (hObject=0xcc) returned 1
	[0170.898] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0170.898] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0170.899] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0170 | out: pbBuffer=0xc0003a0170) returned 1
	[0170.899] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039502 | out: pbBuffer=0xc000039502) returned 1
	[0170.899] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000395e8 | out: pbBuffer=0xc0000395e8) returned 1
	[0170.899] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a01b0 | out: pbBuffer=0xc0003a01b0) returned 1
	[0170.900] VirtualAlloc (lpAddress=0xc001738000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001738000
	[0170.904] VirtualAlloc (lpAddress=0xc001746000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001746000
	[0170.912] VirtualAlloc (lpAddress=0xc001764000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001764000
	[0170.914] VirtualAlloc (lpAddress=0xc001768000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001768000
	[0170.915] VirtualAlloc (lpAddress=0xc00176c000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00176c000
	[0171.061] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0171.147] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0171.147] SetEvent (hEvent=0x70) returned 1
	[0171.147] SetEvent (hEvent=0xc4) returned 1
	[0171.147] VirtualAlloc (lpAddress=0xc001852000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001852000
	[0171.149] VirtualAlloc (lpAddress=0xc00185a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00185a000
	[0171.151] VirtualAlloc (lpAddress=0xc00185e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00185e000
	[0171.152] VirtualAlloc (lpAddress=0xc001862000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001862000
	[0171.153] VirtualAlloc (lpAddress=0xc001866000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001866000
	[0171.154] VirtualAlloc (lpAddress=0xc00186a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00186a000
	[0171.155] VirtualAlloc (lpAddress=0xc00186e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00186e000
	[0171.156] VirtualAlloc (lpAddress=0xc001872000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001872000
	[0171.159] VirtualAlloc (lpAddress=0xc001876000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001876000
	[0171.160] VirtualAlloc (lpAddress=0xc00187a000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00187a000
	[0171.186] VirtualAlloc (lpAddress=0xc0018fa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0018fa000
	[0171.187] VirtualAlloc (lpAddress=0xc0018fe000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0018fe000
	[0171.188] VirtualAlloc (lpAddress=0xc001902000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001902000
	[0171.351] VirtualAlloc (lpAddress=0xc001906000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001906000
	[0171.352] VirtualAlloc (lpAddress=0xc00190a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00190a000
	[0171.353] VirtualAlloc (lpAddress=0xc00190e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00190e000
	[0171.354] VirtualAlloc (lpAddress=0xc001912000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001912000
	[0171.355] VirtualAlloc (lpAddress=0xc001916000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001916000
	[0171.356] VirtualAlloc (lpAddress=0xc00191a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00191a000
	[0171.357] VirtualAlloc (lpAddress=0xc00191e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00191e000
	[0171.358] VirtualAlloc (lpAddress=0xc001922000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001922000
	[0171.359] VirtualAlloc (lpAddress=0xc00192a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00192a000
	[0171.362] VirtualAlloc (lpAddress=0xc00193a000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00193a000
	[0171.368] SetEvent (hEvent=0x148) returned 1
	[0171.368] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0171.450] SetEvent (hEvent=0xc4) returned 1
	[0171.450] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0171.489] SetEvent (hEvent=0xc4) returned 1
	[0171.489] SetEvent (hEvent=0x148) returned 1
	[0171.489] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282)) returned 1
	[0175.066] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00)) returned 1
	[0175.067] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5)) returned 1
	[0175.068] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0175.068] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0175.069] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488)) returned 1
	[0175.069] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0175.070] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0175.070] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760)) returned 1
	[0175.071] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0)) returned 1
	[0175.072] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200)) returned 1
	[0175.072] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80)) returned 1
	[0175.073] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b)) returned 1
	[0175.073] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676)) returned 1
	[0175.074] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0175.075] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000425a14 | out: lpMode=0xc000425a14) returned 0
	[0175.075] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004259b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0004259b4*=0x25d, lpOverlapped=0x0) returned 1
	[0175.078] CloseHandle (hObject=0xcc) returned 1
	[0175.079] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000425990 | out: lpFileInformation=0xc000425990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc7070b80, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xc7070b80, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0175.079] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0175.080] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000425708 | out: lpFindFileData=0xc000425708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0175.487] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0175.730] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0175.824] SetEvent (hEvent=0x124) returned 1
	[0175.824] SetEvent (hEvent=0x100) returned 1
	[0175.825] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0175.825] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0175.826] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0175.827] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0175.827] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0175.827] ReadFile (in: hFile=0xa8, lpBuffer=0xc0002c4000, nNumberOfBytesToRead=0x2488, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c4000*, lpNumberOfBytesRead=0xc000199cec*=0x2488, lpOverlapped=0x0) returned 1
	[0175.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101b0 | out: pbBuffer=0xc0000101b0) returned 1
	[0175.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000101ca | out: pbBuffer=0xc0000101ca) returned 1
	[0175.902] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039c02 | out: pbBuffer=0xc000039c02) returned 1
	[0175.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039c64 | out: pbBuffer=0xc000039c64) returned 1
	[0175.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101f0 | out: pbBuffer=0xc0000101f0) returned 1
	[0175.903] GetFileType (hFile=0xa8) returned 0x1
	[0175.903] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=9352) returned 1
	[0175.903] WriteFile (in: hFile=0xa8, lpBuffer=0xc000188000*, nNumberOfBytesToWrite=0x2488, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000188000*, lpNumberOfBytesWritten=0xc00019dccc*=0x2488, lpOverlapped=0xc00019dce8) returned 1
	[0175.904] GetFileType (hFile=0xa8) returned 0x1
	[0175.904] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2488, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=9352) returned 1
	[0175.904] GetFileType (hFile=0xa8) returned 0x1
	[0175.904] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=9352) returned 1
	[0175.904] WriteFile (in: hFile=0xa8, lpBuffer=0xc00041d880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00041d880*, lpNumberOfBytesWritten=0xc00019dccc*=0x224, lpOverlapped=0xc00019dce8) returned 1
	[0175.905] GetFileType (hFile=0xa8) returned 0x1
	[0175.905] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2488, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=9352) returned 1
	[0175.905] CloseHandle (hObject=0xa8) returned 1
	[0175.905] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0175.906] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0175.906] SwitchToThread () returned 1
	[0175.989] SwitchToThread () returned 1
	[0176.061] SetEvent (hEvent=0x54) returned 1
	[0176.062] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 0x2020
	[0176.062] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0179.485] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", dwFileAttributes=0x2020) returned 1
	[0179.487] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0179.799] SetEvent (hEvent=0xc4) returned 1
	[0179.799] SetEvent (hEvent=0x124) returned 1
	[0179.799] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0182.084] SetEvent (hEvent=0x148) returned 1
	[0182.084] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0182.104] SetEvent (hEvent=0x148) returned 1
	[0182.105] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101a0 | out: pbBuffer=0xc0000101a0) returned 1
	[0182.105] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0182.105] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039226 | out: pbBuffer=0xc000039226) returned 1
	[0182.105] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039243 | out: pbBuffer=0xc000039243) returned 1
	[0182.106] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101e0 | out: pbBuffer=0xc0000101e0) returned 1
	[0182.106] GetFileType (hFile=0xe0) returned 0x1
	[0182.106] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002e7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002e7ca0*=5557) returned 1
	[0182.106] WriteFile (in: hFile=0xe0, lpBuffer=0xc000176000*, nNumberOfBytesToWrite=0x15b5, lpNumberOfBytesWritten=0xc0002e7ccc, lpOverlapped=0xc0002e7ce8 | out: lpBuffer=0xc000176000*, lpNumberOfBytesWritten=0xc0002e7ccc*=0x15b5, lpOverlapped=0xc0002e7ce8) returned 1
	[0182.106] GetFileType (hFile=0xe0) returned 0x1
	[0182.107] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x15b5, lpNewFilePointer=0xc0002e7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002e7ca0*=5557) returned 1
	[0182.107] GetFileType (hFile=0xe0) returned 0x1
	[0182.107] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002e7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002e7ca0*=5557) returned 1
	[0182.107] WriteFile (in: hFile=0xe0, lpBuffer=0xc000295500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0002e7ccc, lpOverlapped=0xc0002e7ce8 | out: lpBuffer=0xc000295500*, lpNumberOfBytesWritten=0xc0002e7ccc*=0x230, lpOverlapped=0xc0002e7ce8) returned 1
	[0182.107] GetFileType (hFile=0xe0) returned 0x1
	[0182.107] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x15b5, lpNewFilePointer=0xc0002e7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002e7ca0*=5557) returned 1
	[0182.108] CloseHandle (hObject=0xe0) returned 1
	[0182.116] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.egmwv")) returned 0x2020
	[0182.117] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0182.117] SwitchToThread () returned 1
	[0182.126] SetEvent (hEvent=0x54) returned 1
	[0182.126] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab")) returned 0x2020
	[0182.127] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", dwFileAttributes=0x2020) returned 1
	[0182.128] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.egmwv"), dwFlags=0x1) returned 1
	[0182.146] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0182.147] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0182.147] ReadFile (in: hFile=0x130, lpBuffer=0xc000f60000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000f60000*, lpNumberOfBytesRead=0xc000425cec*=0x100000, lpOverlapped=0x0) returned 1
	[0182.994] SetEvent (hEvent=0x70) returned 1
	[0182.994] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a02c0 | out: pbBuffer=0xc0003a02c0) returned 1
	[0182.994] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a02da | out: pbBuffer=0xc0003a02da) returned 1
	[0182.994] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215802 | out: pbBuffer=0xc000215802) returned 1
	[0182.995] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0300 | out: pbBuffer=0xc0003a0300) returned 1
	[0182.995] SetEvent (hEvent=0x148) returned 1
	[0182.999] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0183.002] SetEvent (hEvent=0x148) returned 1
	[0183.002] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0183.009] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0183.011] SetEvent (hEvent=0x70) returned 1
	[0183.011] SetEvent (hEvent=0x148) returned 1
	[0183.013] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0183.014] SetEvent (hEvent=0x148) returned 1
	[0183.014] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0183.034] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0183.036] SetEvent (hEvent=0x70) returned 1
	[0183.036] SetEvent (hEvent=0x148) returned 1
	[0183.037] GetFileType (hFile=0x130) returned 0x1
	[0183.037] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0183.037] WriteFile (in: hFile=0x130, lpBuffer=0xc001068000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000425ccc, lpOverlapped=0xc000425ce8 | out: lpBuffer=0xc001068000*, lpNumberOfBytesWritten=0xc000425ccc*=0x100000, lpOverlapped=0xc000425ce8) returned 1
	[0183.071] GetFileType (hFile=0x130) returned 0x1
	[0183.071] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x100000, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0183.071] GetFileType (hFile=0x130) returned 0x1
	[0183.072] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0183.072] WriteFile (in: hFile=0x130, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000425ccc, lpOverlapped=0xc000425ce8 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc000425ccc*=0x2d8, lpOverlapped=0xc000425ce8) returned 1
	[0183.129] SetEvent (hEvent=0x70) returned 1
	[0183.129] GetFileType (hFile=0x130) returned 0x1
	[0183.130] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x100000, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0183.130] CloseHandle (hObject=0x130) returned 1
	[0183.173] SetEvent (hEvent=0x70) returned 1
	[0183.173] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.egmwv")) returned 0x2020
	[0183.173] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0183.174] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0187.525] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0187.582] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0187.899] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0187.904] SetEvent (hEvent=0x148) returned 1
	[0187.905] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi")) returned 0x2020
	[0187.905] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", dwFileAttributes=0x2020) returned 1
	[0187.909] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0187.916] SetEvent (hEvent=0x124) returned 1
	[0187.916] SetEvent (hEvent=0x148) returned 1
	[0187.917] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a110 | out: pbBuffer=0xc00041a110) returned 1
	[0187.917] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a12a | out: pbBuffer=0xc00041a12a) returned 1
	[0187.917] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0187.917] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a150 | out: pbBuffer=0xc00041a150) returned 1
	[0187.917] GetFileType (hFile=0x118) returned 0x1
	[0187.918] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4274) returned 1
	[0187.918] WriteFile (in: hFile=0x118, lpBuffer=0xc00018e000*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesWritten=0xc00019dccc*=0x10b2, lpOverlapped=0xc00019dce8) returned 1
	[0187.918] GetFileType (hFile=0x118) returned 0x1
	[0187.919] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x10b2, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4274) returned 1
	[0187.919] GetFileType (hFile=0x118) returned 0x1
	[0187.919] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4274) returned 1
	[0187.919] WriteFile (in: hFile=0x118, lpBuffer=0xc000299500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000299500*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0187.919] GetFileType (hFile=0x118) returned 0x1
	[0187.919] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x10b2, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4274) returned 1
	[0187.920] CloseHandle (hObject=0x118) returned 1
	[0190.770] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0190.993] SwitchToThread () returned 1
	[0191.001] SetEvent (hEvent=0x54) returned 1
	[0191.001] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0193.342] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.egmwv"), dwFlags=0x1) returned 1
	[0197.814] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0197.890] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0197.890] SetEvent (hEvent=0x54) returned 1
	[0197.891] ReadFile (in: hFile=0xe8, lpBuffer=0xc00093a000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc00093a000*, lpNumberOfBytesRead=0xc000167cec*=0x100000, lpOverlapped=0x0) returned 1
	[0198.157] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.197] SetEvent (hEvent=0x148) returned 1
	[0198.197] SetEvent (hEvent=0x54) returned 1
	[0198.197] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0198.198] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0198.198] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc0001a1a14 | out: lpMode=0xc0001a1a14) returned 0
	[0198.199] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0001a19b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0001a19b4*=0x25d, lpOverlapped=0x0) returned 1
	[0198.202] CloseHandle (hObject=0xd4) returned 1
	[0198.203] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1990 | out: lpFileInformation=0xc0001a1990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd46ec6f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd46ec6f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0198.203] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0198.204] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc0001a1708 | out: lpFindFileData=0xc0001a1708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0198.223] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.229] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.230] SetEvent (hEvent=0x148) returned 1
	[0198.230] SetEvent (hEvent=0x120) returned 1
	[0198.231] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0198.231] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x2020) returned 1
	[0198.231] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv"), dwFlags=0x1) returned 1
	[0198.232] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0198.232] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0198.232] ReadFile (in: hFile=0x118, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x1179f, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000423cec*=0x1179f, lpOverlapped=0x0) returned 1
	[0198.252] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.523] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.699] SetEvent (hEvent=0x148) returned 1
	[0198.699] SetEvent (hEvent=0x120) returned 1
	[0198.699] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.798] SetEvent (hEvent=0x148) returned 1
	[0198.798] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.804] SetEvent (hEvent=0x148) returned 1
	[0198.804] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.938] SetEvent (hEvent=0x148) returned 1
	[0198.938] SwitchToThread () returned 1
	[0198.958] SetEvent (hEvent=0x148) returned 1
	[0198.958] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.960] SetEvent (hEvent=0x148) returned 1
	[0198.961] SetEvent (hEvent=0x144) returned 1
	[0198.961] SetEvent (hEvent=0x120) returned 1
	[0198.961] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0198.990] SetEvent (hEvent=0x100) returned 1
	[0198.990] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.229] SetEvent (hEvent=0x124) returned 1
	[0199.229] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.455] SetEvent (hEvent=0x124) returned 1
	[0199.456] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.494] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0199.494] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0199.499] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0199.630] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.662] SetEvent (hEvent=0x54) returned 1
	[0199.662] SetEvent (hEvent=0x124) returned 1
	[0199.662] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.766] SetEvent (hEvent=0x120) returned 1
	[0199.766] SetEvent (hEvent=0x100) returned 1
	[0199.766] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0199.824] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.824] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0199.885] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.885] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0199.913] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.914] SetEvent (hEvent=0x70) returned 1
	[0199.914] SetEvent (hEvent=0x148) returned 1
	[0199.914] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0199.916] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x0
	[0199.917] SetEvent (hEvent=0x148) returned 1
	[0199.917] GetFileType (hFile=0xd4) returned 0x1
	[0199.918] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000b5ca0*=1048576) returned 1
	[0199.918] WriteFile (in: hFile=0xd4, lpBuffer=0xc0007b0000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc0000b5ccc, lpOverlapped=0xc0000b5ce8 | out: lpBuffer=0xc0007b0000*, lpNumberOfBytesWritten=0xc0000b5ccc*=0x100000, lpOverlapped=0xc0000b5ce8) returned 1
	[0199.927] GetFileType (hFile=0xd4) returned 0x1
	[0199.927] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x100000, lpNewFilePointer=0xc0000b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000b5ca0*=1048576) returned 1
	[0199.927] GetFileType (hFile=0xd4) returned 0x1
	[0199.927] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000b5ca0*=1048576) returned 1
	[0199.928] WriteFile (in: hFile=0xd4, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc0000b5ccc, lpOverlapped=0xc0000b5ce8 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000b5ccc*=0x2d8, lpOverlapped=0xc0000b5ce8) returned 1
	[0199.934] GetFileType (hFile=0xd4) returned 0x1
	[0199.934] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x100000, lpNewFilePointer=0xc0000b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000b5ca0*=1048576) returned 1
	[0199.935] CloseHandle (hObject=0xd4) returned 1
	[0199.935] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.egmwv")) returned 0x2020
	[0199.935] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.935] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0199.999] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.066] SetEvent (hEvent=0x120) returned 1
	[0200.066] SetEvent (hEvent=0x124) returned 1
	[0200.066] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.160] SetEvent (hEvent=0x100) returned 1
	[0200.161] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.162] SetEvent (hEvent=0x100) returned 1
	[0200.162] SwitchToThread () returned 1
	[0200.163] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.178] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.196] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.204] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.517] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.519] SetEvent (hEvent=0x124) returned 1
	[0200.519] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20
	[0200.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x20) returned 1
	[0200.525] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.574] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0200.574] ReadFile (in: hFile=0xd4, lpBuffer=0xc00034c000, nNumberOfBytesToRead=0x1a1c, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034c000*, lpNumberOfBytesRead=0xc000425cec*=0x1a1c, lpOverlapped=0x0) returned 1
	[0200.579] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0200.579] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0200.579] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0200.579] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0200.580] GetFileType (hFile=0xd4) returned 0x1
	[0200.580] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=6684) returned 1
	[0200.580] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000c8000*, nNumberOfBytesToWrite=0x1a1c, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0000c8000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x1a1c, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.580] GetFileType (hFile=0xd4) returned 0x1
	[0200.580] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1a1c, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=6684) returned 1
	[0200.581] GetFileType (hFile=0xd4) returned 0x1
	[0200.581] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=6684) returned 1
	[0200.581] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000ab500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0000ab500*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22a, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.581] GetFileType (hFile=0xd4) returned 0x1
	[0200.581] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1a1c, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=6684) returned 1
	[0200.581] CloseHandle (hObject=0xd4) returned 1
	[0200.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.egmwv")) returned 0x20
	[0200.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.584] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20
	[0200.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x20) returned 1
	[0200.591] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.625] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0200.625] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003a8000, nNumberOfBytesToRead=0x1e06, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a8000*, lpNumberOfBytesRead=0xc000429cec*=0x1e06, lpOverlapped=0x0) returned 1
	[0200.631] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0200.631] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f2e02 | out: pbBuffer=0xc0000f2e02) returned 1
	[0200.631] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0200.631] GetFileType (hFile=0xe8) returned 0x1
	[0200.631] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7686) returned 1
	[0200.631] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003c0000*, nNumberOfBytesToWrite=0x1e06, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003c0000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1e06, lpOverlapped=0xc000151ce8) returned 1
	[0200.632] GetFileType (hFile=0xe8) returned 0x1
	[0200.632] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1e06, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7686) returned 1
	[0200.632] GetFileType (hFile=0xe8) returned 0x1
	[0200.632] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7686) returned 1
	[0200.632] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003b8700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003b8700*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0200.633] GetFileType (hFile=0xe8) returned 0x1
	[0200.633] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1e06, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7686) returned 1
	[0200.633] CloseHandle (hObject=0xe8) returned 1
	[0200.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.egmwv")) returned 0x20
	[0200.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.636] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20
	[0200.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x20) returned 1
	[0200.640] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.680] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0200.681] ReadFile (in: hFile=0x118, lpBuffer=0xc0001ff800, nNumberOfBytesToRead=0x1f6, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ff800*, lpNumberOfBytesRead=0xc00016fcec*=0x1f6, lpOverlapped=0x0) returned 1
	[0200.685] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206710 | out: pbBuffer=0xc000206710) returned 1
	[0200.685] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000116402 | out: pbBuffer=0xc000116402) returned 1
	[0200.685] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206750 | out: pbBuffer=0xc000206750) returned 1
	[0200.685] GetFileType (hFile=0x118) returned 0x1
	[0200.685] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=502) returned 1
	[0200.685] WriteFile (in: hFile=0x118, lpBuffer=0xc0003bb800*, nNumberOfBytesToWrite=0x1f6, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003bb800*, lpNumberOfBytesWritten=0xc000151ccc*=0x1f6, lpOverlapped=0xc000151ce8) returned 1
	[0200.686] GetFileType (hFile=0x118) returned 0x1
	[0200.686] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1f6, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=502) returned 1
	[0200.686] GetFileType (hFile=0x118) returned 0x1
	[0200.686] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=502) returned 1
	[0200.686] WriteFile (in: hFile=0x118, lpBuffer=0xc000203880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000203880*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0200.687] GetFileType (hFile=0x118) returned 0x1
	[0200.687] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1f6, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=502) returned 1
	[0200.687] CloseHandle (hObject=0x118) returned 1
	[0200.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.egmwv")) returned 0x20
	[0200.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.692] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.704] SetEvent (hEvent=0x124) returned 1
	[0200.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20
	[0200.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x20) returned 1
	[0200.712] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.742] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000165cc4 | out: lpMode=0xc000165cc4) returned 0
	[0200.742] ReadFile (in: hFile=0xe8, lpBuffer=0xc000302000, nNumberOfBytesToRead=0xc44, lpNumberOfBytesRead=0xc000165cec, lpOverlapped=0x0 | out: lpBuffer=0xc000302000*, lpNumberOfBytesRead=0xc000165cec*=0xc44, lpOverlapped=0x0) returned 1
	[0200.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0200.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ca | out: pbBuffer=0xc0004142ca) returned 1
	[0200.748] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215f02 | out: pbBuffer=0xc000215f02) returned 1
	[0200.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215f71 | out: pbBuffer=0xc000215f71) returned 1
	[0200.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215f91 | out: pbBuffer=0xc000215f91) returned 1
	[0200.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0200.748] GetFileType (hFile=0xe8) returned 0x1
	[0200.749] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=3140) returned 1
	[0200.749] WriteFile (in: hFile=0xe8, lpBuffer=0xc00032a000*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc00032a000*, lpNumberOfBytesWritten=0xc0003d9ccc*=0xc44, lpOverlapped=0xc0003d9ce8) returned 1
	[0200.749] GetFileType (hFile=0xe8) returned 0x1
	[0200.749] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xc44, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=3140) returned 1
	[0200.749] GetFileType (hFile=0xe8) returned 0x1
	[0200.749] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=3140) returned 1
	[0200.750] WriteFile (in: hFile=0xe8, lpBuffer=0xc000310e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc000310e00*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x224, lpOverlapped=0xc0003d9ce8) returned 1
	[0200.750] GetFileType (hFile=0xe8) returned 0x1
	[0200.750] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xc44, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=3140) returned 1
	[0200.750] CloseHandle (hObject=0xe8) returned 1
	[0200.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.egmwv")) returned 0x20
	[0200.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.754] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.757] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.760] SetEvent (hEvent=0x124) returned 1
	[0200.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20
	[0200.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x20) returned 1
	[0200.762] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.791] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0200.791] ReadFile (in: hFile=0xd4, lpBuffer=0xc00025a000, nNumberOfBytesToRead=0xa24, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc00025a000*, lpNumberOfBytesRead=0xc00016fcec*=0xa24, lpOverlapped=0x0) returned 1
	[0200.797] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414430 | out: pbBuffer=0xc000414430) returned 1
	[0200.797] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000314b02 | out: pbBuffer=0xc000314b02) returned 1
	[0200.797] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414470 | out: pbBuffer=0xc000414470) returned 1
	[0200.797] GetFileType (hFile=0xd4) returned 0x1
	[0200.797] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=2596) returned 1
	[0200.798] WriteFile (in: hFile=0xd4, lpBuffer=0xc000263000*, nNumberOfBytesToWrite=0xa24, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc000263000*, lpNumberOfBytesWritten=0xc0003d9ccc*=0xa24, lpOverlapped=0xc0003d9ce8) returned 1
	[0200.798] GetFileType (hFile=0xd4) returned 0x1
	[0200.798] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xa24, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=2596) returned 1
	[0200.798] GetFileType (hFile=0xd4) returned 0x1
	[0200.798] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=2596) returned 1
	[0200.799] WriteFile (in: hFile=0xd4, lpBuffer=0xc00026a700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc00026a700*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x224, lpOverlapped=0xc0003d9ce8) returned 1
	[0200.799] GetFileType (hFile=0xd4) returned 0x1
	[0200.799] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xa24, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=2596) returned 1
	[0200.799] CloseHandle (hObject=0xd4) returned 1
	[0200.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.egmwv")) returned 0x20
	[0200.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.804] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.809] SetEvent (hEvent=0x124) returned 1
	[0200.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20
	[0200.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x20) returned 1
	[0200.811] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.847] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0200.847] ReadFile (in: hFile=0xe8, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x14c3, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000175cec*=0x14c3, lpOverlapped=0x0) returned 1
	[0200.853] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0200.853] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039d02 | out: pbBuffer=0xc000039d02) returned 1
	[0200.853] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0200.853] GetFileType (hFile=0xe8) returned 0x1
	[0200.853] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=5315) returned 1
	[0200.853] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004bc000*, nNumberOfBytesToWrite=0x14c3, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004bc000*, lpNumberOfBytesWritten=0xc000151ccc*=0x14c3, lpOverlapped=0xc000151ce8) returned 1
	[0200.854] GetFileType (hFile=0xe8) returned 0x1
	[0200.854] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x14c3, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=5315) returned 1
	[0200.854] GetFileType (hFile=0xe8) returned 0x1
	[0200.854] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=5315) returned 1
	[0200.854] WriteFile (in: hFile=0xe8, lpBuffer=0xc000159180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000159180*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0200.854] GetFileType (hFile=0xe8) returned 0x1
	[0200.855] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x14c3, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=5315) returned 1
	[0200.855] CloseHandle (hObject=0xe8) returned 1
	[0200.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.egmwv")) returned 0x20
	[0200.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.857] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0200.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20
	[0200.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x20) returned 1
	[0200.998] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.042] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000165cc4 | out: lpMode=0xc000165cc4) returned 0
	[0201.042] ReadFile (in: hFile=0xd4, lpBuffer=0xc00008c480, nNumberOfBytesToRead=0x47a, lpNumberOfBytesRead=0xc000165cec, lpOverlapped=0x0 | out: lpBuffer=0xc00008c480*, lpNumberOfBytesRead=0xc000165cec*=0x47a, lpOverlapped=0x0) returned 1
	[0201.046] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0201.046] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001e02 | out: pbBuffer=0xc000001e02) returned 1
	[0201.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001e1a | out: pbBuffer=0xc000001e1a) returned 1
	[0201.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0201.047] GetFileType (hFile=0xd4) returned 0x1
	[0201.047] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=1146) returned 1
	[0201.047] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002a0000*, nNumberOfBytesToWrite=0x47a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x47a, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.047] GetFileType (hFile=0xd4) returned 0x1
	[0201.047] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x47a, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=1146) returned 1
	[0201.048] GetFileType (hFile=0xd4) returned 0x1
	[0201.048] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=1146) returned 1
	[0201.048] WriteFile (in: hFile=0xd4, lpBuffer=0xc00035ae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc00035ae00*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22a, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.048] GetFileType (hFile=0xd4) returned 0x1
	[0201.048] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x47a, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=1146) returned 1
	[0201.048] CloseHandle (hObject=0xd4) returned 1
	[0201.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.egmwv")) returned 0x20
	[0201.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.050] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.063] SetEvent (hEvent=0x148) returned 1
	[0201.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20
	[0201.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x20) returned 1
	[0201.065] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.124] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0201.125] ReadFile (in: hFile=0xd4, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x33c6, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000161cec*=0x33c6, lpOverlapped=0x0) returned 1
	[0201.131] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0201.131] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b646a | out: pbBuffer=0xc0002b646a) returned 1
	[0201.131] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000aca02 | out: pbBuffer=0xc0000aca02) returned 1
	[0201.132] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6490 | out: pbBuffer=0xc0002b6490) returned 1
	[0201.132] GetFileType (hFile=0xd4) returned 0x1
	[0201.132] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=13254) returned 1
	[0201.132] WriteFile (in: hFile=0xd4, lpBuffer=0xc000404000*, nNumberOfBytesToWrite=0x33c6, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000404000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x33c6, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.133] GetFileType (hFile=0xd4) returned 0x1
	[0201.133] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x33c6, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=13254) returned 1
	[0201.133] GetFileType (hFile=0xd4) returned 0x1
	[0201.133] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=13254) returned 1
	[0201.134] WriteFile (in: hFile=0xd4, lpBuffer=0xc0003b8700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0003b8700*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x230, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.134] GetFileType (hFile=0xd4) returned 0x1
	[0201.134] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x33c6, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=13254) returned 1
	[0201.134] CloseHandle (hObject=0xd4) returned 1
	[0201.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.egmwv")) returned 0x20
	[0201.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.137] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.141] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.143] SetEvent (hEvent=0x148) returned 1
	[0201.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20
	[0201.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x20) returned 1
	[0201.145] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0201.173] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0201.173] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000d5500, nNumberOfBytesToRead=0x14ff, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d5500*, lpNumberOfBytesRead=0xc00038dcec*=0x14ff, lpOverlapped=0x0) returned 1
	[0201.179] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0201.179] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0201.180] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ad702 | out: pbBuffer=0xc0000ad702) returned 1
	[0201.180] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0201.180] GetFileType (hFile=0xe8) returned 0x1
	[0201.180] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=5375) returned 1
	[0201.180] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000fe000*, nNumberOfBytesToWrite=0x14ff, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0000fe000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x14ff, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.181] GetFileType (hFile=0xe8) returned 0x1
	[0201.181] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x14ff, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=5375) returned 1
	[0201.181] GetFileType (hFile=0xe8) returned 0x1
	[0201.181] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=5375) returned 1
	[0201.181] WriteFile (in: hFile=0xe8, lpBuffer=0xc000100000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000100000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x236, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.182] GetFileType (hFile=0xe8) returned 0x1
	[0201.182] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x14ff, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=5375) returned 1
	[0201.182] CloseHandle (hObject=0xe8) returned 1
	[0201.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.egmwv")) returned 0x20
	[0201.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.188] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.194] SetEvent (hEvent=0x148) returned 1
	[0201.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20
	[0201.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x20) returned 1
	[0201.196] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.232] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000171cc4 | out: lpMode=0xc000171cc4) returned 0
	[0201.232] ReadFile (in: hFile=0x118, lpBuffer=0xc0003e9900, nNumberOfBytesToRead=0x1126, lpNumberOfBytesRead=0xc000171cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e9900*, lpNumberOfBytesRead=0xc000171cec*=0x1126, lpOverlapped=0x0) returned 1
	[0201.239] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6940 | out: pbBuffer=0xc0002b6940) returned 1
	[0201.239] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b695a | out: pbBuffer=0xc0002b695a) returned 1
	[0201.239] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f4e02 | out: pbBuffer=0xc0001f4e02) returned 1
	[0201.239] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6980 | out: pbBuffer=0xc0002b6980) returned 1
	[0201.239] GetFileType (hFile=0x118) returned 0x1
	[0201.239] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=4390) returned 1
	[0201.239] WriteFile (in: hFile=0x118, lpBuffer=0xc000242000*, nNumberOfBytesToWrite=0x1126, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000242000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x1126, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.240] GetFileType (hFile=0x118) returned 0x1
	[0201.240] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1126, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=4390) returned 1
	[0201.240] GetFileType (hFile=0x118) returned 0x1
	[0201.240] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=4390) returned 1
	[0201.240] WriteFile (in: hFile=0x118, lpBuffer=0xc000237180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000237180*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x227, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.241] GetFileType (hFile=0x118) returned 0x1
	[0201.241] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1126, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=4390) returned 1
	[0201.241] CloseHandle (hObject=0x118) returned 1
	[0201.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.egmwv")) returned 0x20
	[0201.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.246] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.260] SetEvent (hEvent=0x148) returned 1
	[0201.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20
	[0201.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x20) returned 1
	[0201.266] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.298] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0201.298] ReadFile (in: hFile=0xd4, lpBuffer=0xc000300000, nNumberOfBytesToRead=0xc30, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000300000*, lpNumberOfBytesRead=0xc000389cec*=0xc30, lpOverlapped=0x0) returned 1
	[0201.303] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0201.303] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003c5e02 | out: pbBuffer=0xc0003c5e02) returned 1
	[0201.304] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0201.304] GetFileType (hFile=0xd4) returned 0x1
	[0201.304] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3120) returned 1
	[0201.304] WriteFile (in: hFile=0xd4, lpBuffer=0xc000312000*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000312000*, lpNumberOfBytesWritten=0xc000151ccc*=0xc30, lpOverlapped=0xc000151ce8) returned 1
	[0201.304] GetFileType (hFile=0xd4) returned 0x1
	[0201.305] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xc30, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3120) returned 1
	[0201.305] GetFileType (hFile=0xd4) returned 0x1
	[0201.305] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3120) returned 1
	[0201.305] WriteFile (in: hFile=0xd4, lpBuffer=0xc000310380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000310380*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0201.305] GetFileType (hFile=0xd4) returned 0x1
	[0201.305] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xc30, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3120) returned 1
	[0201.306] CloseHandle (hObject=0xd4) returned 1
	[0201.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.egmwv")) returned 0x20
	[0201.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.307] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.320] SetEvent (hEvent=0x148) returned 1
	[0201.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20
	[0201.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x20) returned 1
	[0201.323] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.334] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.342] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0201.343] ReadFile (in: hFile=0x118, lpBuffer=0xc000340000, nNumberOfBytesToRead=0x1634, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesRead=0xc000161cec*=0x1634, lpOverlapped=0x0) returned 1
	[0201.354] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414790 | out: pbBuffer=0xc000414790) returned 1
	[0201.354] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004147aa | out: pbBuffer=0xc0004147aa) returned 1
	[0201.354] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004e2402 | out: pbBuffer=0xc0004e2402) returned 1
	[0201.355] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004147d0 | out: pbBuffer=0xc0004147d0) returned 1
	[0201.355] GetFileType (hFile=0x118) returned 0x1
	[0201.355] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=5684) returned 1
	[0201.355] WriteFile (in: hFile=0x118, lpBuffer=0xc0004f4000*, nNumberOfBytesToWrite=0x1634, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc0004f4000*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x1634, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.355] GetFileType (hFile=0x118) returned 0x1
	[0201.356] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1634, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=5684) returned 1
	[0201.356] GetFileType (hFile=0x118) returned 0x1
	[0201.356] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=5684) returned 1
	[0201.356] WriteFile (in: hFile=0x118, lpBuffer=0xc0004d9880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc0004d9880*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x22a, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.356] GetFileType (hFile=0x118) returned 0x1
	[0201.356] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1634, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=5684) returned 1
	[0201.357] CloseHandle (hObject=0x118) returned 1
	[0201.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.egmwv")) returned 0x20
	[0201.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.357] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0201.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf")) returned 0x20
	[0201.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x20) returned 1
	[0201.520] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.663] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0201.663] ReadFile (in: hFile=0x118, lpBuffer=0xc0004a1000, nNumberOfBytesToRead=0x7e0, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004a1000*, lpNumberOfBytesRead=0xc000389cec*=0x7e0, lpOverlapped=0x0) returned 1
	[0201.671] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0201.671] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b645a | out: pbBuffer=0xc0002b645a) returned 1
	[0201.671] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026cc02 | out: pbBuffer=0xc00026cc02) returned 1
	[0201.671] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0201.671] GetFileType (hFile=0x118) returned 0x1
	[0201.671] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=2016) returned 1
	[0201.672] WriteFile (in: hFile=0x118, lpBuffer=0xc0003bf000*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0003bf000*, lpNumberOfBytesWritten=0xc000357ccc*=0x7e0, lpOverlapped=0xc000357ce8) returned 1
	[0201.672] GetFileType (hFile=0x118) returned 0x1
	[0201.672] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x7e0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=2016) returned 1
	[0201.672] GetFileType (hFile=0x118) returned 0x1
	[0201.672] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=2016) returned 1
	[0201.672] WriteFile (in: hFile=0x118, lpBuffer=0xc0003bc700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0003bc700*, lpNumberOfBytesWritten=0xc000357ccc*=0x22a, lpOverlapped=0xc000357ce8) returned 1
	[0201.673] GetFileType (hFile=0x118) returned 0x1
	[0201.673] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x7e0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=2016) returned 1
	[0201.673] CloseHandle (hObject=0x118) returned 1
	[0201.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf.egmwv")) returned 0x20
	[0201.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.677] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0212.602] SetEvent (hEvent=0x100) returned 1
	[0212.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf")) returned 0x20
	[0212.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF", dwFileAttributes=0x20) returned 1
	[0212.607] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0212.915] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc00051bcc4 | out: lpMode=0xc00051bcc4) returned 0
	[0212.915] ReadFile (in: hFile=0x130, lpBuffer=0xc000328000, nNumberOfBytesToRead=0x3a94, lpNumberOfBytesRead=0xc00051bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000328000*, lpNumberOfBytesRead=0xc00051bcec*=0x3a94, lpOverlapped=0x0) returned 1
	[0212.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0212.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0212.922] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000284802 | out: pbBuffer=0xc000284802) returned 1
	[0212.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00028483e | out: pbBuffer=0xc00028483e) returned 1
	[0212.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002848cc | out: pbBuffer=0xc0002848cc) returned 1
	[0212.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0212.922] GetFileType (hFile=0x130) returned 0x1
	[0212.923] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=14996) returned 1
	[0212.923] WriteFile (in: hFile=0x130, lpBuffer=0xc0001e6000*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc0001e6000*, lpNumberOfBytesWritten=0xc000373ccc*=0x3a94, lpOverlapped=0xc000373ce8) returned 1
	[0212.923] GetFileType (hFile=0x130) returned 0x1
	[0212.923] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3a94, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=14996) returned 1
	[0212.923] GetFileType (hFile=0x130) returned 0x1
	[0212.924] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=14996) returned 1
	[0212.924] WriteFile (in: hFile=0x130, lpBuffer=0xc0002ab500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc0002ab500*, lpNumberOfBytesWritten=0xc000373ccc*=0x22d, lpOverlapped=0xc000373ce8) returned 1
	[0212.924] GetFileType (hFile=0x130) returned 0x1
	[0212.924] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3a94, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=14996) returned 1
	[0212.924] CloseHandle (hObject=0x130) returned 1
	[0212.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf.egmwv")) returned 0x20
	[0212.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.927] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0212.931] SetEvent (hEvent=0x144) returned 1
	[0212.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf")) returned 0x20
	[0212.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF", dwFileAttributes=0x20) returned 1
	[0212.932] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0212.966] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc00051bcc4 | out: lpMode=0xc00051bcc4) returned 0
	[0212.966] ReadFile (in: hFile=0x130, lpBuffer=0xc0003ba000, nNumberOfBytesToRead=0x26f0, lpNumberOfBytesRead=0xc00051bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ba000*, lpNumberOfBytesRead=0xc00051bcec*=0x26f0, lpOverlapped=0x0) returned 1
	[0212.971] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a80 | out: pbBuffer=0xc000206a80) returned 1
	[0212.972] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000230b02 | out: pbBuffer=0xc000230b02) returned 1
	[0212.972] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206ac0 | out: pbBuffer=0xc000206ac0) returned 1
	[0212.972] SetEvent (hEvent=0x144) returned 1
	[0212.972] GetFileType (hFile=0x130) returned 0x1
	[0212.973] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=9968) returned 1
	[0212.973] WriteFile (in: hFile=0x130, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x26f0, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc000377ccc*=0x26f0, lpOverlapped=0xc000377ce8) returned 1
	[0212.973] GetFileType (hFile=0x130) returned 0x1
	[0212.973] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x26f0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=9968) returned 1
	[0212.974] GetFileType (hFile=0x130) returned 0x1
	[0212.974] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=9968) returned 1
	[0212.974] WriteFile (in: hFile=0x130, lpBuffer=0xc00033fc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc00033fc00*, lpNumberOfBytesWritten=0xc000377ccc*=0x22d, lpOverlapped=0xc000377ce8) returned 1
	[0212.974] GetFileType (hFile=0x130) returned 0x1
	[0212.974] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x26f0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=9968) returned 1
	[0212.975] CloseHandle (hObject=0x130) returned 1
	[0212.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf.egmwv")) returned 0x20
	[0212.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.980] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0212.982] SetEvent (hEvent=0x144) returned 1
	[0212.982] SetEvent (hEvent=0xc4) returned 1
	[0212.983] SwitchToThread () returned 1
	[0212.984] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0212.992] SetEvent (hEvent=0xc4) returned 1
	[0212.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf")) returned 0x20
	[0212.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF", dwFileAttributes=0x20) returned 1
	[0213.000] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.022] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.023] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0213.023] ReadFile (in: hFile=0x164, lpBuffer=0xc00037c000, nNumberOfBytesToRead=0x1f3c, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesRead=0xc000147cec*=0x1f3c, lpOverlapped=0x0) returned 1
	[0213.028] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0213.028] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0213.029] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0213.029] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0213.029] GetFileType (hFile=0x164) returned 0x1
	[0213.029] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=7996) returned 1
	[0213.030] WriteFile (in: hFile=0x164, lpBuffer=0xc0003e6000*, nNumberOfBytesToWrite=0x1f3c, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesWritten=0xc000347ccc*=0x1f3c, lpOverlapped=0xc000347ce8) returned 1
	[0213.030] GetFileType (hFile=0x164) returned 0x1
	[0213.030] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1f3c, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=7996) returned 1
	[0213.030] GetFileType (hFile=0x164) returned 0x1
	[0213.030] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=7996) returned 1
	[0213.031] WriteFile (in: hFile=0x164, lpBuffer=0xc000469500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc000469500*, lpNumberOfBytesWritten=0xc000347ccc*=0x233, lpOverlapped=0xc000347ce8) returned 1
	[0213.031] GetFileType (hFile=0x164) returned 0x1
	[0213.031] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1f3c, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=7996) returned 1
	[0213.032] CloseHandle (hObject=0x164) returned 1
	[0213.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf.egmwv")) returned 0x20
	[0213.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.034] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.039] SetEvent (hEvent=0xc4) returned 1
	[0213.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf")) returned 0x20
	[0213.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF", dwFileAttributes=0x20) returned 1
	[0213.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.071] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0213.071] ReadFile (in: hFile=0x170, lpBuffer=0xc0004ac000, nNumberOfBytesToRead=0x2b64, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesRead=0xc000147cec*=0x2b64, lpOverlapped=0x0) returned 1
	[0213.077] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070110 | out: pbBuffer=0xc000070110) returned 1
	[0213.077] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0f02 | out: pbBuffer=0xc0002c0f02) returned 1
	[0213.077] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0f66 | out: pbBuffer=0xc0002c0f66) returned 1
	[0213.078] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070150 | out: pbBuffer=0xc000070150) returned 1
	[0213.078] GetFileType (hFile=0x170) returned 0x1
	[0213.078] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=11108) returned 1
	[0213.078] WriteFile (in: hFile=0x170, lpBuffer=0xc000282000*, nNumberOfBytesToWrite=0x2b64, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc000282000*, lpNumberOfBytesWritten=0xc000343ccc*=0x2b64, lpOverlapped=0xc000343ce8) returned 1
	[0213.079] GetFileType (hFile=0x170) returned 0x1
	[0213.079] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2b64, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=11108) returned 1
	[0213.079] GetFileType (hFile=0x170) returned 0x1
	[0213.079] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=11108) returned 1
	[0213.079] WriteFile (in: hFile=0x170, lpBuffer=0xc00010d500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc00010d500*, lpNumberOfBytesWritten=0xc000343ccc*=0x22d, lpOverlapped=0xc000343ce8) returned 1
	[0213.080] GetFileType (hFile=0x170) returned 0x1
	[0213.080] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2b64, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=11108) returned 1
	[0213.080] CloseHandle (hObject=0x170) returned 1
	[0213.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf.egmwv")) returned 0x20
	[0213.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.084] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf")) returned 0x20
	[0213.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF", dwFileAttributes=0x20) returned 1
	[0213.090] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0213.124] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0213.124] ReadFile (in: hFile=0x130, lpBuffer=0xc0003fc000, nNumberOfBytesToRead=0x3014, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003fc000*, lpNumberOfBytesRead=0xc000389cec*=0x3014, lpOverlapped=0x0) returned 1
	[0213.129] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070290 | out: pbBuffer=0xc000070290) returned 1
	[0213.129] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000702aa | out: pbBuffer=0xc0000702aa) returned 1
	[0213.129] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1e02 | out: pbBuffer=0xc0002c1e02) returned 1
	[0213.130] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1e25 | out: pbBuffer=0xc0002c1e25) returned 1
	[0213.130] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000702d0 | out: pbBuffer=0xc0000702d0) returned 1
	[0213.130] GetFileType (hFile=0x130) returned 0x1
	[0213.130] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=12308) returned 1
	[0213.130] WriteFile (in: hFile=0x130, lpBuffer=0xc000436000*, nNumberOfBytesToWrite=0x3014, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc000436000*, lpNumberOfBytesWritten=0xc000343ccc*=0x3014, lpOverlapped=0xc000343ce8) returned 1
	[0213.131] GetFileType (hFile=0x130) returned 0x1
	[0213.131] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3014, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=12308) returned 1
	[0213.131] GetFileType (hFile=0x130) returned 0x1
	[0213.131] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=12308) returned 1
	[0213.131] WriteFile (in: hFile=0x130, lpBuffer=0xc000410e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc000410e00*, lpNumberOfBytesWritten=0xc000343ccc*=0x224, lpOverlapped=0xc000343ce8) returned 1
	[0213.131] GetFileType (hFile=0x130) returned 0x1
	[0213.132] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3014, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=12308) returned 1
	[0213.132] CloseHandle (hObject=0x130) returned 1
	[0213.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf.egmwv")) returned 0x20
	[0213.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.135] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf")) returned 0x20
	[0213.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF", dwFileAttributes=0x20) returned 1
	[0213.151] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.181] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0213.182] ReadFile (in: hFile=0x170, lpBuffer=0xc0002f8000, nNumberOfBytesToRead=0x3e10, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesRead=0xc000389cec*=0x3e10, lpOverlapped=0x0) returned 1
	[0213.190] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6760 | out: pbBuffer=0xc0002b6760) returned 1
	[0213.190] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000110102 | out: pbBuffer=0xc000110102) returned 1
	[0213.190] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67a0 | out: pbBuffer=0xc0002b67a0) returned 1
	[0213.190] GetFileType (hFile=0x170) returned 0x1
	[0213.190] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15888) returned 1
	[0213.191] WriteFile (in: hFile=0x170, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x3e10, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3e10, lpOverlapped=0xc000155ce8) returned 1
	[0213.191] GetFileType (hFile=0x170) returned 0x1
	[0213.191] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3e10, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15888) returned 1
	[0213.191] GetFileType (hFile=0x170) returned 0x1
	[0213.192] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15888) returned 1
	[0213.192] WriteFile (in: hFile=0x170, lpBuffer=0xc000399c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000399c00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0213.193] GetFileType (hFile=0x170) returned 0x1
	[0213.193] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3e10, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15888) returned 1
	[0213.193] CloseHandle (hObject=0x170) returned 1
	[0213.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf.egmwv")) returned 0x20
	[0213.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.197] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.200] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.207] SetEvent (hEvent=0xc4) returned 1
	[0213.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf")) returned 0x20
	[0213.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF", dwFileAttributes=0x20) returned 1
	[0213.212] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.237] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0213.237] ReadFile (in: hFile=0x164, lpBuffer=0xc00021c000, nNumberOfBytesToRead=0x1984, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00021c000*, lpNumberOfBytesRead=0xc000389cec*=0x1984, lpOverlapped=0x0) returned 1
	[0213.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065e0 | out: pbBuffer=0xc0002065e0) returned 1
	[0213.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065fa | out: pbBuffer=0xc0002065fa) returned 1
	[0213.243] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000327a02 | out: pbBuffer=0xc000327a02) returned 1
	[0213.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000327a07 | out: pbBuffer=0xc000327a07) returned 1
	[0213.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206620 | out: pbBuffer=0xc000206620) returned 1
	[0213.244] GetFileType (hFile=0x164) returned 0x1
	[0213.244] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=6532) returned 1
	[0213.244] WriteFile (in: hFile=0x164, lpBuffer=0xc000234000*, nNumberOfBytesToWrite=0x1984, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc000234000*, lpNumberOfBytesWritten=0xc000347ccc*=0x1984, lpOverlapped=0xc000347ce8) returned 1
	[0213.244] GetFileType (hFile=0x164) returned 0x1
	[0213.244] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1984, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=6532) returned 1
	[0213.245] GetFileType (hFile=0x164) returned 0x1
	[0213.245] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=6532) returned 1
	[0213.245] WriteFile (in: hFile=0x164, lpBuffer=0xc000236000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc000236000*, lpNumberOfBytesWritten=0xc000347ccc*=0x227, lpOverlapped=0xc000347ce8) returned 1
	[0213.245] GetFileType (hFile=0x164) returned 0x1
	[0213.245] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1984, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=6532) returned 1
	[0213.245] CloseHandle (hObject=0x164) returned 1
	[0213.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf.egmwv")) returned 0x20
	[0213.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.248] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf")) returned 0x20
	[0213.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF", dwFileAttributes=0x20) returned 1
	[0213.255] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0213.375] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0213.375] ReadFile (in: hFile=0x130, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x5c78, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc000389cec*=0x5c78, lpOverlapped=0x0) returned 1
	[0213.396] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070290 | out: pbBuffer=0xc000070290) returned 1
	[0213.396] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000702aa | out: pbBuffer=0xc0000702aa) returned 1
	[0213.397] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039d02 | out: pbBuffer=0xc000039d02) returned 1
	[0213.397] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000702d0 | out: pbBuffer=0xc0000702d0) returned 1
	[0213.397] GetFileType (hFile=0x130) returned 0x1
	[0213.397] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=23672) returned 1
	[0213.397] WriteFile (in: hFile=0x130, lpBuffer=0xc0004a0000*, nNumberOfBytesToWrite=0x5c78, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004a0000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5c78, lpOverlapped=0xc000155ce8) returned 1
	[0213.398] GetFileType (hFile=0x130) returned 0x1
	[0213.398] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x5c78, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=23672) returned 1
	[0213.398] GetFileType (hFile=0x130) returned 0x1
	[0213.398] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=23672) returned 1
	[0213.398] WriteFile (in: hFile=0x130, lpBuffer=0xc0002bc700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002bc700*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0213.399] GetFileType (hFile=0x130) returned 0x1
	[0213.399] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x5c78, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=23672) returned 1
	[0213.399] CloseHandle (hObject=0x130) returned 1
	[0213.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf.egmwv")) returned 0x20
	[0213.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf")) returned 0x20
	[0213.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF", dwFileAttributes=0x20) returned 1
	[0213.400] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0213.431] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0213.432] ReadFile (in: hFile=0x130, lpBuffer=0xc000397000, nNumberOfBytesToRead=0x2ce4, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc000397000*, lpNumberOfBytesRead=0xc000147cec*=0x2ce4, lpOverlapped=0x0) returned 1
	[0213.628] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065d0 | out: pbBuffer=0xc0002065d0) returned 1
	[0213.628] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065ea | out: pbBuffer=0xc0002065ea) returned 1
	[0213.628] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000137102 | out: pbBuffer=0xc000137102) returned 1
	[0213.628] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00013712a | out: pbBuffer=0xc00013712a) returned 1
	[0213.628] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00013719e | out: pbBuffer=0xc00013719e) returned 1
	[0213.628] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206610 | out: pbBuffer=0xc000206610) returned 1
	[0213.629] GetFileType (hFile=0x130) returned 0x1
	[0213.629] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=11492) returned 1
	[0213.629] WriteFile (in: hFile=0x130, lpBuffer=0xc0000b4000*, nNumberOfBytesToWrite=0x2ce4, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc0000b4000*, lpNumberOfBytesWritten=0xc000231ccc*=0x2ce4, lpOverlapped=0xc000231ce8) returned 1
	[0213.629] GetFileType (hFile=0x130) returned 0x1
	[0213.629] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x2ce4, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=11492) returned 1
	[0213.630] GetFileType (hFile=0x130) returned 0x1
	[0213.630] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=11492) returned 1
	[0213.630] WriteFile (in: hFile=0x130, lpBuffer=0xc0002fa000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc0002fa000*, lpNumberOfBytesWritten=0xc000231ccc*=0x22d, lpOverlapped=0xc000231ce8) returned 1
	[0213.630] GetFileType (hFile=0x130) returned 0x1
	[0213.630] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x2ce4, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=11492) returned 1
	[0213.631] CloseHandle (hObject=0x130) returned 1
	[0213.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf.egmwv")) returned 0x20
	[0213.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.651] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.661] SetEvent (hEvent=0xe4) returned 1
	[0213.661] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.685] SetEvent (hEvent=0x108) returned 1
	[0213.685] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.687] SetEvent (hEvent=0x108) returned 1
	[0213.687] SetEvent (hEvent=0xe4) returned 1
	[0213.688] SwitchToThread () returned 1
	[0213.711] SwitchToThread () returned 1
	[0213.714] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.718] SetEvent (hEvent=0xe4) returned 1
	[0213.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf")) returned 0x20
	[0213.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF", dwFileAttributes=0x20) returned 1
	[0213.719] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.742] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0213.742] ReadFile (in: hFile=0x170, lpBuffer=0xc000110000, nNumberOfBytesToRead=0x4054, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000110000*, lpNumberOfBytesRead=0xc00038dcec*=0x4054, lpOverlapped=0x0) returned 1
	[0213.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0213.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0213.753] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0213.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039411 | out: pbBuffer=0xc000039411) returned 1
	[0213.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039467 | out: pbBuffer=0xc000039467) returned 1
	[0213.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394a6 | out: pbBuffer=0xc0000394a6) returned 1
	[0213.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394c8 | out: pbBuffer=0xc0000394c8) returned 1
	[0213.754] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0213.754] GetFileType (hFile=0x170) returned 0x1
	[0213.754] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ffca0*=16468) returned 1
	[0213.754] WriteFile (in: hFile=0x170, lpBuffer=0xc00037c000*, nNumberOfBytesToWrite=0x4054, lpNumberOfBytesWritten=0xc0001ffccc, lpOverlapped=0xc0001ffce8 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesWritten=0xc0001ffccc*=0x4054, lpOverlapped=0xc0001ffce8) returned 1
	[0213.754] GetFileType (hFile=0x170) returned 0x1
	[0213.755] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4054, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ffca0*=16468) returned 1
	[0213.755] GetFileType (hFile=0x170) returned 0x1
	[0213.755] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ffca0*=16468) returned 1
	[0213.755] WriteFile (in: hFile=0x170, lpBuffer=0xc0003eb500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0001ffccc, lpOverlapped=0xc0001ffce8 | out: lpBuffer=0xc0003eb500*, lpNumberOfBytesWritten=0xc0001ffccc*=0x224, lpOverlapped=0xc0001ffce8) returned 1
	[0213.755] GetFileType (hFile=0x170) returned 0x1
	[0213.755] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4054, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ffca0*=16468) returned 1
	[0213.756] CloseHandle (hObject=0x170) returned 1
	[0213.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf.egmwv")) returned 0x20
	[0213.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.762] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf")) returned 0x20
	[0213.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF", dwFileAttributes=0x20) returned 1
	[0213.768] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.803] SetEvent (hEvent=0x70) returned 1
	[0213.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.805] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0213.805] ReadFile (in: hFile=0x170, lpBuffer=0xc0001ae000, nNumberOfBytesToRead=0x22a0, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ae000*, lpNumberOfBytesRead=0xc00038dcec*=0x22a0, lpOverlapped=0x0) returned 1
	[0213.856] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.858] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0213.858] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000313602 | out: pbBuffer=0xc000313602) returned 1
	[0213.858] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003136af | out: pbBuffer=0xc0003136af) returned 1
	[0213.858] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003136dd | out: pbBuffer=0xc0003136dd) returned 1
	[0213.859] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d60 | out: pbBuffer=0xc000052d60) returned 1
	[0213.859] GetFileType (hFile=0x170) returned 0x1
	[0213.859] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=8864) returned 1
	[0213.859] WriteFile (in: hFile=0x170, lpBuffer=0xc0000e6000*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc0000e6000*, lpNumberOfBytesWritten=0xc000203ccc*=0x22a0, lpOverlapped=0xc000203ce8) returned 1
	[0213.860] GetFileType (hFile=0x170) returned 0x1
	[0213.860] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x22a0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=8864) returned 1
	[0213.860] GetFileType (hFile=0x170) returned 0x1
	[0213.861] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=8864) returned 1
	[0213.861] WriteFile (in: hFile=0x170, lpBuffer=0xc000402e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc000402e00*, lpNumberOfBytesWritten=0xc000203ccc*=0x224, lpOverlapped=0xc000203ce8) returned 1
	[0213.861] GetFileType (hFile=0x170) returned 0x1
	[0213.861] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x22a0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=8864) returned 1
	[0213.861] CloseHandle (hObject=0x170) returned 1
	[0213.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf.egmwv")) returned 0x20
	[0213.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.873] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf")) returned 0x20
	[0213.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF", dwFileAttributes=0x20) returned 1
	[0213.879] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0213.945] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0213.945] ReadFile (in: hFile=0xcc, lpBuffer=0xc00043c000, nNumberOfBytesToRead=0x6890, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc00043c000*, lpNumberOfBytesRead=0xc000147cec*=0x6890, lpOverlapped=0x0) returned 1
	[0213.970] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070730 | out: pbBuffer=0xc000070730) returned 1
	[0213.970] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00022e502 | out: pbBuffer=0xc00022e502) returned 1
	[0213.970] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070770 | out: pbBuffer=0xc000070770) returned 1
	[0213.970] GetFileType (hFile=0xcc) returned 0x1
	[0213.970] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=26768) returned 1
	[0213.971] WriteFile (in: hFile=0xcc, lpBuffer=0xc00026a000*, nNumberOfBytesToWrite=0x6890, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00026a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x6890, lpOverlapped=0xc000155ce8) returned 1
	[0213.971] GetFileType (hFile=0xcc) returned 0x1
	[0213.971] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6890, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=26768) returned 1
	[0213.971] GetFileType (hFile=0xcc) returned 0x1
	[0213.971] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=26768) returned 1
	[0213.972] WriteFile (in: hFile=0xcc, lpBuffer=0xc000433c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000433c00*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0213.972] GetFileType (hFile=0xcc) returned 0x1
	[0213.972] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6890, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=26768) returned 1
	[0213.972] CloseHandle (hObject=0xcc) returned 1
	[0213.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf.egmwv")) returned 0x20
	[0213.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.985] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0213.988] SetEvent (hEvent=0x124) returned 1
	[0213.988] SetEvent (hEvent=0x144) returned 1
	[0213.988] ReadFile (in: hFile=0xd8, lpBuffer=0xc0002aa000, nNumberOfBytesToRead=0x12c8, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesRead=0xc00016dcec*=0x12c8, lpOverlapped=0x0) returned 1
	[0213.995] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b50 | out: pbBuffer=0xc000052b50) returned 1
	[0213.995] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b6a | out: pbBuffer=0xc000052b6a) returned 1
	[0213.995] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0213.995] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b90 | out: pbBuffer=0xc000052b90) returned 1
	[0213.995] GetFileType (hFile=0xd8) returned 0x1
	[0213.995] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4808) returned 1
	[0213.996] WriteFile (in: hFile=0xd8, lpBuffer=0xc0003ec000*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003ec000*, lpNumberOfBytesWritten=0xc000155ccc*=0x12c8, lpOverlapped=0xc000155ce8) returned 1
	[0213.996] GetFileType (hFile=0xd8) returned 0x1
	[0213.996] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x12c8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4808) returned 1
	[0213.996] GetFileType (hFile=0xd8) returned 0x1
	[0213.996] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4808) returned 1
	[0213.997] WriteFile (in: hFile=0xd8, lpBuffer=0xc00027d880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00027d880*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0213.997] GetFileType (hFile=0xd8) returned 0x1
	[0213.997] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x12c8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4808) returned 1
	[0213.997] CloseHandle (hObject=0xd8) returned 1
	[0213.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf.egmwv")) returned 0x20
	[0213.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.001] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.005] SetEvent (hEvent=0x124) returned 1
	[0214.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf")) returned 0x20
	[0214.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF", dwFileAttributes=0x20) returned 1
	[0214.007] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.034] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0214.034] ReadFile (in: hFile=0x118, lpBuffer=0xc0004b0500, nNumberOfBytesToRead=0x2044, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004b0500*, lpNumberOfBytesRead=0xc00016dcec*=0x2044, lpOverlapped=0x0) returned 1
	[0214.058] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0214.058] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0214.058] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039602 | out: pbBuffer=0xc000039602) returned 1
	[0214.059] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003960f | out: pbBuffer=0xc00003960f) returned 1
	[0214.059] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0214.059] GetFileType (hFile=0x118) returned 0x1
	[0214.060] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015fca0*=8260) returned 1
	[0214.061] WriteFile (in: hFile=0x118, lpBuffer=0xc000364000*, nNumberOfBytesToWrite=0x2044, lpNumberOfBytesWritten=0xc00015fccc, lpOverlapped=0xc00015fce8 | out: lpBuffer=0xc000364000*, lpNumberOfBytesWritten=0xc00015fccc*=0x2044, lpOverlapped=0xc00015fce8) returned 1
	[0214.062] GetFileType (hFile=0x118) returned 0x1
	[0214.062] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2044, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015fca0*=8260) returned 1
	[0214.062] GetFileType (hFile=0x118) returned 0x1
	[0214.062] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015fca0*=8260) returned 1
	[0214.062] WriteFile (in: hFile=0x118, lpBuffer=0xc0001cf500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc00015fccc, lpOverlapped=0xc00015fce8 | out: lpBuffer=0xc0001cf500*, lpNumberOfBytesWritten=0xc00015fccc*=0x221, lpOverlapped=0xc00015fce8) returned 1
	[0214.062] GetFileType (hFile=0x118) returned 0x1
	[0214.063] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2044, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015fca0*=8260) returned 1
	[0214.063] CloseHandle (hObject=0x118) returned 1
	[0214.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf.egmwv")) returned 0x20
	[0214.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.069] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.076] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.110] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.129] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.144] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf")) returned 0x20
	[0214.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF", dwFileAttributes=0x20) returned 1
	[0214.158] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.199] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0214.199] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002f4000, nNumberOfBytesToRead=0x2020, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f4000*, lpNumberOfBytesRead=0xc000387cec*=0x2020, lpOverlapped=0x0) returned 1
	[0214.208] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070440 | out: pbBuffer=0xc000070440) returned 1
	[0214.208] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b6c02 | out: pbBuffer=0xc0000b6c02) returned 1
	[0214.208] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000b6c3f | out: pbBuffer=0xc0000b6c3f) returned 1
	[0214.209] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000b6cb1 | out: pbBuffer=0xc0000b6cb1) returned 1
	[0214.209] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070480 | out: pbBuffer=0xc000070480) returned 1
	[0214.209] GetFileType (hFile=0xcc) returned 0x1
	[0214.209] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=8224) returned 1
	[0214.209] WriteFile (in: hFile=0xcc, lpBuffer=0xc000408000*, nNumberOfBytesToWrite=0x2020, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000408000*, lpNumberOfBytesWritten=0xc000309ccc*=0x2020, lpOverlapped=0xc000309ce8) returned 1
	[0214.210] GetFileType (hFile=0xcc) returned 0x1
	[0214.210] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2020, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=8224) returned 1
	[0214.210] GetFileType (hFile=0xcc) returned 0x1
	[0214.210] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=8224) returned 1
	[0214.210] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003fe700*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc0003fe700*, lpNumberOfBytesWritten=0xc000309ccc*=0x21e, lpOverlapped=0xc000309ce8) returned 1
	[0214.211] GetFileType (hFile=0xcc) returned 0x1
	[0214.211] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2020, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=8224) returned 1
	[0214.211] CloseHandle (hObject=0xcc) returned 1
	[0214.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf.egmwv")) returned 0x20
	[0214.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.215] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.221] SetEvent (hEvent=0x124) returned 1
	[0214.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg")) returned 0x20
	[0214.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG", dwFileAttributes=0x20) returned 1
	[0214.222] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.266] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0214.266] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003b0000, nNumberOfBytesToRead=0x9d27, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b0000*, lpNumberOfBytesRead=0xc000387cec*=0x9d27, lpOverlapped=0x0) returned 1
	[0214.289] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206790 | out: pbBuffer=0xc000206790) returned 1
	[0214.289] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002067aa | out: pbBuffer=0xc0002067aa) returned 1
	[0214.290] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031e302 | out: pbBuffer=0xc00031e302) returned 1
	[0214.290] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00031e328 | out: pbBuffer=0xc00031e328) returned 1
	[0214.290] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002067d0 | out: pbBuffer=0xc0002067d0) returned 1
	[0214.290] SetEvent (hEvent=0x144) returned 1
	[0214.291] GetFileType (hFile=0xa8) returned 0x1
	[0214.291] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=40231) returned 1
	[0214.291] WriteFile (in: hFile=0xa8, lpBuffer=0xc000264000*, nNumberOfBytesToWrite=0x9d27, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000264000*, lpNumberOfBytesWritten=0xc00030dccc*=0x9d27, lpOverlapped=0xc00030dce8) returned 1
	[0214.292] GetFileType (hFile=0xa8) returned 0x1
	[0214.292] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x9d27, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=40231) returned 1
	[0214.292] GetFileType (hFile=0xa8) returned 0x1
	[0214.293] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=40231) returned 1
	[0214.293] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002f3880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0002f3880*, lpNumberOfBytesWritten=0xc00030dccc*=0x236, lpOverlapped=0xc00030dce8) returned 1
	[0214.293] GetFileType (hFile=0xa8) returned 0x1
	[0214.293] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x9d27, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=40231) returned 1
	[0214.293] CloseHandle (hObject=0xa8) returned 1
	[0214.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.egmwv")) returned 0x20
	[0214.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.304] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.357] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.372] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg")) returned 0x20
	[0214.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG", dwFileAttributes=0x20) returned 1
	[0214.382] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.416] SetEvent (hEvent=0x70) returned 1
	[0214.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0214.418] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0214.418] ReadFile (in: hFile=0xd8, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x8fb8, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc00038dcec*=0x8fb8, lpOverlapped=0x0) returned 1
	[0214.478] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65b0 | out: pbBuffer=0xc0002b65b0) returned 1
	[0214.478] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031f102 | out: pbBuffer=0xc00031f102) returned 1
	[0214.479] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65f0 | out: pbBuffer=0xc0002b65f0) returned 1
	[0214.480] GetFileType (hFile=0xd8) returned 0x1
	[0214.480] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000161ca0*=36792) returned 1
	[0214.480] WriteFile (in: hFile=0xd8, lpBuffer=0xc000408000*, nNumberOfBytesToWrite=0x8fb8, lpNumberOfBytesWritten=0xc000161ccc, lpOverlapped=0xc000161ce8 | out: lpBuffer=0xc000408000*, lpNumberOfBytesWritten=0xc000161ccc*=0x8fb8, lpOverlapped=0xc000161ce8) returned 1
	[0214.481] GetFileType (hFile=0xd8) returned 0x1
	[0214.481] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x8fb8, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000161ca0*=36792) returned 1
	[0214.481] GetFileType (hFile=0xd8) returned 0x1
	[0214.482] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000161ca0*=36792) returned 1
	[0214.482] WriteFile (in: hFile=0xd8, lpBuffer=0xc00012c380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000161ccc, lpOverlapped=0xc000161ce8 | out: lpBuffer=0xc00012c380*, lpNumberOfBytesWritten=0xc000161ccc*=0x236, lpOverlapped=0xc000161ce8) returned 1
	[0214.482] GetFileType (hFile=0xd8) returned 0x1
	[0214.482] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x8fb8, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000161ca0*=36792) returned 1
	[0214.482] CloseHandle (hObject=0xd8) returned 1
	[0214.507] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.512] SetEvent (hEvent=0x90) returned 1
	[0214.512] SetEvent (hEvent=0x108) returned 1
	[0214.512] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.569] SetEvent (hEvent=0x68) returned 1
	[0214.569] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.577] SetEvent (hEvent=0x68) returned 1
	[0214.577] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.626] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.638] SetEvent (hEvent=0x120) returned 1
	[0214.638] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.644] SetEvent (hEvent=0x90) returned 1
	[0214.644] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.715] SetEvent (hEvent=0x108) returned 1
	[0214.715] SetEvent (hEvent=0xf8) returned 1
	[0214.715] SetEvent (hEvent=0xc4) returned 1
	[0214.716] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0214.720] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.720] SetEvent (hEvent=0xc4) returned 1
	[0214.720] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x1) returned 0x102
	[0214.723] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0214.723] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) 

Thread:
	id = 10
	os_tid = 0x290

	[0063.189] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x3d2feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3d2feb0*=0x94) returned 1
	[0063.189] VirtualQuery (in: lpAddress=0x3d2fed0, lpBuffer=0x3d2fed0, dwLength=0x30 | out: lpBuffer=0x3d2fed0*(BaseAddress=0x3d2f000, AllocationBase=0x3b30000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0063.190] SetEvent (hEvent=0x68) returned 1
	[0063.190] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20
	[0063.190] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", dwFileAttributes=0x20) returned 0
	[0063.191] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.egmwv" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.egmwv"), dwFlags=0x1) returned 0
	[0063.191] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x90
	[0063.191] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0063.211] SetEvent (hEvent=0xac) returned 1
	[0063.211] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20
	[0063.211] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", dwFileAttributes=0x20) returned 0
	[0063.212] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.egmwv" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.egmwv"), dwFlags=0x1) returned 0
	[0063.322] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0063.374] SetEvent (hEvent=0x68) returned 1
	[0063.374] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0063.375] SetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.375] MoveFileExW (lpExistingFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.375] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0063.452] SetEvent (hEvent=0x68) returned 1
	[0063.452] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0063.452] SetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.452] MoveFileExW (lpExistingFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.453] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20
	[0063.453] SetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.453] MoveFileExW (lpExistingFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\en-US\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.692] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0063.805] SetEvent (hEvent=0x68) returned 1
	[0063.805] GetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20
	[0063.806] SetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.806] MoveFileExW (lpExistingFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.806] GetFileAttributesW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20
	[0063.807] SetFileAttributesW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0063.807] MoveFileExW (lpExistingFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0063.807] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0063.830] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0063.865] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0064.374] SetEvent (hEvent=0x68) returned 1
	[0064.374] GetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20
	[0064.374] SetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.374] MoveFileExW (lpExistingFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.374] GetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20
	[0064.374] SetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.375] MoveFileExW (lpExistingFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.375] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0064.511] SetEvent (hEvent=0x68) returned 1
	[0064.539] GetFileAttributesW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20
	[0064.539] SetFileAttributesW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.539] MoveFileExW (lpExistingFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.539] GetFileAttributesW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20
	[0064.542] SetFileAttributesW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.542] MoveFileExW (lpExistingFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.542] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0064.671] SetEvent (hEvent=0x68) returned 1
	[0064.671] GetFileAttributesW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20
	[0064.671] SetFileAttributesW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.672] MoveFileExW (lpExistingFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.672] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0064.785] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0064.924] SetEvent (hEvent=0x68) returned 1
	[0064.924] GetFileAttributesW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20
	[0064.924] SetFileAttributesW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.925] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.925] GetFileAttributesW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20
	[0064.925] SetFileAttributesW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.925] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.926] GetFileAttributesW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20
	[0064.926] SetFileAttributesW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0064.926] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui.egmwv" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.egmwv"), dwFlags=0x1) returned 0
	[0064.926] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0065.165] SetEvent (hEvent=0xac) returned 1
	[0065.165] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi")) returned 0x2020
	[0065.165] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", dwFileAttributes=0x2020) returned 1
	[0065.179] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.egmwv"), dwFlags=0x1) returned 1
	[0065.628] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0066.756] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0066.756] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0066.809] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0066.809] SetEvent (hEvent=0x70) returned 1
	[0066.809] SetEvent (hEvent=0x68) returned 1
	[0066.812] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x2ad4c, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc000175cec*=0x2ad4c, lpOverlapped=0x0) returned 1
	[0066.848] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0066.848] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002b6902 | out: pbBuffer=0xc0002b6902) returned 1
	[0066.848] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b698b | out: pbBuffer=0xc0002b698b) returned 1
	[0066.848] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052160 | out: pbBuffer=0xc000052160) returned 1
	[0066.857] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0067.106] SwitchToThread () returned 1
	[0067.335] SetEvent (hEvent=0x60) returned 1
	[0067.335] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0067.822] SetEvent (hEvent=0x68) returned 1
	[0067.822] SwitchToThread () returned 1
	[0067.901] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0069.632] SetEvent (hEvent=0xc0) returned 1
	[0069.632] ReadFile (in: hFile=0xa0, lpBuffer=0xc000800000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000399cec, lpOverlapped=0x0 | out: lpBuffer=0xc000800000*, lpNumberOfBytesRead=0xc000399cec*=0x100000, lpOverlapped=0x0) returned 1
	[0069.771] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0069.909] SwitchToThread () returned 1
	[0069.947] SetEvent (hEvent=0xc0) returned 1
	[0069.947] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab")) returned 0x2020
	[0069.947] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", dwFileAttributes=0x2020) returned 1
	[0069.948] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.egmwv"), dwFlags=0x1) returned 1
	[0069.950] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0069.950] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00038fcc4 | out: lpMode=0xc00038fcc4) returned 0
	[0069.951] VirtualAlloc (lpAddress=0xc000538000, dwSize=0x7a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000538000
	[0070.000] ReadFile (in: hFile=0xd4, lpBuffer=0xc000538000, nNumberOfBytesToRead=0x798ff, lpNumberOfBytesRead=0xc00038fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000538000*, lpNumberOfBytesRead=0xc00038fcec*=0x798ff, lpOverlapped=0x0) returned 1
	[0070.131] SwitchToThread () returned 1
	[0072.139] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0072.716] VirtualAlloc (lpAddress=0xc000364000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000364000
	[0072.720] VirtualAlloc (lpAddress=0xc000b00000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b00000
	[0072.722] VirtualAlloc (lpAddress=0xc0000ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ca000
	[0072.724] VirtualAlloc (lpAddress=0xc00020a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020a000
	[0072.724] VirtualAlloc (lpAddress=0xc000384000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000384000
	[0072.725] VirtualAlloc (lpAddress=0xc00023c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023c000
	[0072.726] VirtualAlloc (lpAddress=0xc00023e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023e000
	[0072.727] VirtualAlloc (lpAddress=0xc0003e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e0000
	[0072.728] VirtualAlloc (lpAddress=0xc0003e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e2000
	[0072.729] VirtualAlloc (lpAddress=0xc000408000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000408000
	[0072.730] VirtualAlloc (lpAddress=0xc000180000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000180000
	[0072.731] VirtualAlloc (lpAddress=0xc000368000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000368000
	[0072.733] VirtualAlloc (lpAddress=0xc000b04000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b04000
	[0072.737] VirtualAlloc (lpAddress=0xc000b14000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b14000
	[0072.741] SetEvent (hEvent=0xe4) returned 1
	[0072.741] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0073.545] SetEvent (hEvent=0xac) returned 1
	[0073.560] VirtualAlloc (lpAddress=0xc0001fa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fa000
	[0073.564] VirtualAlloc (lpAddress=0xc0000e2000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e2000
	[0073.579] GetFileType (hFile=0xcc) returned 0x1
	[0073.580] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000219ca0*=175974) returned 1
	[0073.580] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000e2000*, nNumberOfBytesToWrite=0x2af66, lpNumberOfBytesWritten=0xc000219ccc, lpOverlapped=0xc000219ce8 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesWritten=0xc000219ccc*=0x2af66, lpOverlapped=0xc000219ce8) returned 1
	[0073.583] GetFileType (hFile=0xcc) returned 0x1
	[0073.583] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2af66, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000219ca0*=175974) returned 1
	[0073.584] VirtualAlloc (lpAddress=0xc000202000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000202000
	[0073.584] VirtualAlloc (lpAddress=0xc00041e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00041e000
	[0073.585] GetFileType (hFile=0xcc) returned 0x1
	[0073.585] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000219ca0*=175974) returned 1
	[0073.585] WriteFile (in: hFile=0xcc, lpBuffer=0xc00041e000*, nNumberOfBytesToWrite=0x251, lpNumberOfBytesWritten=0xc000219ccc, lpOverlapped=0xc000219ce8 | out: lpBuffer=0xc00041e000*, lpNumberOfBytesWritten=0xc000219ccc*=0x251, lpOverlapped=0xc000219ce8) returned 1
	[0075.291] SwitchToThread () returned 1
	[0075.318] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0075.346] SetEvent (hEvent=0xac) returned 1
	[0075.347] GetFileType (hFile=0xcc) returned 0x1
	[0075.347] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2af66, lpNewFilePointer=0xc000219ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000219ca0*=175974) returned 1
	[0075.347] CloseHandle (hObject=0xcc) returned 1
	[0077.743] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0078.164] SetEvent (hEvent=0x5c) returned 1
	[0078.167] GetFileType (hFile=0xec) returned 0x1
	[0078.167] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000429ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000429ca0*=175257) returned 1
	[0078.167] WriteFile (in: hFile=0xec, lpBuffer=0xc000bb4000*, nNumberOfBytesToWrite=0x2ac99, lpNumberOfBytesWritten=0xc000429ccc, lpOverlapped=0xc000429ce8 | out: lpBuffer=0xc000bb4000*, lpNumberOfBytesWritten=0xc000429ccc*=0x2ac99, lpOverlapped=0xc000429ce8) returned 1
	[0078.171] GetFileType (hFile=0xec) returned 0x1
	[0078.171] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x2ac99, lpNewFilePointer=0xc000429ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000429ca0*=175257) returned 1
	[0078.171] VirtualAlloc (lpAddress=0xc0000ba000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ba000
	[0078.172] GetFileType (hFile=0xec) returned 0x1
	[0078.172] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000429ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000429ca0*=175257) returned 1
	[0078.173] WriteFile (in: hFile=0xec, lpBuffer=0xc0000ba000*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0xc000429ccc, lpOverlapped=0xc000429ce8 | out: lpBuffer=0xc0000ba000*, lpNumberOfBytesWritten=0xc000429ccc*=0x24b, lpOverlapped=0xc000429ce8) returned 1
	[0078.261] GetFileType (hFile=0xec) returned 0x1
	[0078.261] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x2ac99, lpNewFilePointer=0xc000429ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000429ca0*=175257) returned 1
	[0078.261] CloseHandle (hObject=0xec) returned 1
	[0079.059] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0084.022] SwitchToThread () returned 1
	[0085.416] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003fa000, nNumberOfBytesToRead=0x106f, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003fa000*, lpNumberOfBytesRead=0xc00016bcec*=0x106f, lpOverlapped=0x0) returned 1
	[0085.608] ReadFile (in: hFile=0xd8, lpBuffer=0xc000b24000, nNumberOfBytesToRead=0xc72, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000b24000*, lpNumberOfBytesRead=0xc000425cec*=0xc72, lpOverlapped=0x0) returned 1
	[0086.004] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052200 | out: pbBuffer=0xc000052200) returned 1
	[0086.004] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005221a | out: pbBuffer=0xc00005221a) returned 1
	[0086.004] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0086.004] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038b58 | out: pbBuffer=0xc000038b58) returned 1
	[0086.005] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052240 | out: pbBuffer=0xc000052240) returned 1
	[0086.005] VirtualAlloc (lpAddress=0xc0007c0000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007c0000
	[0086.008] GetFileType (hFile=0xd8) returned 0x1
	[0086.008] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00033fca0*=3186) returned 1
	[0086.008] WriteFile (in: hFile=0xd8, lpBuffer=0xc000298000*, nNumberOfBytesToWrite=0xc72, lpNumberOfBytesWritten=0xc00033fccc, lpOverlapped=0xc00033fce8 | out: lpBuffer=0xc000298000*, lpNumberOfBytesWritten=0xc00033fccc*=0xc72, lpOverlapped=0xc00033fce8) returned 1
	[0086.009] GetFileType (hFile=0xd8) returned 0x1
	[0086.009] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xc72, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00033fca0*=3186) returned 1
	[0086.009] GetFileType (hFile=0xd8) returned 0x1
	[0086.009] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00033fca0*=3186) returned 1
	[0086.009] WriteFile (in: hFile=0xd8, lpBuffer=0xc00018f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00033fccc, lpOverlapped=0xc00033fce8 | out: lpBuffer=0xc00018f500*, lpNumberOfBytesWritten=0xc00033fccc*=0x22a, lpOverlapped=0xc00033fce8) returned 1
	[0086.010] GetFileType (hFile=0xd8) returned 0x1
	[0086.010] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xc72, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00033fca0*=3186) returned 1
	[0086.010] CloseHandle (hObject=0xd8) returned 1
	[0086.013] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.egmwv")) returned 0x2020
	[0086.013] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0086.015] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052380 | out: pbBuffer=0xc000052380) returned 1
	[0086.015] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005239a | out: pbBuffer=0xc00005239a) returned 1
	[0086.015] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039902 | out: pbBuffer=0xc000039902) returned 1
	[0086.015] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000523c0 | out: pbBuffer=0xc0000523c0) returned 1
	[0086.015] VirtualAlloc (lpAddress=0xc000344000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000344000
	[0086.016] GetFileType (hFile=0xcc) returned 0x1
	[0086.016] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00033fca0*=4207) returned 1
	[0086.016] WriteFile (in: hFile=0xcc, lpBuffer=0xc000344000*, nNumberOfBytesToWrite=0x106f, lpNumberOfBytesWritten=0xc00033fccc, lpOverlapped=0xc00033fce8 | out: lpBuffer=0xc000344000*, lpNumberOfBytesWritten=0xc00033fccc*=0x106f, lpOverlapped=0xc00033fce8) returned 1
	[0086.017] GetFileType (hFile=0xcc) returned 0x1
	[0086.017] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x106f, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00033fca0*=4207) returned 1
	[0086.017] GetFileType (hFile=0xcc) returned 0x1
	[0086.017] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00033fca0*=4207) returned 1
	[0086.017] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003f4e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00033fccc, lpOverlapped=0xc00033fce8 | out: lpBuffer=0xc0003f4e00*, lpNumberOfBytesWritten=0xc00033fccc*=0x22d, lpOverlapped=0xc00033fce8) returned 1
	[0086.017] GetFileType (hFile=0xcc) returned 0x1
	[0086.018] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x106f, lpNewFilePointer=0xc00033fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00033fca0*=4207) returned 1
	[0086.018] CloseHandle (hObject=0xcc) returned 1
	[0086.021] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0086.021] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0086.022] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab")) returned 0x2020
	[0086.022] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", dwFileAttributes=0x2020) returned 1
	[0086.022] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.egmwv"), dwFlags=0x1) returned 1
	[0086.023] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0086.196] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0086.779] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000395cc4 | out: lpMode=0xc000395cc4) returned 0
	[0086.779] SwitchToThread () returned 1
	[0086.850] SwitchToThread () returned 1
	[0086.974] SetEvent (hEvent=0x5c) returned 1
	[0086.974] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0090.766] SetEvent (hEvent=0x5c) returned 1
	[0090.766] SetEvent (hEvent=0x68) returned 1
	[0090.766] SetEvent (hEvent=0xb0) returned 1
	[0090.766] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0092.529] SwitchToThread () returned 1
	[0092.648] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.egmwv")) returned 0x2020
	[0092.650] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0092.656] SwitchToThread () returned 1
	[0092.818] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0093.059] VirtualAlloc (lpAddress=0xc00004c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004c000
	[0093.059] SetEvent (hEvent=0xb0) returned 1
	[0093.061] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab")) returned 0x2020
	[0093.061] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", dwFileAttributes=0x2020) returned 1
	[0093.062] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.egmwv"), dwFlags=0x1) returned 1
	[0093.302] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0093.303] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0093.303] VirtualAlloc (lpAddress=0xc000bb4000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.303] VirtualAlloc (lpAddress=0xc000bb4000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.303] VirtualAlloc (lpAddress=0xc000bb4000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.304] VirtualAlloc (lpAddress=0xc000bb4000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bb4000
	[0093.307] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0xc0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.307] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x60000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.307] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.307] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0093.307] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bf4000
	[0093.308] VirtualAlloc (lpAddress=0xc000c00000, dwSize=0xb4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000c00000
	[0093.562] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 0x2020
	[0093.562] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", dwFileAttributes=0x2020) returned 1
	[0093.563] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.egmwv"), dwFlags=0x1) returned 1
	[0093.564] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc
	[0093.565] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0093.565] VirtualAlloc (lpAddress=0xc0003ce000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ce000
	[0093.569] ReadFile (in: hFile=0xdc, lpBuffer=0xc0003ce000, nNumberOfBytesToRead=0x15600, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ce000*, lpNumberOfBytesRead=0xc000425cec*=0x15600, lpOverlapped=0x0) returned 1
	[0093.697] SwitchToThread () returned 1
	[0093.788] VirtualAlloc (lpAddress=0xc0002ce000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ce000
	[0093.789] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0093.919] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0093.919] SetEvent (hEvent=0x70) returned 1
	[0093.919] SetEvent (hEvent=0xb0) returned 1
	[0093.919] SetEvent (hEvent=0xac) returned 1
	[0093.919] VirtualAlloc (lpAddress=0xc000d34000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d34000
	[0093.922] VirtualAlloc (lpAddress=0xc000d3c000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d3c000
	[0094.192] SwitchToThread () returned 1
	[0094.276] SwitchToThread () returned 1
	[0094.314] SetEvent (hEvent=0xb0) returned 1
	[0094.314] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0098.607] SetEvent (hEvent=0xac) returned 1
	[0098.613] SwitchToThread () returned 1
	[0099.350] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0101.368] VirtualAlloc (lpAddress=0xc0002b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b2000
	[0101.370] VirtualAlloc (lpAddress=0xc00039e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00039e000
	[0101.371] VirtualAlloc (lpAddress=0xc000b32000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b32000
	[0101.372] VirtualAlloc (lpAddress=0xc000176000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000176000
	[0101.375] VirtualAlloc (lpAddress=0xc000178000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000178000
	[0101.376] VirtualAlloc (lpAddress=0xc000188000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000188000
	[0101.377] VirtualAlloc (lpAddress=0xc00018a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018a000
	[0101.378] VirtualAlloc (lpAddress=0xc00018e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018e000
	[0101.379] VirtualAlloc (lpAddress=0xc000190000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000190000
	[0101.380] VirtualAlloc (lpAddress=0xc00019a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019a000
	[0101.382] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0100 | out: pbBuffer=0xc0003a0100) returned 1
	[0101.382] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a011a | out: pbBuffer=0xc0003a011a) returned 1
	[0101.383] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0101.383] VirtualAlloc (lpAddress=0xc00019c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019c000
	[0101.384] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0140 | out: pbBuffer=0xc0003a0140) returned 1
	[0101.385] VirtualAlloc (lpAddress=0xc000282000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000282000
	[0101.387] GetFileType (hFile=0xe8) returned 0x1
	[0101.387] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000b13ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000b13ca0*=1800) returned 1
	[0101.388] WriteFile (in: hFile=0xe8, lpBuffer=0xc000283000*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0xc000b13ccc, lpOverlapped=0xc000b13ce8 | out: lpBuffer=0xc000283000*, lpNumberOfBytesWritten=0xc000b13ccc*=0x708, lpOverlapped=0xc000b13ce8) returned 1
	[0101.390] GetFileType (hFile=0xe8) returned 0x1
	[0101.391] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x708, lpNewFilePointer=0xc000b13ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000b13ca0*=1800) returned 1
	[0101.391] VirtualAlloc (lpAddress=0xc000284000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000284000
	[0101.392] GetFileType (hFile=0xe8) returned 0x1
	[0101.392] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000b13ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000b13ca0*=1800) returned 1
	[0101.392] WriteFile (in: hFile=0xe8, lpBuffer=0xc00018f500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000b13ccc, lpOverlapped=0xc000b13ce8 | out: lpBuffer=0xc00018f500*, lpNumberOfBytesWritten=0xc000b13ccc*=0x224, lpOverlapped=0xc000b13ce8) returned 1
	[0101.392] GetFileType (hFile=0xe8) returned 0x1
	[0101.392] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x708, lpNewFilePointer=0xc000b13ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000b13ca0*=1800) returned 1
	[0101.393] CloseHandle (hObject=0xe8) returned 1
	[0101.402] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.egmwv")) returned 0x2020
	[0101.404] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0101.554] VirtualAlloc (lpAddress=0xc00029a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029a000
	[0101.555] VirtualAlloc (lpAddress=0xc0002aa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002aa000
	[0101.555] VirtualAlloc (lpAddress=0xc0002ac000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ac000
	[0101.556] VirtualAlloc (lpAddress=0xc0002e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e0000
	[0101.557] VirtualAlloc (lpAddress=0xc0002e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e2000
	[0101.558] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0240 | out: pbBuffer=0xc0003a0240) returned 1
	[0101.558] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039802 | out: pbBuffer=0xc000039802) returned 1
	[0101.558] VirtualAlloc (lpAddress=0xc00041c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00041c000
	[0101.559] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0280 | out: pbBuffer=0xc0003a0280) returned 1
	[0101.559] VirtualAlloc (lpAddress=0xc000180000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000180000
	[0101.561] VirtualAlloc (lpAddress=0xc000364000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000364000
	[0101.566] VirtualAlloc (lpAddress=0xc0000aa000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000aa000
	[0101.577] VirtualAlloc (lpAddress=0xc000184000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000184000
	[0101.578] VirtualAlloc (lpAddress=0xc00041e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00041e000
	[0101.579] VirtualAlloc (lpAddress=0xc000376000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000376000
	[0101.580] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000
	[0101.584] GetFileType (hFile=0xdc) returned 0x1
	[0101.585] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000b17ca0*=87552) returned 1
	[0101.585] WriteFile (in: hFile=0xdc, lpBuffer=0xc00092e000*, nNumberOfBytesToWrite=0x15600, lpNumberOfBytesWritten=0xc000b17ccc, lpOverlapped=0xc000b17ce8 | out: lpBuffer=0xc00092e000*, lpNumberOfBytesWritten=0xc000b17ccc*=0x15600, lpOverlapped=0xc000b17ce8) returned 1
	[0101.672] GetFileType (hFile=0xdc) returned 0x1
	[0101.672] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x15600, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000b17ca0*=87552) returned 1
	[0101.672] VirtualAlloc (lpAddress=0xc000208000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000208000
	[0101.673] GetFileType (hFile=0xdc) returned 0x1
	[0101.673] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000b17ca0*=87552) returned 1
	[0101.673] WriteFile (in: hFile=0xdc, lpBuffer=0xc0002e2e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000b17ccc, lpOverlapped=0xc000b17ce8 | out: lpBuffer=0xc0002e2e00*, lpNumberOfBytesWritten=0xc000b17ccc*=0x230, lpOverlapped=0xc000b17ce8) returned 1
	[0101.780] GetFileType (hFile=0xdc) returned 0x1
	[0101.781] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x15600, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000b17ca0*=87552) returned 1
	[0101.781] CloseHandle (hObject=0xdc) returned 1
	[0101.815] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.egmwv")) returned 0x2020
	[0101.816] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0101.816] SetEvent (hEvent=0x68) returned 1
	[0101.816] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0102.569] SetEvent (hEvent=0xe4) returned 1
	[0102.569] ReadFile (in: hFile=0xe8, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00039bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc00039bcec*=0x100000, lpOverlapped=0x0) returned 1
	[0102.816] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0103.417] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0103.730] SwitchToThread () returned 1
	[0108.002] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 0x2020
	[0108.005] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", dwFileAttributes=0x2020) returned 1
	[0108.007] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.egmwv"), dwFlags=0x1) returned 1
	[0108.752] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0108.752] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000399cc4 | out: lpMode=0xc000399cc4) returned 0
	[0108.753] VirtualAlloc (lpAddress=0xc0003ce000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ce000
	[0108.760] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003ce000, nNumberOfBytesToRead=0x15833, lpNumberOfBytesRead=0xc000399cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ce000*, lpNumberOfBytesRead=0xc000399cec*=0x15833, lpOverlapped=0x0) returned 1
	[0110.491] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0110.673] VirtualAlloc (lpAddress=0xc000378000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000378000
	[0110.676] VirtualAlloc (lpAddress=0xc000b0e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b0e000
	[0110.679] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052140 | out: pbBuffer=0xc000052140) returned 1
	[0110.680] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005215a | out: pbBuffer=0xc00005215a) returned 1
	[0110.680] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000435302 | out: pbBuffer=0xc000435302) returned 1
	[0110.681] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052180 | out: pbBuffer=0xc000052180) returned 1
	[0110.681] VirtualAlloc (lpAddress=0xc000260000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000260000
	[0110.684] VirtualAlloc (lpAddress=0xc000264000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000264000
	[0110.686] VirtualAlloc (lpAddress=0xc0000e2000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e2000
	[0110.689] VirtualAlloc (lpAddress=0xc000268000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000268000
	[0110.692] VirtualAlloc (lpAddress=0xc00026c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00026c000
	[0110.694] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0110.694] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0110.694] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f2000
	[0110.695] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0110.695] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fa000
	[0110.696] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0110.696] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fe000
	[0110.696] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0110.702] GetFileType (hFile=0xa8) returned 0x1
	[0110.702] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000b17ca0*=88115) returned 1
	[0110.703] WriteFile (in: hFile=0xa8, lpBuffer=0xc000780000*, nNumberOfBytesToWrite=0x15833, lpNumberOfBytesWritten=0xc000b17ccc, lpOverlapped=0xc000b17ce8 | out: lpBuffer=0xc000780000*, lpNumberOfBytesWritten=0xc000b17ccc*=0x15833, lpOverlapped=0xc000b17ce8) returned 1
	[0110.704] GetFileType (hFile=0xa8) returned 0x1
	[0110.705] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x15833, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000b17ca0*=88115) returned 1
	[0110.705] GetFileType (hFile=0xa8) returned 0x1
	[0110.705] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000b17ca0*=88115) returned 1
	[0110.705] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002ad500*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc000b17ccc, lpOverlapped=0xc000b17ce8 | out: lpBuffer=0xc0002ad500*, lpNumberOfBytesWritten=0xc000b17ccc*=0x239, lpOverlapped=0xc000b17ce8) returned 1
	[0111.486] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0112.264] GetFileType (hFile=0xa8) returned 0x1
	[0112.264] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x15833, lpNewFilePointer=0xc000b17ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000b17ca0*=88115) returned 1
	[0112.264] CloseHandle (hObject=0xa8) returned 1
	[0112.491] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0112.777] SwitchToThread () returned 1
	[0112.923] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0113.068] SwitchToThread () returned 1
	[0117.085] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.egmwv")) returned 0x2020
	[0117.086] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0117.088] SwitchToThread () returned 1
	[0117.352] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 0x2020
	[0117.352] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", dwFileAttributes=0x2020) returned 1
	[0119.406] SetEvent (hEvent=0x70) returned 1
	[0119.406] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.egmwv"), dwFlags=0x1) returned 1
	[0122.919] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec
	[0122.920] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0122.921] ReadFile (in: hFile=0xec, lpBuffer=0xc00092e000, nNumberOfBytesToRead=0x15a00, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00092e000*, lpNumberOfBytesRead=0xc000387cec*=0x15a00, lpOverlapped=0x0) returned 1
	[0131.917] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052360 | out: pbBuffer=0xc000052360) returned 1
	[0131.917] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001d02 | out: pbBuffer=0xc000001d02) returned 1
	[0131.918] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001d83 | out: pbBuffer=0xc000001d83) returned 1
	[0131.918] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000523a0 | out: pbBuffer=0xc0000523a0) returned 1
	[0131.918] VirtualAlloc (lpAddress=0xc0007ac000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007ac000
	[0131.923] VirtualAlloc (lpAddress=0xc000140000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000140000
	[0131.929] VirtualAlloc (lpAddress=0xc0007be000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007be000
	[0131.930] VirtualAlloc (lpAddress=0xc00014e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014e000
	[0131.934] GetFileType (hFile=0xec) returned 0x1
	[0131.934] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=88576) returned 1
	[0131.934] WriteFile (in: hFile=0xec, lpBuffer=0xc0000f2000*, nNumberOfBytesToWrite=0x15a00, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0000f2000*, lpNumberOfBytesWritten=0xc000073ccc*=0x15a00, lpOverlapped=0xc000073ce8) returned 1
	[0131.935] GetFileType (hFile=0xec) returned 0x1
	[0131.935] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x15a00, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=88576) returned 1
	[0131.935] GetFileType (hFile=0xec) returned 0x1
	[0131.936] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=88576) returned 1
	[0131.936] WriteFile (in: hFile=0xec, lpBuffer=0xc0001bb180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0001bb180*, lpNumberOfBytesWritten=0xc000073ccc*=0x230, lpOverlapped=0xc000073ce8) returned 1
	[0132.815] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0133.435] GetFileType (hFile=0xec) returned 0x1
	[0133.436] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x15a00, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=88576) returned 1
	[0133.436] CloseHandle (hObject=0xec) returned 1
	[0133.467] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.egmwv")) returned 0x2020
	[0133.468] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0133.469] VirtualAlloc (lpAddress=0xc000246000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000246000
	[0133.473] VirtualAlloc (lpAddress=0xc0012fc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012fc000
	[0133.474] VirtualAlloc (lpAddress=0xc000254000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000254000
	[0133.475] VirtualAlloc (lpAddress=0xc000258000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000258000
	[0133.482] VirtualAlloc (lpAddress=0xc000276000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000276000
	[0133.484] VirtualAlloc (lpAddress=0xc00027a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027a000
	[0133.485] VirtualAlloc (lpAddress=0xc000ad2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ad2000
	[0133.485] VirtualFree (lpAddress=0xc001a00000, dwSize=0x180000, dwFreeType=0x4000) returned 1
	[0135.231] VirtualFree (lpAddress=0xc001a00000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0135.239] VirtualAlloc (lpAddress=0xc000ad6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ad6000
	[0135.558] SetEvent (hEvent=0x54) returned 1
	[0135.558] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0136.074] SetEvent (hEvent=0x120) returned 1
	[0136.074] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0136.789] SetEvent (hEvent=0xb0) returned 1
	[0136.790] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0201.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf")) returned 0x20
	[0201.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x20) returned 1
	[0201.572] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.840] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000391cc4 | out: lpMode=0xc000391cc4) returned 0
	[0201.840] ReadFile (in: hFile=0xd0, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x2418, lpNumberOfBytesRead=0xc000391cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000391cec*=0x2418, lpOverlapped=0x0) returned 1
	[0201.854] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145c0 | out: pbBuffer=0xc0004145c0) returned 1
	[0201.855] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145da | out: pbBuffer=0xc0004145da) returned 1
	[0201.855] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001e8c02 | out: pbBuffer=0xc0001e8c02) returned 1
	[0201.855] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001e8cc5 | out: pbBuffer=0xc0001e8cc5) returned 1
	[0201.855] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414600 | out: pbBuffer=0xc000414600) returned 1
	[0201.856] GetFileType (hFile=0xd0) returned 0x1
	[0201.856] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=9240) returned 1
	[0201.856] WriteFile (in: hFile=0xd0, lpBuffer=0xc0000c8000*, nNumberOfBytesToWrite=0x2418, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc0000c8000*, lpNumberOfBytesWritten=0xc000353ccc*=0x2418, lpOverlapped=0xc000353ce8) returned 1
	[0201.857] GetFileType (hFile=0xd0) returned 0x1
	[0201.857] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x2418, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=9240) returned 1
	[0201.857] GetFileType (hFile=0xd0) returned 0x1
	[0201.857] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=9240) returned 1
	[0201.857] WriteFile (in: hFile=0xd0, lpBuffer=0xc0000f0000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc0000f0000*, lpNumberOfBytesWritten=0xc000353ccc*=0x224, lpOverlapped=0xc000353ce8) returned 1
	[0201.857] GetFileType (hFile=0xd0) returned 0x1
	[0201.858] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x2418, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=9240) returned 1
	[0201.858] CloseHandle (hObject=0xd0) returned 1
	[0201.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf.egmwv")) returned 0x20
	[0201.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.886] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.277] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x20
	[0203.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x20) returned 1
	[0203.297] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.382] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000229cc4 | out: lpMode=0xc000229cc4) returned 0
	[0203.383] ReadFile (in: hFile=0x168, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x332e, lpNumberOfBytesRead=0xc000229cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc000229cec*=0x332e, lpOverlapped=0x0) returned 1
	[0203.405] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206280 | out: pbBuffer=0xc000206280) returned 1
	[0203.405] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020629a | out: pbBuffer=0xc00020629a) returned 1
	[0203.405] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00021fe02 | out: pbBuffer=0xc00021fe02) returned 1
	[0203.405] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021fe0f | out: pbBuffer=0xc00021fe0f) returned 1
	[0203.406] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0203.406] GetFileType (hFile=0x168) returned 0x1
	[0203.406] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=13102) returned 1
	[0203.406] WriteFile (in: hFile=0x168, lpBuffer=0xc00013a000*, nNumberOfBytesToWrite=0x332e, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc00013a000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x332e, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.407] GetFileType (hFile=0x168) returned 0x1
	[0203.407] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x332e, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=13102) returned 1
	[0203.407] GetFileType (hFile=0x168) returned 0x1
	[0203.407] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=13102) returned 1
	[0203.407] WriteFile (in: hFile=0x168, lpBuffer=0xc00014a000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc00014a000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x230, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.408] GetFileType (hFile=0x168) returned 0x1
	[0203.408] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x332e, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=13102) returned 1
	[0203.408] CloseHandle (hObject=0x168) returned 1
	[0203.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf.egmwv")) returned 0x20
	[0203.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.414] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x20
	[0203.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x20) returned 1
	[0203.421] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.458] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000229cc4 | out: lpMode=0xc000229cc4) returned 0
	[0203.458] ReadFile (in: hFile=0x17c, lpBuffer=0xc000320000, nNumberOfBytesToRead=0x2576, lpNumberOfBytesRead=0xc000229cec, lpOverlapped=0x0 | out: lpBuffer=0xc000320000*, lpNumberOfBytesRead=0xc000229cec*=0x2576, lpOverlapped=0x0) returned 1
	[0203.474] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0203.474] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62aa | out: pbBuffer=0xc0002b62aa) returned 1
	[0203.475] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215d02 | out: pbBuffer=0xc000215d02) returned 1
	[0203.475] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0203.475] GetFileType (hFile=0x17c) returned 0x1
	[0203.475] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=9590) returned 1
	[0203.475] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004be000*, nNumberOfBytesToWrite=0x2576, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0004be000*, lpNumberOfBytesWritten=0xc000175ccc*=0x2576, lpOverlapped=0xc000175ce8) returned 1
	[0203.476] GetFileType (hFile=0x17c) returned 0x1
	[0203.476] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2576, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=9590) returned 1
	[0203.476] GetFileType (hFile=0x17c) returned 0x1
	[0203.476] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=9590) returned 1
	[0203.476] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001c7180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0001c7180*, lpNumberOfBytesWritten=0xc000175ccc*=0x230, lpOverlapped=0xc000175ce8) returned 1
	[0203.477] GetFileType (hFile=0x17c) returned 0x1
	[0203.477] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2576, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=9590) returned 1
	[0203.477] CloseHandle (hObject=0x17c) returned 1
	[0203.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf.egmwv")) returned 0x20
	[0203.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.486] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.495] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.522] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x20
	[0203.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x20) returned 1
	[0203.546] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.574] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0203.574] ReadFile (in: hFile=0x17c, lpBuffer=0xc00030a000, nNumberOfBytesToRead=0xeb8, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00030a000*, lpNumberOfBytesRead=0xc000387cec*=0xeb8, lpOverlapped=0x0) returned 1
	[0203.582] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ce0 | out: pbBuffer=0xc000052ce0) returned 1
	[0203.582] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052cfa | out: pbBuffer=0xc000052cfa) returned 1
	[0203.582] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003fc302 | out: pbBuffer=0xc0003fc302) returned 1
	[0203.582] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fc311 | out: pbBuffer=0xc0003fc311) returned 1
	[0203.583] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0203.583] GetFileType (hFile=0x17c) returned 0x1
	[0203.583] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=3768) returned 1
	[0203.583] WriteFile (in: hFile=0x17c, lpBuffer=0xc000406000*, nNumberOfBytesToWrite=0xeb8, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000406000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0xeb8, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.584] GetFileType (hFile=0x17c) returned 0x1
	[0203.584] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xeb8, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=3768) returned 1
	[0203.584] GetFileType (hFile=0x17c) returned 0x1
	[0203.584] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=3768) returned 1
	[0203.584] WriteFile (in: hFile=0x17c, lpBuffer=0xc00041f880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00041f880*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.585] GetFileType (hFile=0x17c) returned 0x1
	[0203.585] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xeb8, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=3768) returned 1
	[0203.585] CloseHandle (hObject=0x17c) returned 1
	[0203.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf.egmwv")) returned 0x20
	[0203.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.588] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.591] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.594] SetEvent (hEvent=0xe4) returned 1
	[0203.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x20
	[0203.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x20) returned 1
	[0203.596] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.637] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000229cc4 | out: lpMode=0xc000229cc4) returned 0
	[0203.638] ReadFile (in: hFile=0x164, lpBuffer=0xc00020e000, nNumberOfBytesToRead=0x532, lpNumberOfBytesRead=0xc000229cec, lpOverlapped=0x0 | out: lpBuffer=0xc00020e000*, lpNumberOfBytesRead=0xc000229cec*=0x532, lpOverlapped=0x0) returned 1
	[0203.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0203.647] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1602 | out: pbBuffer=0xc0002c1602) returned 1
	[0203.647] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0203.647] GetFileType (hFile=0x164) returned 0x1
	[0203.647] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1330) returned 1
	[0203.647] WriteFile (in: hFile=0x164, lpBuffer=0xc000299000*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000299000*, lpNumberOfBytesWritten=0xc000151ccc*=0x532, lpOverlapped=0xc000151ce8) returned 1
	[0203.648] GetFileType (hFile=0x164) returned 0x1
	[0203.648] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x532, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1330) returned 1
	[0203.648] GetFileType (hFile=0x164) returned 0x1
	[0203.648] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1330) returned 1
	[0203.648] WriteFile (in: hFile=0x164, lpBuffer=0xc000297180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000297180*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0203.649] GetFileType (hFile=0x164) returned 0x1
	[0203.649] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x532, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1330) returned 1
	[0203.649] CloseHandle (hObject=0x164) returned 1
	[0203.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf.egmwv")) returned 0x20
	[0203.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.653] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.659] SetEvent (hEvent=0x60) returned 1
	[0203.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x20
	[0203.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x20) returned 1
	[0203.661] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.698] SetEvent (hEvent=0x70) returned 1
	[0203.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.700] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0203.700] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003e8000, nNumberOfBytesToRead=0x94a, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e8000*, lpNumberOfBytesRead=0xc0002d5cec*=0x94a, lpOverlapped=0x0) returned 1
	[0203.705] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0203.705] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004ca602 | out: pbBuffer=0xc0004ca602) returned 1
	[0203.705] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0203.705] GetFileType (hFile=0x17c) returned 0x1
	[0203.705] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2378) returned 1
	[0203.705] WriteFile (in: hFile=0x17c, lpBuffer=0xc00006a000*, nNumberOfBytesToWrite=0x94a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00006a000*, lpNumberOfBytesWritten=0xc000151ccc*=0x94a, lpOverlapped=0xc000151ce8) returned 1
	[0203.706] GetFileType (hFile=0x17c) returned 0x1
	[0203.706] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x94a, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2378) returned 1
	[0203.706] GetFileType (hFile=0x17c) returned 0x1
	[0203.706] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2378) returned 1
	[0203.706] WriteFile (in: hFile=0x17c, lpBuffer=0xc000476a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000476a80*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0203.706] GetFileType (hFile=0x17c) returned 0x1
	[0203.706] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x94a, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2378) returned 1
	[0203.707] CloseHandle (hObject=0x17c) returned 1
	[0203.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf.egmwv")) returned 0x20
	[0203.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.711] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x20
	[0203.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x20) returned 1
	[0203.729] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.754] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0203.754] ReadFile (in: hFile=0x168, lpBuffer=0xc00035d500, nNumberOfBytesToRead=0x6b0, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc00035d500*, lpNumberOfBytesRead=0xc0002d7cec*=0x6b0, lpOverlapped=0x0) returned 1
	[0203.762] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414420 | out: pbBuffer=0xc000414420) returned 1
	[0203.762] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041443a | out: pbBuffer=0xc00041443a) returned 1
	[0203.762] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215202 | out: pbBuffer=0xc000215202) returned 1
	[0203.762] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215281 | out: pbBuffer=0xc000215281) returned 1
	[0203.762] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414460 | out: pbBuffer=0xc000414460) returned 1
	[0203.763] GetFileType (hFile=0x168) returned 0x1
	[0203.763] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=1712) returned 1
	[0203.763] WriteFile (in: hFile=0x168, lpBuffer=0xc0001b9000*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc0001b9000*, lpNumberOfBytesWritten=0xc0000ddccc*=0x6b0, lpOverlapped=0xc0000ddce8) returned 1
	[0203.764] GetFileType (hFile=0x168) returned 0x1
	[0203.764] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x6b0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=1712) returned 1
	[0203.764] GetFileType (hFile=0x168) returned 0x1
	[0203.764] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=1712) returned 1
	[0203.765] WriteFile (in: hFile=0x168, lpBuffer=0xc0001b6700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc0001b6700*, lpNumberOfBytesWritten=0xc0000ddccc*=0x227, lpOverlapped=0xc0000ddce8) returned 1
	[0203.765] GetFileType (hFile=0x168) returned 0x1
	[0203.765] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x6b0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=1712) returned 1
	[0203.765] CloseHandle (hObject=0x168) returned 1
	[0203.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf.egmwv")) returned 0x20
	[0203.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.769] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.771] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.786] SetEvent (hEvent=0x60) returned 1
	[0203.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x20
	[0203.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x20) returned 1
	[0203.790] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.818] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0203.818] ReadFile (in: hFile=0x168, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x31f4, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc0002d7cec*=0x31f4, lpOverlapped=0x0) returned 1
	[0203.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0203.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0203.825] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000402502 | out: pbBuffer=0xc000402502) returned 1
	[0203.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00040253b | out: pbBuffer=0xc00040253b) returned 1
	[0203.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000402555 | out: pbBuffer=0xc000402555) returned 1
	[0203.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000402592 | out: pbBuffer=0xc000402592) returned 1
	[0203.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004025ea | out: pbBuffer=0xc0004025ea) returned 1
	[0203.826] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0203.826] GetFileType (hFile=0x168) returned 0x1
	[0203.826] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=12788) returned 1
	[0203.826] WriteFile (in: hFile=0x168, lpBuffer=0xc00044a000*, nNumberOfBytesToWrite=0x31f4, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc00044a000*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x31f4, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.827] GetFileType (hFile=0x168) returned 0x1
	[0203.827] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x31f4, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=12788) returned 1
	[0203.827] GetFileType (hFile=0x168) returned 0x1
	[0203.827] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=12788) returned 1
	[0203.827] WriteFile (in: hFile=0x168, lpBuffer=0xc000408e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc000408e00*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x230, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.828] GetFileType (hFile=0x168) returned 0x1
	[0203.828] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x31f4, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=12788) returned 1
	[0203.828] CloseHandle (hObject=0x168) returned 1
	[0203.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf.egmwv")) returned 0x20
	[0203.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.831] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.834] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.836] SetEvent (hEvent=0x60) returned 1
	[0203.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x20
	[0203.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x20) returned 1
	[0203.837] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.873] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0203.873] ReadFile (in: hFile=0x164, lpBuffer=0xc0000f2000, nNumberOfBytesToRead=0x4bc, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f2000*, lpNumberOfBytesRead=0xc000193cec*=0x4bc, lpOverlapped=0x0) returned 1
	[0203.879] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0203.879] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000403202 | out: pbBuffer=0xc000403202) returned 1
	[0203.879] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0203.879] GetFileType (hFile=0x164) returned 0x1
	[0203.879] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=1212) returned 1
	[0203.879] WriteFile (in: hFile=0x164, lpBuffer=0xc0000f9000*, nNumberOfBytesToWrite=0x4bc, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc0000f9000*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x4bc, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.880] GetFileType (hFile=0x164) returned 0x1
	[0203.880] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4bc, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=1212) returned 1
	[0203.880] GetFileType (hFile=0x164) returned 0x1
	[0203.880] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=1212) returned 1
	[0203.881] WriteFile (in: hFile=0x164, lpBuffer=0xc000102700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc000102700*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x22a, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.881] GetFileType (hFile=0x164) returned 0x1
	[0203.881] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4bc, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=1212) returned 1
	[0203.881] CloseHandle (hObject=0x164) returned 1
	[0203.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf.egmwv")) returned 0x20
	[0203.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.887] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x20
	[0203.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x20) returned 1
	[0203.895] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.930] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0203.930] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001fc000, nNumberOfBytesToRead=0xdc4, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001fc000*, lpNumberOfBytesRead=0xc000193cec*=0xdc4, lpOverlapped=0x0) returned 1
	[0203.937] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414760 | out: pbBuffer=0xc000414760) returned 1
	[0203.937] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041477a | out: pbBuffer=0xc00041477a) returned 1
	[0203.937] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001eac02 | out: pbBuffer=0xc0001eac02) returned 1
	[0203.937] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001eac58 | out: pbBuffer=0xc0001eac58) returned 1
	[0203.937] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004147a0 | out: pbBuffer=0xc0004147a0) returned 1
	[0203.937] GetFileType (hFile=0x17c) returned 0x1
	[0203.938] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=3524) returned 1
	[0203.938] WriteFile (in: hFile=0x17c, lpBuffer=0xc000244000*, nNumberOfBytesToWrite=0xdc4, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc000244000*, lpNumberOfBytesWritten=0xc0000ddccc*=0xdc4, lpOverlapped=0xc0000ddce8) returned 1
	[0203.938] GetFileType (hFile=0x17c) returned 0x1
	[0203.938] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xdc4, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=3524) returned 1
	[0203.938] GetFileType (hFile=0x17c) returned 0x1
	[0203.939] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=3524) returned 1
	[0203.939] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001fb880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc0001fb880*, lpNumberOfBytesWritten=0xc0000ddccc*=0x22a, lpOverlapped=0xc0000ddce8) returned 1
	[0203.939] GetFileType (hFile=0x17c) returned 0x1
	[0203.939] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xdc4, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=3524) returned 1
	[0203.939] CloseHandle (hObject=0x17c) returned 1
	[0203.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf.egmwv")) returned 0x20
	[0203.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.946] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0203.961] SetEvent (hEvent=0x60) returned 1
	[0203.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x20
	[0203.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x20) returned 1
	[0203.963] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.988] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0203.988] ReadFile (in: hFile=0x168, lpBuffer=0xc00027e000, nNumberOfBytesToRead=0xf38, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00027e000*, lpNumberOfBytesRead=0xc000389cec*=0xf38, lpOverlapped=0x0) returned 1
	[0203.993] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004148f0 | out: pbBuffer=0xc0004148f0) returned 1
	[0203.993] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001eb902 | out: pbBuffer=0xc0001eb902) returned 1
	[0203.993] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001eb962 | out: pbBuffer=0xc0001eb962) returned 1
	[0203.993] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414930 | out: pbBuffer=0xc000414930) returned 1
	[0203.993] GetFileType (hFile=0x168) returned 0x1
	[0203.994] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=3896) returned 1
	[0203.994] WriteFile (in: hFile=0x168, lpBuffer=0xc0002e8000*, nNumberOfBytesToWrite=0xf38, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc0002e8000*, lpNumberOfBytesWritten=0xc0000ddccc*=0xf38, lpOverlapped=0xc0000ddce8) returned 1
	[0203.994] GetFileType (hFile=0x168) returned 0x1
	[0203.994] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xf38, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=3896) returned 1
	[0203.995] GetFileType (hFile=0x168) returned 0x1
	[0203.995] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=3896) returned 1
	[0203.995] WriteFile (in: hFile=0x168, lpBuffer=0xc000285180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc000285180*, lpNumberOfBytesWritten=0xc0000ddccc*=0x22d, lpOverlapped=0xc0000ddce8) returned 1
	[0203.995] GetFileType (hFile=0x168) returned 0x1
	[0203.995] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xf38, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=3896) returned 1
	[0203.996] CloseHandle (hObject=0x168) returned 1
	[0203.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf.egmwv")) returned 0x20
	[0203.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.998] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.002] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.014] SetEvent (hEvent=0x60) returned 1
	[0204.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x20
	[0204.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x20) returned 1
	[0204.018] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.047] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0204.047] ReadFile (in: hFile=0x168, lpBuffer=0xc0003c2000, nNumberOfBytesToRead=0xaac, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c2000*, lpNumberOfBytesRead=0xc000389cec*=0xaac, lpOverlapped=0x0) returned 1
	[0204.052] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414100 | out: pbBuffer=0xc000414100) returned 1
	[0204.052] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041411a | out: pbBuffer=0xc00041411a) returned 1
	[0204.052] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00024ca02 | out: pbBuffer=0xc00024ca02) returned 1
	[0204.052] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00024ca6c | out: pbBuffer=0xc00024ca6c) returned 1
	[0204.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414140 | out: pbBuffer=0xc000414140) returned 1
	[0204.053] GetFileType (hFile=0x168) returned 0x1
	[0204.053] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2732) returned 1
	[0204.053] WriteFile (in: hFile=0x168, lpBuffer=0xc0003c0000*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0003c0000*, lpNumberOfBytesWritten=0xc00014bccc*=0xaac, lpOverlapped=0xc00014bce8) returned 1
	[0204.053] GetFileType (hFile=0x168) returned 0x1
	[0204.053] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xaac, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2732) returned 1
	[0204.054] GetFileType (hFile=0x168) returned 0x1
	[0204.054] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2732) returned 1
	[0204.054] WriteFile (in: hFile=0x168, lpBuffer=0xc0002f2e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0002f2e00*, lpNumberOfBytesWritten=0xc00014bccc*=0x22a, lpOverlapped=0xc00014bce8) returned 1
	[0204.054] GetFileType (hFile=0x168) returned 0x1
	[0204.054] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xaac, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2732) returned 1
	[0204.054] CloseHandle (hObject=0x168) returned 1
	[0204.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf.egmwv")) returned 0x20
	[0204.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.056] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.061] SetEvent (hEvent=0xc8) returned 1
	[0204.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x20
	[0204.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x20) returned 1
	[0204.062] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.099] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0204.099] ReadFile (in: hFile=0x164, lpBuffer=0xc0003d0000, nNumberOfBytesToRead=0x3a94, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003d0000*, lpNumberOfBytesRead=0xc000389cec*=0x3a94, lpOverlapped=0x0) returned 1
	[0204.106] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414590 | out: pbBuffer=0xc000414590) returned 1
	[0204.106] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145aa | out: pbBuffer=0xc0004145aa) returned 1
	[0204.106] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0204.106] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145d0 | out: pbBuffer=0xc0004145d0) returned 1
	[0204.107] GetFileType (hFile=0x164) returned 0x1
	[0204.107] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=14996) returned 1
	[0204.107] WriteFile (in: hFile=0x164, lpBuffer=0xc0003b6000*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0003b6000*, lpNumberOfBytesWritten=0xc00014bccc*=0x3a94, lpOverlapped=0xc00014bce8) returned 1
	[0204.108] GetFileType (hFile=0x164) returned 0x1
	[0204.108] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3a94, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=14996) returned 1
	[0204.108] GetFileType (hFile=0x164) returned 0x1
	[0204.108] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=14996) returned 1
	[0204.108] WriteFile (in: hFile=0x164, lpBuffer=0xc000435880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000435880*, lpNumberOfBytesWritten=0xc00014bccc*=0x22d, lpOverlapped=0xc00014bce8) returned 1
	[0204.109] GetFileType (hFile=0x164) returned 0x1
	[0204.109] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3a94, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=14996) returned 1
	[0204.109] CloseHandle (hObject=0x164) returned 1
	[0204.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf.egmwv")) returned 0x20
	[0204.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.113] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x20
	[0204.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x20) returned 1
	[0204.182] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.239] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0204.239] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x292a, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000389cec*=0x292a, lpOverlapped=0x0) returned 1
	[0204.246] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0204.246] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1e02 | out: pbBuffer=0xc0002c1e02) returned 1
	[0204.246] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1e9c | out: pbBuffer=0xc0002c1e9c) returned 1
	[0204.246] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0204.246] GetFileType (hFile=0x17c) returned 0x1
	[0204.247] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=10538) returned 1
	[0204.247] WriteFile (in: hFile=0x17c, lpBuffer=0xc00010a000*, nNumberOfBytesToWrite=0x292a, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc00010a000*, lpNumberOfBytesWritten=0xc000147ccc*=0x292a, lpOverlapped=0xc000147ce8) returned 1
	[0204.247] GetFileType (hFile=0x17c) returned 0x1
	[0204.247] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x292a, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=10538) returned 1
	[0204.247] GetFileType (hFile=0x17c) returned 0x1
	[0204.248] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=10538) returned 1
	[0204.248] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002d0e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc0002d0e00*, lpNumberOfBytesWritten=0xc000147ccc*=0x22a, lpOverlapped=0xc000147ce8) returned 1
	[0204.248] GetFileType (hFile=0x17c) returned 0x1
	[0204.248] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x292a, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=10538) returned 1
	[0204.249] CloseHandle (hObject=0x17c) returned 1
	[0204.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf.egmwv")) returned 0x20
	[0204.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.257] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.272] SetEvent (hEvent=0xc8) returned 1
	[0204.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf")) returned 0x20
	[0204.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x20) returned 1
	[0204.278] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.311] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0204.311] ReadFile (in: hFile=0x168, lpBuffer=0xc00011d000, nNumberOfBytesToRead=0xdec, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00011d000*, lpNumberOfBytesRead=0xc000389cec*=0xdec, lpOverlapped=0x0) returned 1
	[0204.316] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053020 | out: pbBuffer=0xc000053020) returned 1
	[0204.316] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00039d502 | out: pbBuffer=0xc00039d502) returned 1
	[0204.316] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00039d5b2 | out: pbBuffer=0xc00039d5b2) returned 1
	[0204.316] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053060 | out: pbBuffer=0xc000053060) returned 1
	[0204.316] GetFileType (hFile=0x168) returned 0x1
	[0204.316] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=3564) returned 1
	[0204.317] WriteFile (in: hFile=0x168, lpBuffer=0xc00034a000*, nNumberOfBytesToWrite=0xdec, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesWritten=0xc000147ccc*=0xdec, lpOverlapped=0xc000147ce8) returned 1
	[0204.317] GetFileType (hFile=0x168) returned 0x1
	[0204.317] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xdec, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=3564) returned 1
	[0204.317] GetFileType (hFile=0x168) returned 0x1
	[0204.318] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=3564) returned 1
	[0204.318] WriteFile (in: hFile=0x168, lpBuffer=0xc00034c000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc00034c000*, lpNumberOfBytesWritten=0xc000147ccc*=0x230, lpOverlapped=0xc000147ce8) returned 1
	[0204.318] GetFileType (hFile=0x168) returned 0x1
	[0204.318] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xdec, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=3564) returned 1
	[0204.318] CloseHandle (hObject=0x168) returned 1
	[0204.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf.egmwv")) returned 0x20
	[0204.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.320] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.333] SetEvent (hEvent=0xc8) returned 1
	[0204.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf")) returned 0x20
	[0204.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x20) returned 1
	[0204.335] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.367] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0204.367] ReadFile (in: hFile=0x164, lpBuffer=0xc000314000, nNumberOfBytesToRead=0x8d6, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesRead=0xc000387cec*=0x8d6, lpOverlapped=0x0) returned 1
	[0204.374] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531c0 | out: pbBuffer=0xc0000531c0) returned 1
	[0204.374] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531da | out: pbBuffer=0xc0000531da) returned 1
	[0204.374] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001b2002 | out: pbBuffer=0xc0001b2002) returned 1
	[0204.374] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b20c4 | out: pbBuffer=0xc0001b20c4) returned 1
	[0204.374] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053200 | out: pbBuffer=0xc000053200) returned 1
	[0204.374] GetFileType (hFile=0x164) returned 0x1
	[0204.374] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=2262) returned 1
	[0204.376] WriteFile (in: hFile=0x164, lpBuffer=0xc0001af000*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc0001af000*, lpNumberOfBytesWritten=0xc000147ccc*=0x8d6, lpOverlapped=0xc000147ce8) returned 1
	[0204.376] GetFileType (hFile=0x164) returned 0x1
	[0204.376] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8d6, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=2262) returned 1
	[0204.376] GetFileType (hFile=0x164) returned 0x1
	[0204.376] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=2262) returned 1
	[0204.377] WriteFile (in: hFile=0x164, lpBuffer=0xc00034d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc00034d880*, lpNumberOfBytesWritten=0xc000147ccc*=0x22a, lpOverlapped=0xc000147ce8) returned 1
	[0204.377] GetFileType (hFile=0x164) returned 0x1
	[0204.377] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8d6, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=2262) returned 1
	[0204.377] CloseHandle (hObject=0x164) returned 1
	[0204.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf.egmwv")) returned 0x20
	[0204.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.380] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.383] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.386] SetEvent (hEvent=0xc8) returned 1
	[0204.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf")) returned 0x20
	[0204.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x20) returned 1
	[0204.388] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.436] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0204.436] ReadFile (in: hFile=0x168, lpBuffer=0xc000262000, nNumberOfBytesToRead=0xc18a, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000262000*, lpNumberOfBytesRead=0xc0002d7cec*=0xc18a, lpOverlapped=0x0) returned 1
	[0204.445] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004148c0 | out: pbBuffer=0xc0004148c0) returned 1
	[0204.445] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000408902 | out: pbBuffer=0xc000408902) returned 1
	[0204.445] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00040899c | out: pbBuffer=0xc00040899c) returned 1
	[0204.445] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414900 | out: pbBuffer=0xc000414900) returned 1
	[0204.446] GetFileType (hFile=0x168) returned 0x1
	[0204.446] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=49546) returned 1
	[0204.446] WriteFile (in: hFile=0x168, lpBuffer=0xc000338000*, nNumberOfBytesToWrite=0xc18a, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000338000*, lpNumberOfBytesWritten=0xc00014bccc*=0xc18a, lpOverlapped=0xc00014bce8) returned 1
	[0204.447] GetFileType (hFile=0x168) returned 0x1
	[0204.447] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc18a, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=49546) returned 1
	[0204.447] GetFileType (hFile=0x168) returned 0x1
	[0204.447] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=49546) returned 1
	[0204.448] WriteFile (in: hFile=0x168, lpBuffer=0xc000412a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000412a80*, lpNumberOfBytesWritten=0xc00014bccc*=0x22d, lpOverlapped=0xc00014bce8) returned 1
	[0204.448] GetFileType (hFile=0x168) returned 0x1
	[0204.448] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc18a, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=49546) returned 1
	[0204.448] CloseHandle (hObject=0x168) returned 1
	[0204.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf.egmwv")) returned 0x20
	[0204.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.455] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x20
	[0204.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x20) returned 1
	[0204.462] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.514] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0204.514] ReadFile (in: hFile=0x17c, lpBuffer=0xc000452000, nNumberOfBytesToRead=0x7992, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000452000*, lpNumberOfBytesRead=0xc0002d7cec*=0x7992, lpOverlapped=0x0) returned 1
	[0204.521] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0204.521] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0204.521] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394bf | out: pbBuffer=0xc0000394bf) returned 1
	[0204.521] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394e5 | out: pbBuffer=0xc0000394e5) returned 1
	[0204.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0204.522] GetFileType (hFile=0x17c) returned 0x1
	[0204.522] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=31122) returned 1
	[0204.522] WriteFile (in: hFile=0x17c, lpBuffer=0xc00016e000*, nNumberOfBytesToWrite=0x7992, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesWritten=0xc00022dccc*=0x7992, lpOverlapped=0xc00022dce8) returned 1
	[0204.523] GetFileType (hFile=0x17c) returned 0x1
	[0204.523] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x7992, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=31122) returned 1
	[0204.524] GetFileType (hFile=0x17c) returned 0x1
	[0204.524] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=31122) returned 1
	[0204.524] WriteFile (in: hFile=0x17c, lpBuffer=0xc000157500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000157500*, lpNumberOfBytesWritten=0xc00022dccc*=0x230, lpOverlapped=0xc00022dce8) returned 1
	[0204.524] GetFileType (hFile=0x17c) returned 0x1
	[0204.524] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x7992, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=31122) returned 1
	[0204.524] CloseHandle (hObject=0x17c) returned 1
	[0204.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf.egmwv")) returned 0x20
	[0204.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.534] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.548] SetEvent (hEvent=0xc0) returned 1
	[0204.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x20
	[0204.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x20) returned 1
	[0204.552] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.581] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0204.581] ReadFile (in: hFile=0x168, lpBuffer=0xc000218000, nNumberOfBytesToRead=0xa82, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc0002d7cec*=0xa82, lpOverlapped=0x0) returned 1
	[0204.586] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e70 | out: pbBuffer=0xc000052e70) returned 1
	[0204.586] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215002 | out: pbBuffer=0xc000215002) returned 1
	[0204.586] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215079 | out: pbBuffer=0xc000215079) returned 1
	[0204.586] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002150e5 | out: pbBuffer=0xc0002150e5) returned 1
	[0204.587] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0204.587] GetFileType (hFile=0x168) returned 0x1
	[0204.587] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=2690) returned 1
	[0204.587] WriteFile (in: hFile=0x168, lpBuffer=0xc000477000*, nNumberOfBytesToWrite=0xa82, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000477000*, lpNumberOfBytesWritten=0xc00022dccc*=0xa82, lpOverlapped=0xc00022dce8) returned 1
	[0204.587] GetFileType (hFile=0x168) returned 0x1
	[0204.588] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xa82, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=2690) returned 1
	[0204.588] GetFileType (hFile=0x168) returned 0x1
	[0204.588] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=2690) returned 1
	[0204.588] WriteFile (in: hFile=0x168, lpBuffer=0xc0000c4700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc0000c4700*, lpNumberOfBytesWritten=0xc00022dccc*=0x224, lpOverlapped=0xc00022dce8) returned 1
	[0204.588] GetFileType (hFile=0x168) returned 0x1
	[0204.588] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xa82, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=2690) returned 1
	[0204.589] CloseHandle (hObject=0x168) returned 1
	[0204.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf.egmwv")) returned 0x20
	[0204.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.590] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.603] SetEvent (hEvent=0xc0) returned 1
	[0204.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x20
	[0204.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x20) returned 1
	[0204.611] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.639] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0204.639] ReadFile (in: hFile=0x168, lpBuffer=0xc0001de000, nNumberOfBytesToRead=0x9c5e, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001de000*, lpNumberOfBytesRead=0xc0002d5cec*=0x9c5e, lpOverlapped=0x0) returned 1
	[0204.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ff0 | out: pbBuffer=0xc000052ff0) returned 1
	[0204.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005300a | out: pbBuffer=0xc00005300a) returned 1
	[0204.646] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215c02 | out: pbBuffer=0xc000215c02) returned 1
	[0204.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215c7d | out: pbBuffer=0xc000215c7d) returned 1
	[0204.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215c82 | out: pbBuffer=0xc000215c82) returned 1
	[0204.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215c9f | out: pbBuffer=0xc000215c9f) returned 1
	[0204.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053030 | out: pbBuffer=0xc000053030) returned 1
	[0204.647] GetFileType (hFile=0x168) returned 0x1
	[0204.647] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=40030) returned 1
	[0204.647] WriteFile (in: hFile=0x168, lpBuffer=0xc000318000*, nNumberOfBytesToWrite=0x9c5e, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000318000*, lpNumberOfBytesWritten=0xc00022dccc*=0x9c5e, lpOverlapped=0xc00022dce8) returned 1
	[0204.648] GetFileType (hFile=0x168) returned 0x1
	[0204.648] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x9c5e, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=40030) returned 1
	[0204.649] GetFileType (hFile=0x168) returned 0x1
	[0204.649] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=40030) returned 1
	[0204.649] WriteFile (in: hFile=0x168, lpBuffer=0xc00012a000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc00012a000*, lpNumberOfBytesWritten=0xc00022dccc*=0x236, lpOverlapped=0xc00022dce8) returned 1
	[0204.649] GetFileType (hFile=0x168) returned 0x1
	[0204.649] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x9c5e, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=40030) returned 1
	[0204.649] CloseHandle (hObject=0x168) returned 1
	[0204.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf.egmwv")) returned 0x20
	[0204.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.652] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.656] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.659] SetEvent (hEvent=0xc0) returned 1
	[0204.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x20
	[0204.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x20) returned 1
	[0204.660] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.695] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0204.695] ReadFile (in: hFile=0x164, lpBuffer=0xc0000f6000, nNumberOfBytesToRead=0x1e94, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesRead=0xc000197cec*=0x1e94, lpOverlapped=0x0) returned 1
	[0204.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0204.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0204.701] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000104102 | out: pbBuffer=0xc000104102) returned 1
	[0204.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000104143 | out: pbBuffer=0xc000104143) returned 1
	[0204.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0204.702] GetFileType (hFile=0x164) returned 0x1
	[0204.702] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7828) returned 1
	[0204.702] WriteFile (in: hFile=0x164, lpBuffer=0xc000248000*, nNumberOfBytesToWrite=0x1e94, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000248000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1e94, lpOverlapped=0xc000151ce8) returned 1
	[0204.702] GetFileType (hFile=0x164) returned 0x1
	[0204.703] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1e94, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7828) returned 1
	[0204.703] GetFileType (hFile=0x164) returned 0x1
	[0204.703] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7828) returned 1
	[0204.703] WriteFile (in: hFile=0x164, lpBuffer=0xc000102e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000102e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0204.704] GetFileType (hFile=0x164) returned 0x1
	[0204.704] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1e94, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7828) returned 1
	[0204.704] CloseHandle (hObject=0x164) returned 1
	[0204.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf.egmwv")) returned 0x20
	[0204.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.710] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x20
	[0204.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x20) returned 1
	[0204.717] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.759] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0204.759] ReadFile (in: hFile=0x17c, lpBuffer=0xc0002be000, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002be000*, lpNumberOfBytesRead=0xc000197cec*=0x2c8, lpOverlapped=0x0) returned 1
	[0204.764] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0204.764] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215a02 | out: pbBuffer=0xc000215a02) returned 1
	[0204.764] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215a4d | out: pbBuffer=0xc000215a4d) returned 1
	[0204.764] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215aba | out: pbBuffer=0xc000215aba) returned 1
	[0204.764] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0204.765] GetFileType (hFile=0x17c) returned 0x1
	[0204.765] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=712) returned 1
	[0204.765] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001a0000*, nNumberOfBytesToWrite=0x2c8, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001a0000*, lpNumberOfBytesWritten=0xc000151ccc*=0x2c8, lpOverlapped=0xc000151ce8) returned 1
	[0204.765] GetFileType (hFile=0x17c) returned 0x1
	[0204.765] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2c8, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=712) returned 1
	[0204.766] GetFileType (hFile=0x17c) returned 0x1
	[0204.766] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=712) returned 1
	[0204.766] WriteFile (in: hFile=0x17c, lpBuffer=0xc00028b180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00028b180*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0204.766] GetFileType (hFile=0x17c) returned 0x1
	[0204.766] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2c8, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=712) returned 1
	[0204.767] CloseHandle (hObject=0x17c) returned 1
	[0204.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf.egmwv")) returned 0x20
	[0204.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.770] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x20
	[0204.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x20) returned 1
	[0204.789] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.824] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0204.824] ReadFile (in: hFile=0x168, lpBuffer=0xc0002c8000, nNumberOfBytesToRead=0x2708, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesRead=0xc000197cec*=0x2708, lpOverlapped=0x0) returned 1
	[0204.830] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0204.830] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052e9a | out: pbBuffer=0xc000052e9a) returned 1
	[0204.830] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002f4602 | out: pbBuffer=0xc0002f4602) returned 1
	[0204.830] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0204.830] GetFileType (hFile=0x168) returned 0x1
	[0204.830] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=9992) returned 1
	[0204.831] WriteFile (in: hFile=0x168, lpBuffer=0xc0002f0000*, nNumberOfBytesToWrite=0x2708, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesWritten=0xc000151ccc*=0x2708, lpOverlapped=0xc000151ce8) returned 1
	[0204.831] GetFileType (hFile=0x168) returned 0x1
	[0204.831] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2708, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=9992) returned 1
	[0204.831] GetFileType (hFile=0x168) returned 0x1
	[0204.832] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=9992) returned 1
	[0204.832] WriteFile (in: hFile=0x168, lpBuffer=0xc000304a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000304a80*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0204.832] GetFileType (hFile=0x168) returned 0x1
	[0204.832] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2708, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=9992) returned 1
	[0204.832] CloseHandle (hObject=0x168) returned 1
	[0204.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf.egmwv")) returned 0x20
	[0204.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.835] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.847] SetEvent (hEvent=0xc8) returned 1
	[0204.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x20
	[0204.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x20) returned 1
	[0204.848] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.878] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0204.879] ReadFile (in: hFile=0x168, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x8b2, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc00038dcec*=0x8b2, lpOverlapped=0x0) returned 1
	[0204.885] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053010 | out: pbBuffer=0xc000053010) returned 1
	[0204.885] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002f5302 | out: pbBuffer=0xc0002f5302) returned 1
	[0204.885] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053050 | out: pbBuffer=0xc000053050) returned 1
	[0204.885] GetFileType (hFile=0x168) returned 0x1
	[0204.886] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2226) returned 1
	[0204.886] WriteFile (in: hFile=0x168, lpBuffer=0xc000344000*, nNumberOfBytesToWrite=0x8b2, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000344000*, lpNumberOfBytesWritten=0xc000151ccc*=0x8b2, lpOverlapped=0xc000151ce8) returned 1
	[0204.886] GetFileType (hFile=0x168) returned 0x1
	[0204.886] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8b2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2226) returned 1
	[0204.886] GetFileType (hFile=0x168) returned 0x1
	[0204.887] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2226) returned 1
	[0204.887] WriteFile (in: hFile=0x168, lpBuffer=0xc000340380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000340380*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0204.887] GetFileType (hFile=0x168) returned 0x1
	[0204.887] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8b2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2226) returned 1
	[0204.888] CloseHandle (hObject=0x168) returned 1
	[0204.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf.egmwv")) returned 0x20
	[0204.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.891] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.894] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0204.895] SetEvent (hEvent=0xc8) returned 1
	[0204.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x20
	[0204.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x20) returned 1
	[0204.897] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.025] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0205.025] ReadFile (in: hFile=0x164, lpBuffer=0xc000345000, nNumberOfBytesToRead=0xe30, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000345000*, lpNumberOfBytesRead=0xc000193cec*=0xe30, lpOverlapped=0x0) returned 1
	[0205.031] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531b0 | out: pbBuffer=0xc0000531b0) returned 1
	[0205.031] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531ca | out: pbBuffer=0xc0000531ca) returned 1
	[0205.032] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001de302 | out: pbBuffer=0xc0001de302) returned 1
	[0205.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001de39e | out: pbBuffer=0xc0001de39e) returned 1
	[0205.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531f0 | out: pbBuffer=0xc0000531f0) returned 1
	[0205.032] GetFileType (hFile=0x164) returned 0x1
	[0205.032] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3632) returned 1
	[0205.033] WriteFile (in: hFile=0x164, lpBuffer=0xc0001f4000*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001f4000*, lpNumberOfBytesWritten=0xc000151ccc*=0xe30, lpOverlapped=0xc000151ce8) returned 1
	[0205.033] GetFileType (hFile=0x164) returned 0x1
	[0205.033] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe30, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3632) returned 1
	[0205.033] GetFileType (hFile=0x164) returned 0x1
	[0205.034] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3632) returned 1
	[0205.034] WriteFile (in: hFile=0x164, lpBuffer=0xc000341c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000341c00*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0205.034] GetFileType (hFile=0x164) returned 0x1
	[0205.035] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe30, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3632) returned 1
	[0205.035] CloseHandle (hObject=0x164) returned 1
	[0205.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf.egmwv")) returned 0x20
	[0205.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.039] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.045] SetEvent (hEvent=0xc8) returned 1
	[0205.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x20
	[0205.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x20) returned 1
	[0205.047] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.082] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0205.083] ReadFile (in: hFile=0x17c, lpBuffer=0xc000102c00, nNumberOfBytesToRead=0xadc, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000102c00*, lpNumberOfBytesRead=0xc000193cec*=0xadc, lpOverlapped=0x0) returned 1
	[0205.090] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004148f0 | out: pbBuffer=0xc0004148f0) returned 1
	[0205.090] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f8b02 | out: pbBuffer=0xc0001f8b02) returned 1
	[0205.090] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f8ba5 | out: pbBuffer=0xc0001f8ba5) returned 1
	[0205.090] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f8bb6 | out: pbBuffer=0xc0001f8bb6) returned 1
	[0205.090] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414930 | out: pbBuffer=0xc000414930) returned 1
	[0205.091] GetFileType (hFile=0x17c) returned 0x1
	[0205.091] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003cfca0*=2780) returned 1
	[0205.091] WriteFile (in: hFile=0x17c, lpBuffer=0xc00011e000*, nNumberOfBytesToWrite=0xadc, lpNumberOfBytesWritten=0xc0003cfccc, lpOverlapped=0xc0003cfce8 | out: lpBuffer=0xc00011e000*, lpNumberOfBytesWritten=0xc0003cfccc*=0xadc, lpOverlapped=0xc0003cfce8) returned 1
	[0205.091] GetFileType (hFile=0x17c) returned 0x1
	[0205.091] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xadc, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003cfca0*=2780) returned 1
	[0205.091] GetFileType (hFile=0x17c) returned 0x1
	[0205.092] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003cfca0*=2780) returned 1
	[0205.092] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003d3180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0003cfccc, lpOverlapped=0xc0003cfce8 | out: lpBuffer=0xc0003d3180*, lpNumberOfBytesWritten=0xc0003cfccc*=0x22d, lpOverlapped=0xc0003cfce8) returned 1
	[0205.092] GetFileType (hFile=0x17c) returned 0x1
	[0205.092] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xadc, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003cfca0*=2780) returned 1
	[0205.093] CloseHandle (hObject=0x17c) returned 1
	[0205.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf.egmwv")) returned 0x20
	[0205.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.104] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.120] SetEvent (hEvent=0xc8) returned 1
	[0205.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x20
	[0205.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x20) returned 1
	[0205.124] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.234] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0205.235] ReadFile (in: hFile=0x168, lpBuffer=0xc00021a000, nNumberOfBytesToRead=0xb90, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc00021a000*, lpNumberOfBytesRead=0xc000193cec*=0xb90, lpOverlapped=0x0) returned 1
	[0205.239] SetEvent (hEvent=0xc8) returned 1
	[0205.240] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0205.240] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039902 | out: pbBuffer=0xc000039902) returned 1
	[0205.240] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039974 | out: pbBuffer=0xc000039974) returned 1
	[0205.240] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003999f | out: pbBuffer=0xc00003999f) returned 1
	[0205.240] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000399aa | out: pbBuffer=0xc0000399aa) returned 1
	[0205.240] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0205.241] GetFileType (hFile=0x168) returned 0x1
	[0205.241] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003cbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003cbca0*=2960) returned 1
	[0205.241] WriteFile (in: hFile=0x168, lpBuffer=0xc000264000*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0xc0003cbccc, lpOverlapped=0xc0003cbce8 | out: lpBuffer=0xc000264000*, lpNumberOfBytesWritten=0xc0003cbccc*=0xb90, lpOverlapped=0xc0003cbce8) returned 1
	[0205.241] GetFileType (hFile=0x168) returned 0x1
	[0205.242] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb90, lpNewFilePointer=0xc0003cbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003cbca0*=2960) returned 1
	[0205.242] GetFileType (hFile=0x168) returned 0x1
	[0205.242] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003cbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003cbca0*=2960) returned 1
	[0205.242] WriteFile (in: hFile=0x168, lpBuffer=0xc00024d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003cbccc, lpOverlapped=0xc0003cbce8 | out: lpBuffer=0xc00024d500*, lpNumberOfBytesWritten=0xc0003cbccc*=0x227, lpOverlapped=0xc0003cbce8) returned 1
	[0205.242] GetFileType (hFile=0x168) returned 0x1
	[0205.242] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb90, lpNewFilePointer=0xc0003cbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003cbca0*=2960) returned 1
	[0205.243] CloseHandle (hObject=0x168) returned 1
	[0205.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf.egmwv")) returned 0x20
	[0205.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.248] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.248] SetEvent (hEvent=0xc8) returned 1
	[0205.249] SetEvent (hEvent=0xc0) returned 1
	[0205.249] SwitchToThread () returned 1
	[0205.250] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.260] SetEvent (hEvent=0xc0) returned 1
	[0205.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x20
	[0205.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x20) returned 1
	[0205.265] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.293] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.295] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0205.295] ReadFile (in: hFile=0x168, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x8fc, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc0002d5cec*=0x8fc, lpOverlapped=0x0) returned 1
	[0205.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0205.301] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0205.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0205.301] GetFileType (hFile=0x168) returned 0x1
	[0205.301] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2300) returned 1
	[0205.302] WriteFile (in: hFile=0x168, lpBuffer=0xc0000da000*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc0000da000*, lpNumberOfBytesWritten=0xc00022bccc*=0x8fc, lpOverlapped=0xc00022bce8) returned 1
	[0205.302] GetFileType (hFile=0x168) returned 0x1
	[0205.302] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8fc, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2300) returned 1
	[0205.302] GetFileType (hFile=0x168) returned 0x1
	[0205.303] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2300) returned 1
	[0205.303] WriteFile (in: hFile=0x168, lpBuffer=0xc000465500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc000465500*, lpNumberOfBytesWritten=0xc00022bccc*=0x22d, lpOverlapped=0xc00022bce8) returned 1
	[0205.303] GetFileType (hFile=0x168) returned 0x1
	[0205.303] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8fc, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2300) returned 1
	[0205.303] CloseHandle (hObject=0x168) returned 1
	[0205.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf.egmwv")) returned 0x20
	[0205.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.306] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.310] SetEvent (hEvent=0xc0) returned 1
	[0205.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x20
	[0205.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x20) returned 1
	[0205.312] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.344] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0205.345] ReadFile (in: hFile=0x164, lpBuffer=0xc000093b00, nNumberOfBytesToRead=0x820, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000093b00*, lpNumberOfBytesRead=0xc0002d5cec*=0x820, lpOverlapped=0x0) returned 1
	[0205.350] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6710 | out: pbBuffer=0xc0002b6710) returned 1
	[0205.350] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00006ed02 | out: pbBuffer=0xc00006ed02) returned 1
	[0205.351] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6750 | out: pbBuffer=0xc0002b6750) returned 1
	[0205.351] GetFileType (hFile=0x164) returned 0x1
	[0205.351] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.351] WriteFile (in: hFile=0x164, lpBuffer=0xc00042b000*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00042b000*, lpNumberOfBytesWritten=0xc000151ccc*=0x820, lpOverlapped=0xc000151ce8) returned 1
	[0205.352] GetFileType (hFile=0x164) returned 0x1
	[0205.352] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x820, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.352] GetFileType (hFile=0x164) returned 0x1
	[0205.352] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.352] WriteFile (in: hFile=0x164, lpBuffer=0xc000173880*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000173880*, lpNumberOfBytesWritten=0xc000151ccc*=0x21e, lpOverlapped=0xc000151ce8) returned 1
	[0205.353] GetFileType (hFile=0x164) returned 0x1
	[0205.353] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x820, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.353] CloseHandle (hObject=0x164) returned 1
	[0205.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf.egmwv")) returned 0x20
	[0205.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.358] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x20
	[0205.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x20) returned 1
	[0205.364] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.413] SetEvent (hEvent=0x70) returned 1
	[0205.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.414] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0205.414] ReadFile (in: hFile=0x17c, lpBuffer=0xc00039a000, nNumberOfBytesToRead=0x964, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00039a000*, lpNumberOfBytesRead=0xc0002d5cec*=0x964, lpOverlapped=0x0) returned 1
	[0205.420] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0205.420] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020646a | out: pbBuffer=0xc00020646a) returned 1
	[0205.420] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003e9802 | out: pbBuffer=0xc0003e9802) returned 1
	[0205.420] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003e98d1 | out: pbBuffer=0xc0003e98d1) returned 1
	[0205.420] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206490 | out: pbBuffer=0xc000206490) returned 1
	[0205.420] GetFileType (hFile=0x17c) returned 0x1
	[0205.421] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2404) returned 1
	[0205.421] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003c7000*, nNumberOfBytesToWrite=0x964, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0003c7000*, lpNumberOfBytesWritten=0xc000227ccc*=0x964, lpOverlapped=0xc000227ce8) returned 1
	[0205.421] GetFileType (hFile=0x17c) returned 0x1
	[0205.421] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x964, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2404) returned 1
	[0205.421] GetFileType (hFile=0x17c) returned 0x1
	[0205.421] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2404) returned 1
	[0205.422] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003ce700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0003ce700*, lpNumberOfBytesWritten=0xc000227ccc*=0x227, lpOverlapped=0xc000227ce8) returned 1
	[0205.422] GetFileType (hFile=0x17c) returned 0x1
	[0205.423] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x964, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2404) returned 1
	[0205.423] CloseHandle (hObject=0x17c) returned 1
	[0205.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf.egmwv")) returned 0x20
	[0205.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.427] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x20
	[0205.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x20) returned 1
	[0205.448] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.476] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0205.476] ReadFile (in: hFile=0x168, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0x70c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc00038dcec*=0x70c, lpOverlapped=0x0) returned 1
	[0205.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206750 | out: pbBuffer=0xc000206750) returned 1
	[0205.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020676a | out: pbBuffer=0xc00020676a) returned 1
	[0205.481] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00036af02 | out: pbBuffer=0xc00036af02) returned 1
	[0205.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206790 | out: pbBuffer=0xc000206790) returned 1
	[0205.482] GetFileType (hFile=0x168) returned 0x1
	[0205.482] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1804) returned 1
	[0205.482] WriteFile (in: hFile=0x168, lpBuffer=0xc0002b0000*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0002b0000*, lpNumberOfBytesWritten=0xc000227ccc*=0x70c, lpOverlapped=0xc000227ce8) returned 1
	[0205.482] GetFileType (hFile=0x168) returned 0x1
	[0205.482] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x70c, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1804) returned 1
	[0205.483] GetFileType (hFile=0x168) returned 0x1
	[0205.483] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1804) returned 1
	[0205.483] WriteFile (in: hFile=0x168, lpBuffer=0xc000375880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000375880*, lpNumberOfBytesWritten=0xc000227ccc*=0x227, lpOverlapped=0xc000227ce8) returned 1
	[0205.483] GetFileType (hFile=0x168) returned 0x1
	[0205.484] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x70c, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1804) returned 1
	[0205.484] CloseHandle (hObject=0x168) returned 1
	[0205.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf.egmwv")) returned 0x20
	[0205.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.487] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.490] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.501] SetEvent (hEvent=0xc0) returned 1
	[0205.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x20
	[0205.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x20) returned 1
	[0205.503] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.538] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0205.538] ReadFile (in: hFile=0x168, lpBuffer=0xc000270000, nNumberOfBytesToRead=0x7e8, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000270000*, lpNumberOfBytesRead=0xc000423cec*=0x7e8, lpOverlapped=0x0) returned 1
	[0205.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b80 | out: pbBuffer=0xc000052b80) returned 1
	[0205.544] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001702 | out: pbBuffer=0xc000001702) returned 1
	[0205.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bc0 | out: pbBuffer=0xc000052bc0) returned 1
	[0205.544] GetFileType (hFile=0x168) returned 0x1
	[0205.544] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003b1ca0*=2024) returned 1
	[0205.545] WriteFile (in: hFile=0x168, lpBuffer=0xc0000b1000*, nNumberOfBytesToWrite=0x7e8, lpNumberOfBytesWritten=0xc0003b1ccc, lpOverlapped=0xc0003b1ce8 | out: lpBuffer=0xc0000b1000*, lpNumberOfBytesWritten=0xc0003b1ccc*=0x7e8, lpOverlapped=0xc0003b1ce8) returned 1
	[0205.545] GetFileType (hFile=0x168) returned 0x1
	[0205.545] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x7e8, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003b1ca0*=2024) returned 1
	[0205.545] GetFileType (hFile=0x168) returned 0x1
	[0205.545] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003b1ca0*=2024) returned 1
	[0205.546] WriteFile (in: hFile=0x168, lpBuffer=0xc0003b9500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0003b1ccc, lpOverlapped=0xc0003b1ce8 | out: lpBuffer=0xc0003b9500*, lpNumberOfBytesWritten=0xc0003b1ccc*=0x22d, lpOverlapped=0xc0003b1ce8) returned 1
	[0205.546] GetFileType (hFile=0x168) returned 0x1
	[0205.546] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x7e8, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003b1ca0*=2024) returned 1
	[0205.546] CloseHandle (hObject=0x168) returned 1
	[0205.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf.egmwv")) returned 0x20
	[0205.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.549] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.553] SetEvent (hEvent=0xc0) returned 1
	[0205.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x20
	[0205.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x20) returned 1
	[0205.555] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.593] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0205.593] ReadFile (in: hFile=0x164, lpBuffer=0xc000473000, nNumberOfBytesToRead=0xbb4, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000473000*, lpNumberOfBytesRead=0xc000423cec*=0xbb4, lpOverlapped=0x0) returned 1
	[0205.599] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206d70 | out: pbBuffer=0xc000206d70) returned 1
	[0205.599] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000bbc02 | out: pbBuffer=0xc0000bbc02) returned 1
	[0205.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206db0 | out: pbBuffer=0xc000206db0) returned 1
	[0205.600] GetFileType (hFile=0x164) returned 0x1
	[0205.600] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2996) returned 1
	[0205.600] WriteFile (in: hFile=0x164, lpBuffer=0xc000412000*, nNumberOfBytesToWrite=0xbb4, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000412000*, lpNumberOfBytesWritten=0xc000227ccc*=0xbb4, lpOverlapped=0xc000227ce8) returned 1
	[0205.600] GetFileType (hFile=0x164) returned 0x1
	[0205.601] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xbb4, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2996) returned 1
	[0205.601] GetFileType (hFile=0x164) returned 0x1
	[0205.601] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2996) returned 1
	[0205.601] WriteFile (in: hFile=0x164, lpBuffer=0xc0003ffc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0003ffc00*, lpNumberOfBytesWritten=0xc000227ccc*=0x22d, lpOverlapped=0xc000227ce8) returned 1
	[0205.601] GetFileType (hFile=0x164) returned 0x1
	[0205.602] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xbb4, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2996) returned 1
	[0205.602] CloseHandle (hObject=0x164) returned 1
	[0205.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf.egmwv")) returned 0x20
	[0205.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.609] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x20
	[0205.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x20) returned 1
	[0205.616] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.656] SetEvent (hEvent=0x70) returned 1
	[0205.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.658] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0205.658] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000b5c00, nNumberOfBytesToRead=0x6e8, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000b5c00*, lpNumberOfBytesRead=0xc00038dcec*=0x6e8, lpOverlapped=0x0) returned 1
	[0205.663] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206f00 | out: pbBuffer=0xc000206f00) returned 1
	[0205.663] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043ab02 | out: pbBuffer=0xc00043ab02) returned 1
	[0205.664] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206f40 | out: pbBuffer=0xc000206f40) returned 1
	[0205.664] GetFileType (hFile=0x17c) returned 0x1
	[0205.664] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1768) returned 1
	[0205.664] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000e2000*, nNumberOfBytesToWrite=0x6e8, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesWritten=0xc000227ccc*=0x6e8, lpOverlapped=0xc000227ce8) returned 1
	[0205.664] GetFileType (hFile=0x17c) returned 0x1
	[0205.665] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x6e8, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1768) returned 1
	[0205.665] GetFileType (hFile=0x17c) returned 0x1
	[0205.665] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1768) returned 1
	[0205.665] WriteFile (in: hFile=0x17c, lpBuffer=0xc000127500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000127500*, lpNumberOfBytesWritten=0xc000227ccc*=0x22a, lpOverlapped=0xc000227ce8) returned 1
	[0205.665] GetFileType (hFile=0x17c) returned 0x1
	[0205.665] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x6e8, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1768) returned 1
	[0205.665] CloseHandle (hObject=0x17c) returned 1
	[0205.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf.egmwv")) returned 0x20
	[0205.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.669] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x20
	[0205.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x20) returned 1
	[0205.683] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.710] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0205.710] ReadFile (in: hFile=0x168, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x914, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc0002d5cec*=0x914, lpOverlapped=0x0) returned 1
	[0205.716] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0205.716] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0205.716] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001d2802 | out: pbBuffer=0xc0001d2802) returned 1
	[0205.716] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d2853 | out: pbBuffer=0xc0001d2853) returned 1
	[0205.717] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d2869 | out: pbBuffer=0xc0001d2869) returned 1
	[0205.717] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d28be | out: pbBuffer=0xc0001d28be) returned 1
	[0205.717] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0205.717] GetFileType (hFile=0x168) returned 0x1
	[0205.717] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003b1ca0*=2324) returned 1
	[0205.717] WriteFile (in: hFile=0x168, lpBuffer=0xc0001e6000*, nNumberOfBytesToWrite=0x914, lpNumberOfBytesWritten=0xc0003b1ccc, lpOverlapped=0xc0003b1ce8 | out: lpBuffer=0xc0001e6000*, lpNumberOfBytesWritten=0xc0003b1ccc*=0x914, lpOverlapped=0xc0003b1ce8) returned 1
	[0205.719] GetFileType (hFile=0x168) returned 0x1
	[0205.719] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x914, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003b1ca0*=2324) returned 1
	[0205.719] GetFileType (hFile=0x168) returned 0x1
	[0205.719] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003b1ca0*=2324) returned 1
	[0205.719] WriteFile (in: hFile=0x168, lpBuffer=0xc0001dce00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0003b1ccc, lpOverlapped=0xc0003b1ce8 | out: lpBuffer=0xc0001dce00*, lpNumberOfBytesWritten=0xc0003b1ccc*=0x224, lpOverlapped=0xc0003b1ce8) returned 1
	[0205.720] GetFileType (hFile=0x168) returned 0x1
	[0205.720] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x914, lpNewFilePointer=0xc0003b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003b1ca0*=2324) returned 1
	[0205.720] CloseHandle (hObject=0x168) returned 1
	[0205.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf.egmwv")) returned 0x20
	[0205.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.723] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.726] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.734] SetEvent (hEvent=0xc0) returned 1
	[0205.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x20
	[0205.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x20) returned 1
	[0205.742] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.821] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0205.821] ReadFile (in: hFile=0x17c, lpBuffer=0xc000248000, nNumberOfBytesToRead=0x128, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000248000*, lpNumberOfBytesRead=0xc0002d5cec*=0x128, lpOverlapped=0x0) returned 1
	[0205.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414100 | out: pbBuffer=0xc000414100) returned 1
	[0205.825] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0205.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039368 | out: pbBuffer=0xc000039368) returned 1
	[0205.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003938b | out: pbBuffer=0xc00003938b) returned 1
	[0205.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000393b2 | out: pbBuffer=0xc0000393b2) returned 1
	[0205.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414140 | out: pbBuffer=0xc000414140) returned 1
	[0205.825] GetFileType (hFile=0x17c) returned 0x1
	[0205.825] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=296) returned 1
	[0205.826] WriteFile (in: hFile=0x17c, lpBuffer=0xc000114600*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000114600*, lpNumberOfBytesWritten=0xc000155ccc*=0x128, lpOverlapped=0xc000155ce8) returned 1
	[0205.826] GetFileType (hFile=0x17c) returned 0x1
	[0205.826] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x128, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=296) returned 1
	[0205.826] GetFileType (hFile=0x17c) returned 0x1
	[0205.827] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=296) returned 1
	[0205.827] WriteFile (in: hFile=0x17c, lpBuffer=0xc000112700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000112700*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0205.827] GetFileType (hFile=0x17c) returned 0x1
	[0205.827] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x128, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=296) returned 1
	[0205.827] CloseHandle (hObject=0x17c) returned 1
	[0205.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf.egmwv")) returned 0x20
	[0205.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.831] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.842] SetEvent (hEvent=0xc8) returned 1
	[0205.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x20
	[0205.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x20) returned 1
	[0205.843] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.869] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0205.869] ReadFile (in: hFile=0x17c, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x8fc, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000389cec*=0x8fc, lpOverlapped=0x0) returned 1
	[0205.875] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0205.875] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0205.875] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002159d0 | out: pbBuffer=0xc0002159d0) returned 1
	[0205.875] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0205.875] GetFileType (hFile=0x17c) returned 0x1
	[0205.875] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2300) returned 1
	[0205.876] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004a6000*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0004a6000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x8fc, lpOverlapped=0xc0001a1ce8) returned 1
	[0205.876] GetFileType (hFile=0x17c) returned 0x1
	[0205.876] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x8fc, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2300) returned 1
	[0205.876] GetFileType (hFile=0x17c) returned 0x1
	[0205.876] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2300) returned 1
	[0205.877] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004a0e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0004a0e00*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22d, lpOverlapped=0xc0001a1ce8) returned 1
	[0205.877] GetFileType (hFile=0x17c) returned 0x1
	[0205.877] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x8fc, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2300) returned 1
	[0205.877] CloseHandle (hObject=0x17c) returned 1
	[0205.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf.egmwv")) returned 0x20
	[0205.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.883] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x20
	[0205.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x20) returned 1
	[0205.891] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.927] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0205.927] ReadFile (in: hFile=0x168, lpBuffer=0xc000356000, nNumberOfBytesToRead=0x566, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000356000*, lpNumberOfBytesRead=0xc000197cec*=0x566, lpOverlapped=0x0) returned 1
	[0205.933] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0205.933] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eda | out: pbBuffer=0xc000052eda) returned 1
	[0205.933] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001d2702 | out: pbBuffer=0xc0001d2702) returned 1
	[0205.933] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d2793 | out: pbBuffer=0xc0001d2793) returned 1
	[0205.933] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052f00 | out: pbBuffer=0xc000052f00) returned 1
	[0205.933] GetFileType (hFile=0x168) returned 0x1
	[0205.933] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1382) returned 1
	[0205.933] WriteFile (in: hFile=0x168, lpBuffer=0xc000361000*, nNumberOfBytesToWrite=0x566, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000361000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x566, lpOverlapped=0xc0001a1ce8) returned 1
	[0205.934] GetFileType (hFile=0x168) returned 0x1
	[0205.934] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x566, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1382) returned 1
	[0205.934] GetFileType (hFile=0x168) returned 0x1
	[0205.934] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1382) returned 1
	[0205.934] WriteFile (in: hFile=0x168, lpBuffer=0xc000394700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000394700*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22a, lpOverlapped=0xc0001a1ce8) returned 1
	[0205.934] GetFileType (hFile=0x168) returned 0x1
	[0205.935] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x566, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1382) returned 1
	[0205.935] CloseHandle (hObject=0x168) returned 1
	[0205.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf.egmwv")) returned 0x20
	[0205.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.940] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0205.955] SetEvent (hEvent=0xc8) returned 1
	[0205.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x20
	[0205.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x20) returned 1
	[0205.964] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.995] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0205.996] ReadFile (in: hFile=0x164, lpBuffer=0xc000138000, nNumberOfBytesToRead=0x1b2e, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000138000*, lpNumberOfBytesRead=0xc000197cec*=0x1b2e, lpOverlapped=0x0) returned 1
	[0206.001] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053050 | out: pbBuffer=0xc000053050) returned 1
	[0206.001] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001d3602 | out: pbBuffer=0xc0001d3602) returned 1
	[0206.002] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053090 | out: pbBuffer=0xc000053090) returned 1
	[0206.002] GetFileType (hFile=0x164) returned 0x1
	[0206.002] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=6958) returned 1
	[0206.002] WriteFile (in: hFile=0x164, lpBuffer=0xc0000e8000*, nNumberOfBytesToWrite=0x1b2e, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0000e8000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x1b2e, lpOverlapped=0xc0001a1ce8) returned 1
	[0206.003] GetFileType (hFile=0x164) returned 0x1
	[0206.003] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1b2e, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=6958) returned 1
	[0206.003] GetFileType (hFile=0x164) returned 0x1
	[0206.003] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=6958) returned 1
	[0206.003] WriteFile (in: hFile=0x164, lpBuffer=0xc00014a000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00014a000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x230, lpOverlapped=0xc0001a1ce8) returned 1
	[0206.004] GetFileType (hFile=0x164) returned 0x1
	[0206.004] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1b2e, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=6958) returned 1
	[0206.004] CloseHandle (hObject=0x164) returned 1
	[0206.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf.egmwv")) returned 0x20
	[0206.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.007] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.021] SetEvent (hEvent=0xc8) returned 1
	[0206.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf")) returned 0x20
	[0206.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x20) returned 1
	[0206.024] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.054] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.054] ReadFile (in: hFile=0x164, lpBuffer=0xc0000b8000, nNumberOfBytesToRead=0x3044, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000b8000*, lpNumberOfBytesRead=0xc000387cec*=0x3044, lpOverlapped=0x0) returned 1
	[0206.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414410 | out: pbBuffer=0xc000414410) returned 1
	[0206.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041442a | out: pbBuffer=0xc00041442a) returned 1
	[0206.061] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1102 | out: pbBuffer=0xc0002c1102) returned 1
	[0206.062] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0206.062] GetFileType (hFile=0x164) returned 0x1
	[0206.062] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12356) returned 1
	[0206.062] WriteFile (in: hFile=0x164, lpBuffer=0xc000438000*, nNumberOfBytesToWrite=0x3044, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000438000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3044, lpOverlapped=0xc000155ce8) returned 1
	[0206.062] GetFileType (hFile=0x164) returned 0x1
	[0206.062] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3044, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12356) returned 1
	[0206.063] GetFileType (hFile=0x164) returned 0x1
	[0206.063] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12356) returned 1
	[0206.063] WriteFile (in: hFile=0x164, lpBuffer=0xc0001cf880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001cf880*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0206.063] GetFileType (hFile=0x164) returned 0x1
	[0206.063] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3044, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12356) returned 1
	[0206.063] CloseHandle (hObject=0x164) returned 1
	[0206.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf.egmwv")) returned 0x20
	[0206.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.065] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.069] SetEvent (hEvent=0xc8) returned 1
	[0206.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf")) returned 0x20
	[0206.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x20) returned 1
	[0206.071] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.105] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.105] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc000387cec*=0x2e0, lpOverlapped=0x0) returned 1
	[0206.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6760 | out: pbBuffer=0xc0002b6760) returned 1
	[0206.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b677a | out: pbBuffer=0xc0002b677a) returned 1
	[0206.111] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000413c02 | out: pbBuffer=0xc000413c02) returned 1
	[0206.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000413c46 | out: pbBuffer=0xc000413c46) returned 1
	[0206.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67a0 | out: pbBuffer=0xc0002b67a0) returned 1
	[0206.111] GetFileType (hFile=0x17c) returned 0x1
	[0206.111] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=736) returned 1
	[0206.112] WriteFile (in: hFile=0x17c, lpBuffer=0xc000220000*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000220000*, lpNumberOfBytesWritten=0xc000151ccc*=0x2e0, lpOverlapped=0xc000151ce8) returned 1
	[0206.112] GetFileType (hFile=0x17c) returned 0x1
	[0206.112] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2e0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=736) returned 1
	[0206.112] GetFileType (hFile=0x17c) returned 0x1
	[0206.112] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=736) returned 1
	[0206.113] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001e9880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001e9880*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0206.113] GetFileType (hFile=0x17c) returned 0x1
	[0206.113] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2e0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=736) returned 1
	[0206.113] CloseHandle (hObject=0x17c) returned 1
	[0206.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf.egmwv")) returned 0x20
	[0206.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.118] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid")) returned 0x20
	[0206.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x20) returned 1
	[0206.126] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0206.183] SetEvent (hEvent=0x70) returned 1
	[0206.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.184] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0206.184] SetEvent (hEvent=0x150) returned 1
	[0206.184] ReadFile (in: hFile=0x168, lpBuffer=0xc0002fe000, nNumberOfBytesToRead=0x2942, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesRead=0xc0002d7cec*=0x2942, lpOverlapped=0x0) returned 1
	[0206.190] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414740 | out: pbBuffer=0xc000414740) returned 1
	[0206.190] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003cea02 | out: pbBuffer=0xc0003cea02) returned 1
	[0206.190] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414780 | out: pbBuffer=0xc000414780) returned 1
	[0206.190] GetFileType (hFile=0x168) returned 0x1
	[0206.190] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10562) returned 1
	[0206.190] WriteFile (in: hFile=0x168, lpBuffer=0xc0004bc000*, nNumberOfBytesToWrite=0x2942, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004bc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2942, lpOverlapped=0xc000155ce8) returned 1
	[0206.191] GetFileType (hFile=0x168) returned 0x1
	[0206.191] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2942, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10562) returned 1
	[0206.191] GetFileType (hFile=0x168) returned 0x1
	[0206.191] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10562) returned 1
	[0206.191] WriteFile (in: hFile=0x168, lpBuffer=0xc000318a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000318a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0206.192] GetFileType (hFile=0x168) returned 0x1
	[0206.192] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2942, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10562) returned 1
	[0206.192] CloseHandle (hObject=0x168) returned 1
	[0206.193] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid.egmwv")) returned 0x20
	[0206.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0206.215] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.223] SetEvent (hEvent=0x60) returned 1
	[0206.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x20
	[0206.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x20) returned 1
	[0206.228] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.249] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.249] ReadFile (in: hFile=0x164, lpBuffer=0xc0004ac000, nNumberOfBytesToRead=0x2eda, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesRead=0xc000389cec*=0x2eda, lpOverlapped=0x0) returned 1
	[0206.254] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0206.254] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0206.254] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0206.254] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d35 | out: pbBuffer=0xc0002c0d35) returned 1
	[0206.254] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0206.255] GetFileType (hFile=0x164) returned 0x1
	[0206.255] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026fca0*=11994) returned 1
	[0206.255] WriteFile (in: hFile=0x164, lpBuffer=0xc000306000*, nNumberOfBytesToWrite=0x2eda, lpNumberOfBytesWritten=0xc00026fccc, lpOverlapped=0xc00026fce8 | out: lpBuffer=0xc000306000*, lpNumberOfBytesWritten=0xc00026fccc*=0x2eda, lpOverlapped=0xc00026fce8) returned 1
	[0206.256] GetFileType (hFile=0x164) returned 0x1
	[0206.256] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2eda, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026fca0*=11994) returned 1
	[0206.256] GetFileType (hFile=0x164) returned 0x1
	[0206.256] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026fca0*=11994) returned 1
	[0206.256] WriteFile (in: hFile=0x164, lpBuffer=0xc00041f500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00026fccc, lpOverlapped=0xc00026fce8 | out: lpBuffer=0xc00041f500*, lpNumberOfBytesWritten=0xc00026fccc*=0x233, lpOverlapped=0xc00026fce8) returned 1
	[0206.257] GetFileType (hFile=0x164) returned 0x1
	[0206.257] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2eda, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026fca0*=11994) returned 1
	[0206.257] CloseHandle (hObject=0x164) returned 1
	[0206.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf.egmwv")) returned 0x20
	[0206.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.261] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x20
	[0206.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x20) returned 1
	[0206.268] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.301] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0206.302] ReadFile (in: hFile=0x168, lpBuffer=0xc00038e000, nNumberOfBytesToRead=0x3772, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00038e000*, lpNumberOfBytesRead=0xc00038dcec*=0x3772, lpOverlapped=0x0) returned 1
	[0206.307] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0206.307] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0206.308] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0206.308] GetFileType (hFile=0x168) returned 0x1
	[0206.308] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026fca0*=14194) returned 1
	[0206.308] WriteFile (in: hFile=0x168, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x3772, lpNumberOfBytesWritten=0xc00026fccc, lpOverlapped=0xc00026fce8 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc00026fccc*=0x3772, lpOverlapped=0xc00026fce8) returned 1
	[0206.308] GetFileType (hFile=0x168) returned 0x1
	[0206.309] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x3772, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026fca0*=14194) returned 1
	[0206.309] GetFileType (hFile=0x168) returned 0x1
	[0206.309] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026fca0*=14194) returned 1
	[0206.309] WriteFile (in: hFile=0x168, lpBuffer=0xc0000fee00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00026fccc, lpOverlapped=0xc00026fce8 | out: lpBuffer=0xc0000fee00*, lpNumberOfBytesWritten=0xc00026fccc*=0x233, lpOverlapped=0xc00026fce8) returned 1
	[0206.309] GetFileType (hFile=0x168) returned 0x1
	[0206.309] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x3772, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026fca0*=14194) returned 1
	[0206.310] CloseHandle (hObject=0x168) returned 1
	[0206.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf.egmwv")) returned 0x20
	[0206.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.314] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x20
	[0206.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x20) returned 1
	[0206.331] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.365] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0206.365] ReadFile (in: hFile=0x164, lpBuffer=0xc00027b000, nNumberOfBytesToRead=0x4712, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00027b000*, lpNumberOfBytesRead=0xc00038dcec*=0x4712, lpOverlapped=0x0) returned 1
	[0206.370] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0206.370] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052e9a | out: pbBuffer=0xc000052e9a) returned 1
	[0206.370] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000270602 | out: pbBuffer=0xc000270602) returned 1
	[0206.370] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0206.370] GetFileType (hFile=0x164) returned 0x1
	[0206.371] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026bca0*=18194) returned 1
	[0206.371] WriteFile (in: hFile=0x164, lpBuffer=0xc0002e8000*, nNumberOfBytesToWrite=0x4712, lpNumberOfBytesWritten=0xc00026bccc, lpOverlapped=0xc00026bce8 | out: lpBuffer=0xc0002e8000*, lpNumberOfBytesWritten=0xc00026bccc*=0x4712, lpOverlapped=0xc00026bce8) returned 1
	[0206.371] GetFileType (hFile=0x164) returned 0x1
	[0206.371] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4712, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026bca0*=18194) returned 1
	[0206.371] GetFileType (hFile=0x164) returned 0x1
	[0206.371] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026bca0*=18194) returned 1
	[0206.372] WriteFile (in: hFile=0x164, lpBuffer=0xc0001b6700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00026bccc, lpOverlapped=0xc00026bce8 | out: lpBuffer=0xc0001b6700*, lpNumberOfBytesWritten=0xc00026bccc*=0x22a, lpOverlapped=0xc00026bce8) returned 1
	[0206.372] GetFileType (hFile=0x164) returned 0x1
	[0206.372] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4712, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026bca0*=18194) returned 1
	[0206.372] CloseHandle (hObject=0x164) returned 1
	[0206.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf.egmwv")) returned 0x20
	[0206.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.374] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.381] SetEvent (hEvent=0x60) returned 1
	[0206.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x20
	[0206.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x20) returned 1
	[0206.388] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.415] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0206.415] ReadFile (in: hFile=0x168, lpBuffer=0xc00016e000, nNumberOfBytesToRead=0xfea, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesRead=0xc000199cec*=0xfea, lpOverlapped=0x0) returned 1
	[0206.430] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0206.430] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0206.430] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d5a | out: pbBuffer=0xc000214d5a) returned 1
	[0206.430] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0206.430] GetFileType (hFile=0x168) returned 0x1
	[0206.430] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4074) returned 1
	[0206.430] WriteFile (in: hFile=0x168, lpBuffer=0xc00018e000*, nNumberOfBytesToWrite=0xfea, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesWritten=0xc000155ccc*=0xfea, lpOverlapped=0xc000155ce8) returned 1
	[0206.431] GetFileType (hFile=0x168) returned 0x1
	[0206.431] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xfea, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4074) returned 1
	[0206.431] GetFileType (hFile=0x168) returned 0x1
	[0206.431] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4074) returned 1
	[0206.431] WriteFile (in: hFile=0x168, lpBuffer=0xc000190000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000190000*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0206.432] GetFileType (hFile=0x168) returned 0x1
	[0206.432] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xfea, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4074) returned 1
	[0206.432] CloseHandle (hObject=0x168) returned 1
	[0206.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf.egmwv")) returned 0x20
	[0206.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.436] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.440] SetEvent (hEvent=0xe4) returned 1
	[0206.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x20
	[0206.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x20) returned 1
	[0206.441] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.470] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0206.470] ReadFile (in: hFile=0x17c, lpBuffer=0xc0002fe000, nNumberOfBytesToRead=0x2a40, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesRead=0xc000199cec*=0x2a40, lpOverlapped=0x0) returned 1
	[0206.476] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414100 | out: pbBuffer=0xc000414100) returned 1
	[0206.476] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041411a | out: pbBuffer=0xc00041411a) returned 1
	[0206.476] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043ec02 | out: pbBuffer=0xc00043ec02) returned 1
	[0206.476] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043ec6b | out: pbBuffer=0xc00043ec6b) returned 1
	[0206.476] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414140 | out: pbBuffer=0xc000414140) returned 1
	[0206.476] GetFileType (hFile=0x17c) returned 0x1
	[0206.477] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=10816) returned 1
	[0206.477] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003e6000*, nNumberOfBytesToWrite=0x2a40, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesWritten=0xc000411ccc*=0x2a40, lpOverlapped=0xc000411ce8) returned 1
	[0206.477] GetFileType (hFile=0x17c) returned 0x1
	[0206.477] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2a40, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=10816) returned 1
	[0206.478] GetFileType (hFile=0x17c) returned 0x1
	[0206.478] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=10816) returned 1
	[0206.478] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002d1500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0002d1500*, lpNumberOfBytesWritten=0xc000411ccc*=0x224, lpOverlapped=0xc000411ce8) returned 1
	[0206.478] GetFileType (hFile=0x17c) returned 0x1
	[0206.478] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2a40, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=10816) returned 1
	[0206.478] CloseHandle (hObject=0x17c) returned 1
	[0206.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf.egmwv")) returned 0x20
	[0206.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.483] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x20
	[0206.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x20) returned 1
	[0206.490] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.525] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0206.525] ReadFile (in: hFile=0x168, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x400c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc0002d7cec*=0x400c, lpOverlapped=0x0) returned 1
	[0206.531] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414280 | out: pbBuffer=0xc000414280) returned 1
	[0206.531] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043fc02 | out: pbBuffer=0xc00043fc02) returned 1
	[0206.531] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142c0 | out: pbBuffer=0xc0004142c0) returned 1
	[0206.532] GetFileType (hFile=0x168) returned 0x1
	[0206.532] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=16396) returned 1
	[0206.532] WriteFile (in: hFile=0x168, lpBuffer=0xc0001ba000*, nNumberOfBytesToWrite=0x400c, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesWritten=0xc000411ccc*=0x400c, lpOverlapped=0xc000411ce8) returned 1
	[0206.532] GetFileType (hFile=0x168) returned 0x1
	[0206.533] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x400c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=16396) returned 1
	[0206.533] GetFileType (hFile=0x168) returned 0x1
	[0206.533] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=16396) returned 1
	[0206.533] WriteFile (in: hFile=0x168, lpBuffer=0xc0001ace00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0001ace00*, lpNumberOfBytesWritten=0xc000411ccc*=0x221, lpOverlapped=0xc000411ce8) returned 1
	[0206.533] GetFileType (hFile=0x168) returned 0x1
	[0206.533] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x400c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=16396) returned 1
	[0206.533] CloseHandle (hObject=0x168) returned 1
	[0206.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf.egmwv")) returned 0x20
	[0206.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.539] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.555] SetEvent (hEvent=0xe4) returned 1
	[0206.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x20
	[0206.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x20) returned 1
	[0206.557] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.586] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0206.586] ReadFile (in: hFile=0x164, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x13ea, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000193cec*=0x13ea, lpOverlapped=0x0) returned 1
	[0206.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002067e0 | out: pbBuffer=0xc0002067e0) returned 1
	[0206.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002067fa | out: pbBuffer=0xc0002067fa) returned 1
	[0206.592] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00030ea02 | out: pbBuffer=0xc00030ea02) returned 1
	[0206.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00030ea97 | out: pbBuffer=0xc00030ea97) returned 1
	[0206.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00030eab3 | out: pbBuffer=0xc00030eab3) returned 1
	[0206.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206820 | out: pbBuffer=0xc000206820) returned 1
	[0206.592] GetFileType (hFile=0x164) returned 0x1
	[0206.592] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=5098) returned 1
	[0206.593] WriteFile (in: hFile=0x164, lpBuffer=0xc000312000*, nNumberOfBytesToWrite=0x13ea, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000312000*, lpNumberOfBytesWritten=0xc00040dccc*=0x13ea, lpOverlapped=0xc00040dce8) returned 1
	[0206.593] GetFileType (hFile=0x164) returned 0x1
	[0206.593] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x13ea, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=5098) returned 1
	[0206.593] GetFileType (hFile=0x164) returned 0x1
	[0206.594] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=5098) returned 1
	[0206.594] WriteFile (in: hFile=0x164, lpBuffer=0xc000259880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000259880*, lpNumberOfBytesWritten=0xc00040dccc*=0x230, lpOverlapped=0xc00040dce8) returned 1
	[0206.594] GetFileType (hFile=0x164) returned 0x1
	[0206.594] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x13ea, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=5098) returned 1
	[0206.594] CloseHandle (hObject=0x164) returned 1
	[0206.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf.egmwv")) returned 0x20
	[0206.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.597] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.612] SetEvent (hEvent=0xe4) returned 1
	[0206.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x20
	[0206.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x20) returned 1
	[0206.617] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.643] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0206.643] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0x5c0, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc0002d7cec*=0x5c0, lpOverlapped=0x0) returned 1
	[0206.649] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0206.649] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00032c902 | out: pbBuffer=0xc00032c902) returned 1
	[0206.649] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00032c960 | out: pbBuffer=0xc00032c960) returned 1
	[0206.649] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6490 | out: pbBuffer=0xc0002b6490) returned 1
	[0206.649] GetFileType (hFile=0x17c) returned 0x1
	[0206.650] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1472) returned 1
	[0206.650] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000f4000*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5c0, lpOverlapped=0xc000155ce8) returned 1
	[0206.650] GetFileType (hFile=0x17c) returned 0x1
	[0206.650] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5c0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1472) returned 1
	[0206.650] GetFileType (hFile=0x17c) returned 0x1
	[0206.650] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1472) returned 1
	[0206.651] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000e9180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000e9180*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0206.651] GetFileType (hFile=0x17c) returned 0x1
	[0206.651] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5c0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1472) returned 1
	[0206.651] CloseHandle (hObject=0x17c) returned 1
	[0206.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf.egmwv")) returned 0x20
	[0206.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.654] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.659] SetEvent (hEvent=0xe4) returned 1
	[0206.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x20
	[0206.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x20) returned 1
	[0206.661] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.698] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0206.699] ReadFile (in: hFile=0x164, lpBuffer=0xc0003ba000, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ba000*, lpNumberOfBytesRead=0xc0002d7cec*=0x2f0, lpOverlapped=0x0) returned 1
	[0206.704] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053000 | out: pbBuffer=0xc000053000) returned 1
	[0206.704] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003a5302 | out: pbBuffer=0xc0003a5302) returned 1
	[0206.705] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053040 | out: pbBuffer=0xc000053040) returned 1
	[0206.705] GetFileType (hFile=0x164) returned 0x1
	[0206.705] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=752) returned 1
	[0206.705] WriteFile (in: hFile=0x164, lpBuffer=0xc0003c1000*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc0003c1000*, lpNumberOfBytesWritten=0xc00021fccc*=0x2f0, lpOverlapped=0xc00021fce8) returned 1
	[0206.705] GetFileType (hFile=0x164) returned 0x1
	[0206.706] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2f0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=752) returned 1
	[0206.706] GetFileType (hFile=0x164) returned 0x1
	[0206.706] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=752) returned 1
	[0206.706] WriteFile (in: hFile=0x164, lpBuffer=0xc0003c8380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc0003c8380*, lpNumberOfBytesWritten=0xc00021fccc*=0x227, lpOverlapped=0xc00021fce8) returned 1
	[0206.706] GetFileType (hFile=0x164) returned 0x1
	[0206.707] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2f0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=752) returned 1
	[0206.707] CloseHandle (hObject=0x164) returned 1
	[0206.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf.egmwv")) returned 0x20
	[0206.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.711] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x20
	[0206.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x20) returned 1
	[0206.719] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.766] SetEvent (hEvent=0x70) returned 1
	[0206.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.767] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0206.767] ReadFile (in: hFile=0x168, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x3690, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc0002d7cec*=0x3690, lpOverlapped=0x0) returned 1
	[0206.773] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6100 | out: pbBuffer=0xc0002b6100) returned 1
	[0206.773] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b611a | out: pbBuffer=0xc0002b611a) returned 1
	[0206.773] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0206.773] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0906 | out: pbBuffer=0xc0002c0906) returned 1
	[0206.773] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c09b4 | out: pbBuffer=0xc0002c09b4) returned 1
	[0206.773] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6140 | out: pbBuffer=0xc0002b6140) returned 1
	[0206.773] GetFileType (hFile=0x168) returned 0x1
	[0206.774] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=13968) returned 1
	[0206.774] WriteFile (in: hFile=0x168, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3690, lpOverlapped=0xc000155ce8) returned 1
	[0206.774] GetFileType (hFile=0x168) returned 0x1
	[0206.774] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x3690, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=13968) returned 1
	[0206.774] GetFileType (hFile=0x168) returned 0x1
	[0206.775] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=13968) returned 1
	[0206.775] WriteFile (in: hFile=0x168, lpBuffer=0xc000113880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000113880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0206.775] GetFileType (hFile=0x168) returned 0x1
	[0206.775] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x3690, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=13968) returned 1
	[0206.775] CloseHandle (hObject=0x168) returned 1
	[0206.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf.egmwv")) returned 0x20
	[0206.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.779] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.787] SetEvent (hEvent=0x150) returned 1
	[0206.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x20
	[0206.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x20) returned 1
	[0206.794] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.824] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0206.824] ReadFile (in: hFile=0x164, lpBuffer=0xc000430000, nNumberOfBytesToRead=0x121a, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000430000*, lpNumberOfBytesRead=0xc0002d5cec*=0x121a, lpOverlapped=0x0) returned 1
	[0206.830] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0206.830] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62aa | out: pbBuffer=0xc0002b62aa) returned 1
	[0206.830] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1702 | out: pbBuffer=0xc0002c1702) returned 1
	[0206.831] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0206.831] GetFileType (hFile=0x164) returned 0x1
	[0206.831] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4634) returned 1
	[0206.831] WriteFile (in: hFile=0x164, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x121a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc000155ccc*=0x121a, lpOverlapped=0xc000155ce8) returned 1
	[0206.831] GetFileType (hFile=0x164) returned 0x1
	[0206.832] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x121a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4634) returned 1
	[0206.832] GetFileType (hFile=0x164) returned 0x1
	[0206.832] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4634) returned 1
	[0206.832] WriteFile (in: hFile=0x164, lpBuffer=0xc0002c5180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002c5180*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0206.832] GetFileType (hFile=0x164) returned 0x1
	[0206.832] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x121a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4634) returned 1
	[0206.832] CloseHandle (hObject=0x164) returned 1
	[0206.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf.egmwv")) returned 0x20
	[0206.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.835] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.842] SetEvent (hEvent=0x150) returned 1
	[0206.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x20
	[0206.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x20) returned 1
	[0206.844] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.891] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0206.891] ReadFile (in: hFile=0x17c, lpBuffer=0xc0002cd000, nNumberOfBytesToRead=0xf7c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002cd000*, lpNumberOfBytesRead=0xc00038dcec*=0xf7c, lpOverlapped=0x0) returned 1
	[0206.896] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6420 | out: pbBuffer=0xc0002b6420) returned 1
	[0206.896] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b643a | out: pbBuffer=0xc0002b643a) returned 1
	[0206.896] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000406302 | out: pbBuffer=0xc000406302) returned 1
	[0206.896] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000406340 | out: pbBuffer=0xc000406340) returned 1
	[0206.897] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000406348 | out: pbBuffer=0xc000406348) returned 1
	[0206.897] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6460 | out: pbBuffer=0xc0002b6460) returned 1
	[0206.897] GetFileType (hFile=0x17c) returned 0x1
	[0206.897] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3964) returned 1
	[0206.897] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000c6000*, nNumberOfBytesToWrite=0xf7c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000c6000*, lpNumberOfBytesWritten=0xc000155ccc*=0xf7c, lpOverlapped=0xc000155ce8) returned 1
	[0206.898] GetFileType (hFile=0x17c) returned 0x1
	[0206.898] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xf7c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3964) returned 1
	[0206.898] GetFileType (hFile=0x17c) returned 0x1
	[0206.898] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3964) returned 1
	[0206.898] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000aca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000aca80*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0206.899] GetFileType (hFile=0x17c) returned 0x1
	[0206.899] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xf7c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3964) returned 1
	[0206.899] CloseHandle (hObject=0x17c) returned 1
	[0206.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf.egmwv")) returned 0x20
	[0206.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.901] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.913] SetEvent (hEvent=0xc8) returned 1
	[0206.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x20
	[0206.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x20) returned 1
	[0206.915] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.945] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0206.945] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001f4000, nNumberOfBytesToRead=0x284c, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f4000*, lpNumberOfBytesRead=0xc000425cec*=0x284c, lpOverlapped=0x0) returned 1
	[0206.952] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65c0 | out: pbBuffer=0xc0002b65c0) returned 1
	[0206.952] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000407002 | out: pbBuffer=0xc000407002) returned 1
	[0206.952] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000407077 | out: pbBuffer=0xc000407077) returned 1
	[0206.952] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6600 | out: pbBuffer=0xc0002b6600) returned 1
	[0206.952] GetFileType (hFile=0x17c) returned 0x1
	[0206.952] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10316) returned 1
	[0206.953] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000f6000*, nNumberOfBytesToWrite=0x284c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x284c, lpOverlapped=0xc000155ce8) returned 1
	[0206.953] GetFileType (hFile=0x17c) returned 0x1
	[0206.954] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x284c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10316) returned 1
	[0206.954] GetFileType (hFile=0x17c) returned 0x1
	[0206.954] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10316) returned 1
	[0206.954] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000e6380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000e6380*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0206.955] GetFileType (hFile=0x17c) returned 0x1
	[0206.955] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x284c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10316) returned 1
	[0206.955] CloseHandle (hObject=0x17c) returned 1
	[0206.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf.egmwv")) returned 0x20
	[0206.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.959] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.960] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0206.965] SetEvent (hEvent=0xc8) returned 1
	[0206.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x20
	[0206.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x20) returned 1
	[0206.967] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.266] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.266] ReadFile (in: hFile=0x164, lpBuffer=0xc000236000, nNumberOfBytesToRead=0x79cc, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000236000*, lpNumberOfBytesRead=0xc000389cec*=0x79cc, lpOverlapped=0x0) returned 1
	[0207.271] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b68e0 | out: pbBuffer=0xc0002b68e0) returned 1
	[0207.271] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000244602 | out: pbBuffer=0xc000244602) returned 1
	[0207.271] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6920 | out: pbBuffer=0xc0002b6920) returned 1
	[0207.271] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0207.272] SetEvent (hEvent=0x150) returned 1
	[0207.272] SetEvent (hEvent=0xc8) returned 1
	[0207.273] GetFileType (hFile=0x164) returned 0x1
	[0207.273] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=31180) returned 1
	[0207.273] WriteFile (in: hFile=0x164, lpBuffer=0xc000270000*, nNumberOfBytesToWrite=0x79cc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000270000*, lpNumberOfBytesWritten=0xc000155ccc*=0x79cc, lpOverlapped=0xc000155ce8) returned 1
	[0207.274] GetFileType (hFile=0x164) returned 0x1
	[0207.274] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x79cc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=31180) returned 1
	[0207.274] GetFileType (hFile=0x164) returned 0x1
	[0207.274] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=31180) returned 1
	[0207.274] WriteFile (in: hFile=0x164, lpBuffer=0xc000243500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000243500*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0207.274] GetFileType (hFile=0x164) returned 0x1
	[0207.274] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x79cc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=31180) returned 1
	[0207.275] CloseHandle (hObject=0x164) returned 1
	[0207.277] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf.egmwv")) returned 0x20
	[0207.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.284] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.288] SetEvent (hEvent=0xc0) returned 1
	[0207.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x20
	[0207.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x20) returned 1
	[0207.291] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.323] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0207.323] ReadFile (in: hFile=0x17c, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x88c, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc0002d5cec*=0x88c, lpOverlapped=0x0) returned 1
	[0207.329] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0207.329] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001b02 | out: pbBuffer=0xc000001b02) returned 1
	[0207.330] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d60 | out: pbBuffer=0xc000052d60) returned 1
	[0207.330] GetFileType (hFile=0x17c) returned 0x1
	[0207.330] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2188) returned 1
	[0207.330] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003dd000*, nNumberOfBytesToWrite=0x88c, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0003dd000*, lpNumberOfBytesWritten=0xc00019dccc*=0x88c, lpOverlapped=0xc00019dce8) returned 1
	[0207.330] GetFileType (hFile=0x17c) returned 0x1
	[0207.331] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x88c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2188) returned 1
	[0207.331] GetFileType (hFile=0x17c) returned 0x1
	[0207.331] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2188) returned 1
	[0207.331] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003e6e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0003e6e00*, lpNumberOfBytesWritten=0xc00019dccc*=0x224, lpOverlapped=0xc00019dce8) returned 1
	[0207.331] GetFileType (hFile=0x17c) returned 0x1
	[0207.331] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x88c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2188) returned 1
	[0207.332] CloseHandle (hObject=0x17c) returned 1
	[0207.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf.egmwv")) returned 0x20
	[0207.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.336] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.349] SetEvent (hEvent=0xc0) returned 1
	[0207.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x20
	[0207.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x20) returned 1
	[0207.354] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.380] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0207.380] ReadFile (in: hFile=0x168, lpBuffer=0xc000200000, nNumberOfBytesToRead=0x61c, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000200000*, lpNumberOfBytesRead=0xc000199cec*=0x61c, lpOverlapped=0x0) returned 1
	[0207.388] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0207.388] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020611a | out: pbBuffer=0xc00020611a) returned 1
	[0207.389] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003fce02 | out: pbBuffer=0xc0003fce02) returned 1
	[0207.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fce59 | out: pbBuffer=0xc0003fce59) returned 1
	[0207.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fcea0 | out: pbBuffer=0xc0003fcea0) returned 1
	[0207.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fcec5 | out: pbBuffer=0xc0003fcec5) returned 1
	[0207.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fced2 | out: pbBuffer=0xc0003fced2) returned 1
	[0207.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fcee0 | out: pbBuffer=0xc0003fcee0) returned 1
	[0207.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0207.389] GetFileType (hFile=0x168) returned 0x1
	[0207.389] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002afca0*=1564) returned 1
	[0207.389] WriteFile (in: hFile=0x168, lpBuffer=0xc000379000*, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0xc0002afccc, lpOverlapped=0xc0002afce8 | out: lpBuffer=0xc000379000*, lpNumberOfBytesWritten=0xc0002afccc*=0x61c, lpOverlapped=0xc0002afce8) returned 1
	[0207.390] GetFileType (hFile=0x168) returned 0x1
	[0207.390] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x61c, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002afca0*=1564) returned 1
	[0207.390] GetFileType (hFile=0x168) returned 0x1
	[0207.390] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002afca0*=1564) returned 1
	[0207.390] WriteFile (in: hFile=0x168, lpBuffer=0xc000369500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002afccc, lpOverlapped=0xc0002afce8 | out: lpBuffer=0xc000369500*, lpNumberOfBytesWritten=0xc0002afccc*=0x227, lpOverlapped=0xc0002afce8) returned 1
	[0207.391] GetFileType (hFile=0x168) returned 0x1
	[0207.391] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x61c, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002afca0*=1564) returned 1
	[0207.391] CloseHandle (hObject=0x168) returned 1
	[0207.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf.egmwv")) returned 0x20
	[0207.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.393] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.408] SetEvent (hEvent=0xc0) returned 1
	[0207.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x20
	[0207.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x20) returned 1
	[0207.411] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.448] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0207.449] ReadFile (in: hFile=0x164, lpBuffer=0xc000234000, nNumberOfBytesToRead=0xa4c, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000234000*, lpNumberOfBytesRead=0xc000199cec*=0xa4c, lpOverlapped=0x0) returned 1
	[0207.454] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0207.454] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215e02 | out: pbBuffer=0xc000215e02) returned 1
	[0207.454] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215ea4 | out: pbBuffer=0xc000215ea4) returned 1
	[0207.454] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215ec6 | out: pbBuffer=0xc000215ec6) returned 1
	[0207.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0207.455] GetFileType (hFile=0x164) returned 0x1
	[0207.455] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2636) returned 1
	[0207.455] WriteFile (in: hFile=0x164, lpBuffer=0xc000352000*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000352000*, lpNumberOfBytesWritten=0xc000155ccc*=0xa4c, lpOverlapped=0xc000155ce8) returned 1
	[0207.455] GetFileType (hFile=0x164) returned 0x1
	[0207.456] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa4c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2636) returned 1
	[0207.456] GetFileType (hFile=0x164) returned 0x1
	[0207.456] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2636) returned 1
	[0207.456] WriteFile (in: hFile=0x164, lpBuffer=0xc000240e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000240e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0207.456] GetFileType (hFile=0x164) returned 0x1
	[0207.456] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa4c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2636) returned 1
	[0207.457] CloseHandle (hObject=0x164) returned 1
	[0207.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf.egmwv")) returned 0x20
	[0207.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.459] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x20
	[0207.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x20) returned 1
	[0207.469] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.501] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0207.501] ReadFile (in: hFile=0x168, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0xc38, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc000199cec*=0xc38, lpOverlapped=0x0) returned 1
	[0207.507] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053360 | out: pbBuffer=0xc000053360) returned 1
	[0207.507] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005337a | out: pbBuffer=0xc00005337a) returned 1
	[0207.507] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001db802 | out: pbBuffer=0xc0001db802) returned 1
	[0207.507] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001db878 | out: pbBuffer=0xc0001db878) returned 1
	[0207.507] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000533a0 | out: pbBuffer=0xc0000533a0) returned 1
	[0207.507] GetFileType (hFile=0x168) returned 0x1
	[0207.508] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3128) returned 1
	[0207.508] WriteFile (in: hFile=0x168, lpBuffer=0xc0000f2000*, nNumberOfBytesToWrite=0xc38, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000f2000*, lpNumberOfBytesWritten=0xc00019dccc*=0xc38, lpOverlapped=0xc00019dce8) returned 1
	[0207.508] GetFileType (hFile=0x168) returned 0x1
	[0207.508] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc38, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3128) returned 1
	[0207.508] GetFileType (hFile=0x168) returned 0x1
	[0207.509] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3128) returned 1
	[0207.509] WriteFile (in: hFile=0x168, lpBuffer=0xc0000e7180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000e7180*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0207.509] GetFileType (hFile=0x168) returned 0x1
	[0207.509] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc38, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3128) returned 1
	[0207.509] CloseHandle (hObject=0x168) returned 1
	[0207.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf.egmwv")) returned 0x20
	[0207.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.517] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf")) returned 0x20
	[0207.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x20) returned 1
	[0207.523] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.561] SetEvent (hEvent=0x70) returned 1
	[0207.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.562] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0207.562] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003ca000, nNumberOfBytesToRead=0x816, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ca000*, lpNumberOfBytesRead=0xc000199cec*=0x816, lpOverlapped=0x0) returned 1
	[0207.567] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65e0 | out: pbBuffer=0xc0002b65e0) returned 1
	[0207.567] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65fa | out: pbBuffer=0xc0002b65fa) returned 1
	[0207.567] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b1402 | out: pbBuffer=0xc0000b1402) returned 1
	[0207.567] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000b14cd | out: pbBuffer=0xc0000b14cd) returned 1
	[0207.567] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000b14e6 | out: pbBuffer=0xc0000b14e6) returned 1
	[0207.568] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6620 | out: pbBuffer=0xc0002b6620) returned 1
	[0207.568] GetFileType (hFile=0x17c) returned 0x1
	[0207.568] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2070) returned 1
	[0207.568] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003d3000*, nNumberOfBytesToWrite=0x816, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0003d3000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x816, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.568] GetFileType (hFile=0x17c) returned 0x1
	[0207.568] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x816, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2070) returned 1
	[0207.568] GetFileType (hFile=0x17c) returned 0x1
	[0207.569] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2070) returned 1
	[0207.569] WriteFile (in: hFile=0x17c, lpBuffer=0xc000116380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000116380*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x224, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.569] GetFileType (hFile=0x17c) returned 0x1
	[0207.569] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x816, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2070) returned 1
	[0207.569] CloseHandle (hObject=0x17c) returned 1
	[0207.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf.egmwv")) returned 0x20
	[0207.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.573] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x20
	[0207.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x20) returned 1
	[0207.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.615] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0207.615] ReadFile (in: hFile=0x164, lpBuffer=0xc0000f1000, nNumberOfBytesToRead=0xeb4, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f1000*, lpNumberOfBytesRead=0xc000197cec*=0xeb4, lpOverlapped=0x0) returned 1
	[0207.620] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053500 | out: pbBuffer=0xc000053500) returned 1
	[0207.620] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005351a | out: pbBuffer=0xc00005351a) returned 1
	[0207.620] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000300502 | out: pbBuffer=0xc000300502) returned 1
	[0207.620] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000300583 | out: pbBuffer=0xc000300583) returned 1
	[0207.620] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053540 | out: pbBuffer=0xc000053540) returned 1
	[0207.620] GetFileType (hFile=0x164) returned 0x1
	[0207.620] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3764) returned 1
	[0207.621] WriteFile (in: hFile=0x164, lpBuffer=0xc000310000*, nNumberOfBytesToWrite=0xeb4, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000310000*, lpNumberOfBytesWritten=0xc00019dccc*=0xeb4, lpOverlapped=0xc00019dce8) returned 1
	[0207.621] GetFileType (hFile=0x164) returned 0x1
	[0207.621] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xeb4, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3764) returned 1
	[0207.621] GetFileType (hFile=0x164) returned 0x1
	[0207.621] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3764) returned 1
	[0207.622] WriteFile (in: hFile=0x164, lpBuffer=0xc000306a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000306a80*, lpNumberOfBytesWritten=0xc00019dccc*=0x22d, lpOverlapped=0xc00019dce8) returned 1
	[0207.622] GetFileType (hFile=0x164) returned 0x1
	[0207.622] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xeb4, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3764) returned 1
	[0207.622] CloseHandle (hObject=0x164) returned 1
	[0207.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf.egmwv")) returned 0x20
	[0207.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.624] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.635] SetEvent (hEvent=0xc0) returned 1
	[0207.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x20
	[0207.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x20) returned 1
	[0207.637] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.672] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0207.672] ReadFile (in: hFile=0x164, lpBuffer=0xc00008c480, nNumberOfBytesToRead=0x402, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc00008c480*, lpNumberOfBytesRead=0xc0002d7cec*=0x402, lpOverlapped=0x0) returned 1
	[0207.677] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414100 | out: pbBuffer=0xc000414100) returned 1
	[0207.677] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041411a | out: pbBuffer=0xc00041411a) returned 1
	[0207.677] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000138a02 | out: pbBuffer=0xc000138a02) returned 1
	[0207.677] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000138ac1 | out: pbBuffer=0xc000138ac1) returned 1
	[0207.677] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000138acb | out: pbBuffer=0xc000138acb) returned 1
	[0207.677] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414140 | out: pbBuffer=0xc000414140) returned 1
	[0207.678] GetFileType (hFile=0x164) returned 0x1
	[0207.678] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1026) returned 1
	[0207.678] WriteFile (in: hFile=0x164, lpBuffer=0xc00039c000*, nNumberOfBytesToWrite=0x402, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00039c000*, lpNumberOfBytesWritten=0xc000155ccc*=0x402, lpOverlapped=0xc000155ce8) returned 1
	[0207.678] GetFileType (hFile=0x164) returned 0x1
	[0207.678] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x402, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1026) returned 1
	[0207.678] GetFileType (hFile=0x164) returned 0x1
	[0207.679] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1026) returned 1
	[0207.679] WriteFile (in: hFile=0x164, lpBuffer=0xc000394700*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000394700*, lpNumberOfBytesWritten=0xc000155ccc*=0x21e, lpOverlapped=0xc000155ce8) returned 1
	[0207.679] GetFileType (hFile=0x164) returned 0x1
	[0207.679] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x402, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1026) returned 1
	[0207.679] CloseHandle (hObject=0x164) returned 1
	[0207.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf.egmwv")) returned 0x20
	[0207.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.681] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.685] SetEvent (hEvent=0xe4) returned 1
	[0207.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x20
	[0207.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x20) returned 1
	[0207.687] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.719] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0207.719] ReadFile (in: hFile=0x168, lpBuffer=0xc00038e000, nNumberOfBytesToRead=0xe4e, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc00038e000*, lpNumberOfBytesRead=0xc0002d7cec*=0xe4e, lpOverlapped=0x0) returned 1
	[0207.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0207.724] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001402 | out: pbBuffer=0xc000001402) returned 1
	[0207.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001493 | out: pbBuffer=0xc000001493) returned 1
	[0207.725] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0207.725] GetFileType (hFile=0x168) returned 0x1
	[0207.725] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3662) returned 1
	[0207.725] WriteFile (in: hFile=0x168, lpBuffer=0xc000290000*, nNumberOfBytesToWrite=0xe4e, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000290000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0xe4e, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.725] GetFileType (hFile=0x168) returned 0x1
	[0207.726] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe4e, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3662) returned 1
	[0207.726] GetFileType (hFile=0x168) returned 0x1
	[0207.726] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3662) returned 1
	[0207.726] WriteFile (in: hFile=0x168, lpBuffer=0xc0000dd500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0000dd500*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22d, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.727] GetFileType (hFile=0x168) returned 0x1
	[0207.727] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe4e, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3662) returned 1
	[0207.727] CloseHandle (hObject=0x168) returned 1
	[0207.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf.egmwv")) returned 0x20
	[0207.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.733] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x20
	[0207.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x20) returned 1
	[0207.741] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.774] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0207.774] ReadFile (in: hFile=0x17c, lpBuffer=0xc0002c8000, nNumberOfBytesToRead=0xce2, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesRead=0xc0002d5cec*=0xce2, lpOverlapped=0x0) returned 1
	[0207.779] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0207.779] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b645a | out: pbBuffer=0xc0002b645a) returned 1
	[0207.779] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000356b02 | out: pbBuffer=0xc000356b02) returned 1
	[0207.779] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000356b22 | out: pbBuffer=0xc000356b22) returned 1
	[0207.780] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0207.780] GetFileType (hFile=0x17c) returned 0x1
	[0207.780] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3298) returned 1
	[0207.780] WriteFile (in: hFile=0x17c, lpBuffer=0xc00014a000*, nNumberOfBytesToWrite=0xce2, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00014a000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0xce2, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.781] GetFileType (hFile=0x17c) returned 0x1
	[0207.781] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xce2, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3298) returned 1
	[0207.781] GetFileType (hFile=0x17c) returned 0x1
	[0207.781] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3298) returned 1
	[0207.781] WriteFile (in: hFile=0x17c, lpBuffer=0xc000146700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000146700*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22a, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.781] GetFileType (hFile=0x17c) returned 0x1
	[0207.782] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xce2, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3298) returned 1
	[0207.782] CloseHandle (hObject=0x17c) returned 1
	[0207.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf.egmwv")) returned 0x20
	[0207.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.786] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.799] SetEvent (hEvent=0xe4) returned 1
	[0207.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x20
	[0207.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x20) returned 1
	[0207.803] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.831] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0207.831] ReadFile (in: hFile=0x164, lpBuffer=0xc0000e8000, nNumberOfBytesToRead=0x34e2, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e8000*, lpNumberOfBytesRead=0xc000193cec*=0x34e2, lpOverlapped=0x0) returned 1
	[0207.836] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65c0 | out: pbBuffer=0xc0002b65c0) returned 1
	[0207.836] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65da | out: pbBuffer=0xc0002b65da) returned 1
	[0207.836] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000357702 | out: pbBuffer=0xc000357702) returned 1
	[0207.837] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6600 | out: pbBuffer=0xc0002b6600) returned 1
	[0207.837] GetFileType (hFile=0x164) returned 0x1
	[0207.837] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=13538) returned 1
	[0207.837] WriteFile (in: hFile=0x164, lpBuffer=0xc0001c2000*, nNumberOfBytesToWrite=0x34e2, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0001c2000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x34e2, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.837] GetFileType (hFile=0x164) returned 0x1
	[0207.838] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x34e2, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=13538) returned 1
	[0207.838] GetFileType (hFile=0x164) returned 0x1
	[0207.838] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=13538) returned 1
	[0207.838] WriteFile (in: hFile=0x164, lpBuffer=0xc0001c6000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22d, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.838] GetFileType (hFile=0x164) returned 0x1
	[0207.838] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x34e2, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=13538) returned 1
	[0207.839] CloseHandle (hObject=0x164) returned 1
	[0207.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf.egmwv")) returned 0x20
	[0207.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.840] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.852] SetEvent (hEvent=0xe4) returned 1
	[0207.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x20
	[0207.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x20) returned 1
	[0207.853] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.880] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0207.880] ReadFile (in: hFile=0x164, lpBuffer=0xc00029b800, nNumberOfBytesToRead=0x5bc, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029b800*, lpNumberOfBytesRead=0xc000199cec*=0x5bc, lpOverlapped=0x0) returned 1
	[0207.886] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414880 | out: pbBuffer=0xc000414880) returned 1
	[0207.886] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041489a | out: pbBuffer=0xc00041489a) returned 1
	[0207.886] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000404202 | out: pbBuffer=0xc000404202) returned 1
	[0207.886] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000404221 | out: pbBuffer=0xc000404221) returned 1
	[0207.886] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004042a2 | out: pbBuffer=0xc0004042a2) returned 1
	[0207.886] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004148c0 | out: pbBuffer=0xc0004148c0) returned 1
	[0207.886] GetFileType (hFile=0x164) returned 0x1
	[0207.886] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1468) returned 1
	[0207.887] WriteFile (in: hFile=0x164, lpBuffer=0xc00040b000*, nNumberOfBytesToWrite=0x5bc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00040b000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5bc, lpOverlapped=0xc000155ce8) returned 1
	[0207.887] GetFileType (hFile=0x164) returned 0x1
	[0207.887] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x5bc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1468) returned 1
	[0207.887] GetFileType (hFile=0x164) returned 0x1
	[0207.887] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1468) returned 1
	[0207.888] WriteFile (in: hFile=0x164, lpBuffer=0xc000402a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000402a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0207.888] GetFileType (hFile=0x164) returned 0x1
	[0207.888] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x5bc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1468) returned 1
	[0207.888] CloseHandle (hObject=0x164) returned 1
	[0207.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf.egmwv")) returned 0x20
	[0207.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.890] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x20
	[0207.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x20) returned 1
	[0207.897] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.935] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0207.935] ReadFile (in: hFile=0x168, lpBuffer=0xc0003cc000, nNumberOfBytesToRead=0x2994, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003cc000*, lpNumberOfBytesRead=0xc000199cec*=0x2994, lpOverlapped=0x0) returned 1
	[0207.941] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0207.942] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003f4d02 | out: pbBuffer=0xc0003f4d02) returned 1
	[0207.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003f4d4a | out: pbBuffer=0xc0003f4d4a) returned 1
	[0207.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003f4d59 | out: pbBuffer=0xc0003f4d59) returned 1
	[0207.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0207.942] GetFileType (hFile=0x168) returned 0x1
	[0207.943] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=10644) returned 1
	[0207.943] WriteFile (in: hFile=0x168, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x2994, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc00019dccc*=0x2994, lpOverlapped=0xc00019dce8) returned 1
	[0207.943] GetFileType (hFile=0x168) returned 0x1
	[0207.943] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2994, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=10644) returned 1
	[0207.943] GetFileType (hFile=0x168) returned 0x1
	[0207.944] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=10644) returned 1
	[0207.944] WriteFile (in: hFile=0x168, lpBuffer=0xc000308a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000308a80*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0207.944] GetFileType (hFile=0x168) returned 0x1
	[0207.944] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2994, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=10644) returned 1
	[0207.944] CloseHandle (hObject=0x168) returned 1
	[0207.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf.egmwv")) returned 0x20
	[0207.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.948] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0207.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x20
	[0207.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x20) returned 1
	[0207.954] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.984] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0207.984] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001fe000, nNumberOfBytesToRead=0x2ce2, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001fe000*, lpNumberOfBytesRead=0xc00038dcec*=0x2ce2, lpOverlapped=0x0) returned 1
	[0207.991] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206730 | out: pbBuffer=0xc000206730) returned 1
	[0207.993] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f0d02 | out: pbBuffer=0xc0001f0d02) returned 1
	[0207.993] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206770 | out: pbBuffer=0xc000206770) returned 1
	[0207.993] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0207.995] SetEvent (hEvent=0x70) returned 1
	[0207.995] SetEvent (hEvent=0x150) returned 1
	[0207.995] SetEvent (hEvent=0xe4) returned 1
	[0207.995] GetFileType (hFile=0x17c) returned 0x1
	[0207.996] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=11490) returned 1
	[0207.996] WriteFile (in: hFile=0x17c, lpBuffer=0xc000236000*, nNumberOfBytesToWrite=0x2ce2, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000236000*, lpNumberOfBytesWritten=0xc000459ccc*=0x2ce2, lpOverlapped=0xc000459ce8) returned 1
	[0207.996] GetFileType (hFile=0x17c) returned 0x1
	[0207.996] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2ce2, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=11490) returned 1
	[0207.997] GetFileType (hFile=0x17c) returned 0x1
	[0207.997] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=11490) returned 1
	[0207.997] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001fd880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0001fd880*, lpNumberOfBytesWritten=0xc000459ccc*=0x22d, lpOverlapped=0xc000459ce8) returned 1
	[0207.997] GetFileType (hFile=0x17c) returned 0x1
	[0207.997] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2ce2, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=11490) returned 1
	[0207.997] CloseHandle (hObject=0x17c) returned 1
	[0208.000] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf.egmwv")) returned 0x20
	[0208.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.005] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.015] SetEvent (hEvent=0x60) returned 1
	[0208.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x20
	[0208.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x20) returned 1
	[0208.018] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.040] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0208.040] ReadFile (in: hFile=0x164, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x10f4, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc000387cec*=0x10f4, lpOverlapped=0x0) returned 1
	[0208.046] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0208.046] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0208.046] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0208.046] GetFileType (hFile=0x164) returned 0x1
	[0208.046] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=4340) returned 1
	[0208.047] WriteFile (in: hFile=0x164, lpBuffer=0xc000176000*, nNumberOfBytesToWrite=0x10f4, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000176000*, lpNumberOfBytesWritten=0xc000459ccc*=0x10f4, lpOverlapped=0xc000459ce8) returned 1
	[0208.047] GetFileType (hFile=0x164) returned 0x1
	[0208.047] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x10f4, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=4340) returned 1
	[0208.047] GetFileType (hFile=0x164) returned 0x1
	[0208.047] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=4340) returned 1
	[0208.048] WriteFile (in: hFile=0x164, lpBuffer=0xc000475500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000475500*, lpNumberOfBytesWritten=0xc000459ccc*=0x22a, lpOverlapped=0xc000459ce8) returned 1
	[0208.048] GetFileType (hFile=0x164) returned 0x1
	[0208.048] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x10f4, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=4340) returned 1
	[0208.048] CloseHandle (hObject=0x164) returned 1
	[0208.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf.egmwv")) returned 0x20
	[0208.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.051] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.065] SetEvent (hEvent=0x60) returned 1
	[0208.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x20
	[0208.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x20) returned 1
	[0208.070] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.091] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0208.091] ReadFile (in: hFile=0x164, lpBuffer=0xc00017cc00, nNumberOfBytesToRead=0xb20, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017cc00*, lpNumberOfBytesRead=0xc0002d7cec*=0xb20, lpOverlapped=0x0) returned 1
	[0208.096] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0208.096] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038702 | out: pbBuffer=0xc000038702) returned 1
	[0208.097] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038725 | out: pbBuffer=0xc000038725) returned 1
	[0208.097] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0208.097] GetFileType (hFile=0x164) returned 0x1
	[0208.097] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2848) returned 1
	[0208.097] WriteFile (in: hFile=0x164, lpBuffer=0xc0001de000*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001de000*, lpNumberOfBytesWritten=0xc000155ccc*=0xb20, lpOverlapped=0xc000155ce8) returned 1
	[0208.098] GetFileType (hFile=0x164) returned 0x1
	[0208.098] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xb20, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2848) returned 1
	[0208.098] GetFileType (hFile=0x164) returned 0x1
	[0208.098] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2848) returned 1
	[0208.098] WriteFile (in: hFile=0x164, lpBuffer=0xc0001d2a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001d2a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0208.098] GetFileType (hFile=0x164) returned 0x1
	[0208.098] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xb20, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2848) returned 1
	[0208.098] CloseHandle (hObject=0x164) returned 1
	[0208.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf.egmwv")) returned 0x20
	[0208.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.101] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x20
	[0208.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x20) returned 1
	[0208.108] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.148] SetEvent (hEvent=0x70) returned 1
	[0208.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0208.150] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0208.150] ReadFile (in: hFile=0x168, lpBuffer=0xc000376000, nNumberOfBytesToRead=0x4f4, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc0002d5cec*=0x4f4, lpOverlapped=0x0) returned 1
	[0208.154] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206590 | out: pbBuffer=0xc000206590) returned 1
	[0208.154] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039b02 | out: pbBuffer=0xc000039b02) returned 1
	[0208.154] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039b19 | out: pbBuffer=0xc000039b19) returned 1
	[0208.155] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039b33 | out: pbBuffer=0xc000039b33) returned 1
	[0208.155] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039b8a | out: pbBuffer=0xc000039b8a) returned 1
	[0208.155] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065d0 | out: pbBuffer=0xc0002065d0) returned 1
	[0208.155] GetFileType (hFile=0x168) returned 0x1
	[0208.155] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1268) returned 1
	[0208.155] WriteFile (in: hFile=0x168, lpBuffer=0xc000436000*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000436000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4f4, lpOverlapped=0xc000155ce8) returned 1
	[0208.156] GetFileType (hFile=0x168) returned 0x1
	[0208.156] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x4f4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1268) returned 1
	[0208.156] GetFileType (hFile=0x168) returned 0x1
	[0208.156] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1268) returned 1
	[0208.156] WriteFile (in: hFile=0x168, lpBuffer=0xc000434380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000434380*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0208.157] GetFileType (hFile=0x168) returned 0x1
	[0208.157] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x4f4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1268) returned 1
	[0208.157] CloseHandle (hObject=0x168) returned 1
	[0208.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf.egmwv")) returned 0x20
	[0208.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.160] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.172] SetEvent (hEvent=0x60) returned 1
	[0208.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x20
	[0208.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x20) returned 1
	[0208.176] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0208.255] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0208.255] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0x3dbe, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc0002d5cec*=0x3dbe, lpOverlapped=0x0) returned 1
	[0208.260] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206720 | out: pbBuffer=0xc000206720) returned 1
	[0208.260] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020673a | out: pbBuffer=0xc00020673a) returned 1
	[0208.260] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ea702 | out: pbBuffer=0xc0000ea702) returned 1
	[0208.260] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206760 | out: pbBuffer=0xc000206760) returned 1
	[0208.260] GetFileType (hFile=0x17c) returned 0x1
	[0208.260] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15806) returned 1
	[0208.260] WriteFile (in: hFile=0x17c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x3dbe, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3dbe, lpOverlapped=0xc000155ce8) returned 1
	[0208.261] GetFileType (hFile=0x17c) returned 0x1
	[0208.261] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x3dbe, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15806) returned 1
	[0208.261] GetFileType (hFile=0x17c) returned 0x1
	[0208.261] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15806) returned 1
	[0208.262] WriteFile (in: hFile=0x17c, lpBuffer=0xc000435c00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000435c00*, lpNumberOfBytesWritten=0xc000155ccc*=0x239, lpOverlapped=0xc000155ce8) returned 1
	[0208.262] GetFileType (hFile=0x17c) returned 0x1
	[0208.262] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x3dbe, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15806) returned 1
	[0208.262] CloseHandle (hObject=0x17c) returned 1
	[0208.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf.egmwv")) returned 0x20
	[0208.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.264] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.271] SetEvent (hEvent=0x60) returned 1
	[0208.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x20
	[0208.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x20) returned 1
	[0208.273] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180
	[0208.289] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0208.289] ReadFile (in: hFile=0x180, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x1c80, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc0002d3cec*=0x1c80, lpOverlapped=0x0) returned 1
	[0208.341] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068d0 | out: pbBuffer=0xc0002068d0) returned 1
	[0208.341] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000eb602 | out: pbBuffer=0xc0000eb602) returned 1
	[0208.341] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000eb694 | out: pbBuffer=0xc0000eb694) returned 1
	[0208.342] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206910 | out: pbBuffer=0xc000206910) returned 1
	[0208.342] GetFileType (hFile=0x180) returned 0x1
	[0208.342] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7296) returned 1
	[0208.342] WriteFile (in: hFile=0x180, lpBuffer=0xc000272000*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000272000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1c80, lpOverlapped=0xc000155ce8) returned 1
	[0208.342] GetFileType (hFile=0x180) returned 0x1
	[0208.342] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x1c80, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7296) returned 1
	[0208.343] GetFileType (hFile=0x180) returned 0x1
	[0208.343] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7296) returned 1
	[0208.343] WriteFile (in: hFile=0x180, lpBuffer=0xc000259500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000259500*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0208.343] GetFileType (hFile=0x180) returned 0x1
	[0208.343] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x1c80, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7296) returned 1
	[0208.344] CloseHandle (hObject=0x180) returned 1
	[0208.359] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.374] SetEvent (hEvent=0x14c) returned 1
	[0208.375] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.377] SetEvent (hEvent=0x14c) returned 1
	[0208.377] SetEvent (hEvent=0x15c) returned 1
	[0208.377] SetEvent (hEvent=0x150) returned 1
	[0208.377] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf.egmwv")) returned 0x20
	[0208.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.387] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.392] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x20
	[0208.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x20) returned 1
	[0208.401] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180
	[0208.425] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0208.425] ReadFile (in: hFile=0x180, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x136a, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000423cec*=0x136a, lpOverlapped=0x0) returned 1
	[0208.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0208.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eaa | out: pbBuffer=0xc000052eaa) returned 1
	[0208.557] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003bcb02 | out: pbBuffer=0xc0003bcb02) returned 1
	[0208.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bcb47 | out: pbBuffer=0xc0003bcb47) returned 1
	[0208.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0208.558] GetFileType (hFile=0x180) returned 0x1
	[0208.558] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0208.558] WriteFile (in: hFile=0x180, lpBuffer=0xc000322000*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000322000*, lpNumberOfBytesWritten=0xc000155ccc*=0x136a, lpOverlapped=0xc000155ce8) returned 1
	[0208.558] GetFileType (hFile=0x180) returned 0x1
	[0208.558] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x136a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0208.558] GetFileType (hFile=0x180) returned 0x1
	[0208.559] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0208.559] WriteFile (in: hFile=0x180, lpBuffer=0xc00031c700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00031c700*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0208.559] GetFileType (hFile=0x180) returned 0x1
	[0208.559] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x136a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0208.559] CloseHandle (hObject=0x180) returned 1
	[0208.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf.egmwv")) returned 0x20
	[0208.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.567] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.573] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.589] SetEvent (hEvent=0xe4) returned 1
	[0208.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf")) returned 0x20
	[0208.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x20) returned 1
	[0208.594] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.618] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0208.618] ReadFile (in: hFile=0x178, lpBuffer=0xc00008c480, nNumberOfBytesToRead=0x432, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00008c480*, lpNumberOfBytesRead=0xc000429cec*=0x432, lpOverlapped=0x0) returned 1
	[0208.628] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053020 | out: pbBuffer=0xc000053020) returned 1
	[0208.628] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003bd902 | out: pbBuffer=0xc0003bd902) returned 1
	[0208.629] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bd941 | out: pbBuffer=0xc0003bd941) returned 1
	[0208.629] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bd9ac | out: pbBuffer=0xc0003bd9ac) returned 1
	[0208.629] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bd9b1 | out: pbBuffer=0xc0003bd9b1) returned 1
	[0208.629] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bd9e5 | out: pbBuffer=0xc0003bd9e5) returned 1
	[0208.629] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053060 | out: pbBuffer=0xc000053060) returned 1
	[0208.629] GetFileType (hFile=0x178) returned 0x1
	[0208.629] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1074) returned 1
	[0208.629] WriteFile (in: hFile=0x178, lpBuffer=0xc0001f5000*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f5000*, lpNumberOfBytesWritten=0xc000155ccc*=0x432, lpOverlapped=0xc000155ce8) returned 1
	[0208.630] GetFileType (hFile=0x178) returned 0x1
	[0208.630] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x432, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1074) returned 1
	[0208.630] GetFileType (hFile=0x178) returned 0x1
	[0208.630] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1074) returned 1
	[0208.630] WriteFile (in: hFile=0x178, lpBuffer=0xc0001fc000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001fc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0208.630] GetFileType (hFile=0x178) returned 0x1
	[0208.631] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x432, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1074) returned 1
	[0208.631] CloseHandle (hObject=0x178) returned 1
	[0208.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf.egmwv")) returned 0x20
	[0208.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.633] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf")) returned 0x20
	[0208.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x20) returned 1
	[0208.640] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.710] SetEvent (hEvent=0x70) returned 1
	[0208.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0208.714] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0208.714] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002b8000, nNumberOfBytesToRead=0x764, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002b8000*, lpNumberOfBytesRead=0xc000429cec*=0x764, lpOverlapped=0x0) returned 1
	[0208.719] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0208.719] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214e02 | out: pbBuffer=0xc000214e02) returned 1
	[0208.719] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214e35 | out: pbBuffer=0xc000214e35) returned 1
	[0208.720] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214e93 | out: pbBuffer=0xc000214e93) returned 1
	[0208.720] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214ecb | out: pbBuffer=0xc000214ecb) returned 1
	[0208.720] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0208.720] GetFileType (hFile=0xe0) returned 0x1
	[0208.720] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1892) returned 1
	[0208.720] WriteFile (in: hFile=0xe0, lpBuffer=0xc00020a000*, nNumberOfBytesToWrite=0x764, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc00020a000*, lpNumberOfBytesWritten=0xc000459ccc*=0x764, lpOverlapped=0xc000459ce8) returned 1
	[0208.721] GetFileType (hFile=0xe0) returned 0x1
	[0208.721] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x764, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1892) returned 1
	[0208.721] GetFileType (hFile=0xe0) returned 0x1
	[0208.721] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1892) returned 1
	[0208.721] WriteFile (in: hFile=0xe0, lpBuffer=0xc000263880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000263880*, lpNumberOfBytesWritten=0xc000459ccc*=0x22a, lpOverlapped=0xc000459ce8) returned 1
	[0208.722] GetFileType (hFile=0xe0) returned 0x1
	[0208.722] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x764, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1892) returned 1
	[0208.722] CloseHandle (hObject=0xe0) returned 1
	[0208.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf.egmwv")) returned 0x20
	[0208.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.726] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.729] SetEvent (hEvent=0x150) returned 1
	[0208.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf")) returned 0x20
	[0208.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x20) returned 1
	[0208.731] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.764] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0208.764] ReadFile (in: hFile=0x178, lpBuffer=0xc000270500, nNumberOfBytesToRead=0x23d4, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000270500*, lpNumberOfBytesRead=0xc000429cec*=0x23d4, lpOverlapped=0x0) returned 1
	[0208.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0208.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d1a | out: pbBuffer=0xc000052d1a) returned 1
	[0208.771] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1802 | out: pbBuffer=0xc0002c1802) returned 1
	[0208.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0208.771] GetFileType (hFile=0x178) returned 0x1
	[0208.771] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9172) returned 1
	[0208.771] WriteFile (in: hFile=0x178, lpBuffer=0xc0003dc000*, nNumberOfBytesToWrite=0x23d4, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003dc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x23d4, lpOverlapped=0xc000155ce8) returned 1
	[0208.772] GetFileType (hFile=0x178) returned 0x1
	[0208.773] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x23d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9172) returned 1
	[0208.773] GetFileType (hFile=0x178) returned 0x1
	[0208.773] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9172) returned 1
	[0208.773] WriteFile (in: hFile=0x178, lpBuffer=0xc0003d6e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003d6e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0208.773] GetFileType (hFile=0x178) returned 0x1
	[0208.773] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x23d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9172) returned 1
	[0208.774] CloseHandle (hObject=0x178) returned 1
	[0208.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf.egmwv")) returned 0x20
	[0208.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.777] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.792] SetEvent (hEvent=0x150) returned 1
	[0208.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf")) returned 0x20
	[0208.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF", dwFileAttributes=0x20) returned 1
	[0208.795] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.820] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0208.820] ReadFile (in: hFile=0x170, lpBuffer=0xc0002ce000, nNumberOfBytesToRead=0x4e8, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesRead=0xc00016dcec*=0x4e8, lpOverlapped=0x0) returned 1
	[0208.827] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0208.827] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eaa | out: pbBuffer=0xc000052eaa) returned 1
	[0208.827] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000132502 | out: pbBuffer=0xc000132502) returned 1
	[0208.827] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0208.827] GetFileType (hFile=0x170) returned 0x1
	[0208.827] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1256) returned 1
	[0208.828] WriteFile (in: hFile=0x170, lpBuffer=0xc0002a3000*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002a3000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4e8, lpOverlapped=0xc000155ce8) returned 1
	[0208.828] GetFileType (hFile=0x170) returned 0x1
	[0208.828] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4e8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1256) returned 1
	[0208.828] GetFileType (hFile=0x170) returned 0x1
	[0208.829] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1256) returned 1
	[0208.829] WriteFile (in: hFile=0x170, lpBuffer=0xc0002aa700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002aa700*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0208.829] GetFileType (hFile=0x170) returned 0x1
	[0208.829] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4e8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1256) returned 1
	[0208.830] CloseHandle (hObject=0x170) returned 1
	[0208.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf.egmwv")) returned 0x20
	[0208.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.833] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.837] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.848] SetEvent (hEvent=0x150) returned 1
	[0208.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif")) returned 0x20
	[0208.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF", dwFileAttributes=0x20) returned 1
	[0208.851] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif.egmwv"), dwFlags=0x1) returned 1
	[0208.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.877] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0208.878] ReadFile (in: hFile=0x170, lpBuffer=0xc000136000, nNumberOfBytesToRead=0x4c4, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc000425cec*=0x4c4, lpOverlapped=0x0) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001402 | out: pbBuffer=0xc000001402) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001415 | out: pbBuffer=0xc000001415) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000148e | out: pbBuffer=0xc00000148e) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000014a6 | out: pbBuffer=0xc0000014a6) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000014c4 | out: pbBuffer=0xc0000014c4) returned 1
	[0208.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0208.887] GetFileType (hFile=0x170) returned 0x1
	[0208.888] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=1220) returned 1
	[0208.888] WriteFile (in: hFile=0x170, lpBuffer=0xc0000b4000*, nNumberOfBytesToWrite=0x4c4, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc0000b4000*, lpNumberOfBytesWritten=0xc0001bbccc*=0x4c4, lpOverlapped=0xc0001bbce8) returned 1
	[0208.888] GetFileType (hFile=0x170) returned 0x1
	[0208.888] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4c4, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=1220) returned 1
	[0208.888] GetFileType (hFile=0x170) returned 0x1
	[0208.889] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=1220) returned 1
	[0208.889] WriteFile (in: hFile=0x170, lpBuffer=0xc0001c3500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc0001c3500*, lpNumberOfBytesWritten=0xc0001bbccc*=0x224, lpOverlapped=0xc0001bbce8) returned 1
	[0208.889] GetFileType (hFile=0x170) returned 0x1
	[0208.889] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4c4, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=1220) returned 1
	[0208.889] CloseHandle (hObject=0x170) returned 1
	[0208.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif.egmwv")) returned 0x20
	[0208.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.891] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.896] SetEvent (hEvent=0x150) returned 1
	[0208.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf")) returned 0x20
	[0208.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF", dwFileAttributes=0x20) returned 1
	[0208.899] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0208.930] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0208.930] ReadFile (in: hFile=0xe0, lpBuffer=0xc000368800, nNumberOfBytesToRead=0x4278, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000368800*, lpNumberOfBytesRead=0xc000425cec*=0x4278, lpOverlapped=0x0) returned 1
	[0208.936] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531d0 | out: pbBuffer=0xc0000531d0) returned 1
	[0208.936] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531ea | out: pbBuffer=0xc0000531ea) returned 1
	[0208.936] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000133f02 | out: pbBuffer=0xc000133f02) returned 1
	[0208.937] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053210 | out: pbBuffer=0xc000053210) returned 1
	[0208.937] GetFileType (hFile=0xe0) returned 0x1
	[0208.937] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17016) returned 1
	[0208.937] WriteFile (in: hFile=0xe0, lpBuffer=0xc00042a000*, nNumberOfBytesToWrite=0x4278, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4278, lpOverlapped=0xc000155ce8) returned 1
	[0208.938] GetFileType (hFile=0xe0) returned 0x1
	[0208.938] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4278, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17016) returned 1
	[0208.938] GetFileType (hFile=0xe0) returned 0x1
	[0208.938] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17016) returned 1
	[0208.938] WriteFile (in: hFile=0xe0, lpBuffer=0xc00040f880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00040f880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0208.938] GetFileType (hFile=0xe0) returned 0x1
	[0208.938] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4278, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17016) returned 1
	[0208.939] CloseHandle (hObject=0xe0) returned 1
	[0208.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf.egmwv")) returned 0x20
	[0208.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.942] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0208.946] SetEvent (hEvent=0x150) returned 1
	[0208.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf")) returned 0x20
	[0208.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF", dwFileAttributes=0x20) returned 1
	[0208.947] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.990] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0208.990] ReadFile (in: hFile=0x178, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x829a, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc00038dcec*=0x829a, lpOverlapped=0x0) returned 1
	[0208.995] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0208.995] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b7a | out: pbBuffer=0xc000052b7a) returned 1
	[0208.995] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0208.995] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0208.996] GetFileType (hFile=0x178) returned 0x1
	[0208.996] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=33434) returned 1
	[0208.996] WriteFile (in: hFile=0x178, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x829a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc000155ccc*=0x829a, lpOverlapped=0xc000155ce8) returned 1
	[0208.996] GetFileType (hFile=0x178) returned 0x1
	[0208.997] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x829a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=33434) returned 1
	[0208.997] GetFileType (hFile=0x178) returned 0x1
	[0208.997] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=33434) returned 1
	[0208.997] WriteFile (in: hFile=0x178, lpBuffer=0xc0002e9880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002e9880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0208.997] GetFileType (hFile=0x178) returned 0x1
	[0208.997] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x829a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=33434) returned 1
	[0208.997] CloseHandle (hObject=0x178) returned 1
	[0208.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf.egmwv")) returned 0x20
	[0208.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.002] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.015] SetEvent (hEvent=0x5c) returned 1
	[0209.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf")) returned 0x20
	[0209.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF", dwFileAttributes=0x20) returned 1
	[0209.016] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.133] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0209.133] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002b2000, nNumberOfBytesToRead=0x3d40, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002b2000*, lpNumberOfBytesRead=0xc00038dcec*=0x3d40, lpOverlapped=0x0) returned 1
	[0209.138] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0209.138] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0209.138] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039f32 | out: pbBuffer=0xc000039f32) returned 1
	[0209.138] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039f61 | out: pbBuffer=0xc000039f61) returned 1
	[0209.138] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039fb3 | out: pbBuffer=0xc000039fb3) returned 1
	[0209.138] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0209.138] GetFileType (hFile=0xe0) returned 0x1
	[0209.138] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15680) returned 1
	[0209.139] WriteFile (in: hFile=0xe0, lpBuffer=0xc00034a000*, nNumberOfBytesToWrite=0x3d40, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3d40, lpOverlapped=0xc000155ce8) returned 1
	[0209.139] GetFileType (hFile=0xe0) returned 0x1
	[0209.139] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3d40, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15680) returned 1
	[0209.139] GetFileType (hFile=0xe0) returned 0x1
	[0209.140] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15680) returned 1
	[0209.140] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000f1180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f1180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0209.140] GetFileType (hFile=0xe0) returned 0x1
	[0209.140] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3d40, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15680) returned 1
	[0209.140] CloseHandle (hObject=0xe0) returned 1
	[0209.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf.egmwv")) returned 0x20
	[0209.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.142] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.155] SetEvent (hEvent=0x5c) returned 1
	[0209.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf")) returned 0x20
	[0209.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF", dwFileAttributes=0x20) returned 1
	[0209.156] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.187] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0209.187] ReadFile (in: hFile=0xe0, lpBuffer=0xc00030e000, nNumberOfBytesToRead=0x3d90, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesRead=0xc00016bcec*=0x3d90, lpOverlapped=0x0) returned 1
	[0209.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0209.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052e9a | out: pbBuffer=0xc000052e9a) returned 1
	[0209.193] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f8c02 | out: pbBuffer=0xc0000f8c02) returned 1
	[0209.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0209.193] GetFileType (hFile=0xe0) returned 0x1
	[0209.193] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15760) returned 1
	[0209.194] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003ba000*, nNumberOfBytesToWrite=0x3d90, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003ba000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3d90, lpOverlapped=0xc000155ce8) returned 1
	[0209.194] GetFileType (hFile=0xe0) returned 0x1
	[0209.194] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3d90, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15760) returned 1
	[0209.194] GetFileType (hFile=0xe0) returned 0x1
	[0209.194] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15760) returned 1
	[0209.195] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003a4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003a4a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0209.195] GetFileType (hFile=0xe0) returned 0x1
	[0209.196] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3d90, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15760) returned 1
	[0209.196] CloseHandle (hObject=0xe0) returned 1
	[0209.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf.egmwv")) returned 0x20
	[0209.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.199] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.202] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.203] SetEvent (hEvent=0x5c) returned 1
	[0209.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf")) returned 0x20
	[0209.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF", dwFileAttributes=0x20) returned 1
	[0209.205] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.313] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0209.313] ReadFile (in: hFile=0x170, lpBuffer=0xc000136000, nNumberOfBytesToRead=0xd04, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc000429cec*=0xd04, lpOverlapped=0x0) returned 1
	[0209.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053010 | out: pbBuffer=0xc000053010) returned 1
	[0209.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005302a | out: pbBuffer=0xc00005302a) returned 1
	[0209.319] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f9b02 | out: pbBuffer=0xc0000f9b02) returned 1
	[0209.320] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000f9b37 | out: pbBuffer=0xc0000f9b37) returned 1
	[0209.320] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000f9bca | out: pbBuffer=0xc0000f9bca) returned 1
	[0209.320] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053050 | out: pbBuffer=0xc000053050) returned 1
	[0209.320] GetFileType (hFile=0x170) returned 0x1
	[0209.320] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3332) returned 1
	[0209.321] WriteFile (in: hFile=0x170, lpBuffer=0xc00014a000*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00014a000*, lpNumberOfBytesWritten=0xc000155ccc*=0xd04, lpOverlapped=0xc000155ce8) returned 1
	[0209.321] GetFileType (hFile=0x170) returned 0x1
	[0209.321] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xd04, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3332) returned 1
	[0209.321] GetFileType (hFile=0x170) returned 0x1
	[0209.321] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3332) returned 1
	[0209.322] WriteFile (in: hFile=0x170, lpBuffer=0xc000148380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000148380*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0209.322] GetFileType (hFile=0x170) returned 0x1
	[0209.322] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xd04, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3332) returned 1
	[0209.322] CloseHandle (hObject=0x170) returned 1
	[0209.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf.egmwv")) returned 0x20
	[0209.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.327] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf")) returned 0x20
	[0209.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF", dwFileAttributes=0x20) returned 1
	[0209.334] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0209.407] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0209.407] ReadFile (in: hFile=0x178, lpBuffer=0xc000188000, nNumberOfBytesToRead=0x1b16, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000188000*, lpNumberOfBytesRead=0xc000429cec*=0x1b16, lpOverlapped=0x0) returned 1
	[0209.413] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0209.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020642a | out: pbBuffer=0xc00020642a) returned 1
	[0209.414] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0209.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0209.414] GetFileType (hFile=0x178) returned 0x1
	[0209.414] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=6934) returned 1
	[0209.414] WriteFile (in: hFile=0x178, lpBuffer=0xc000462000*, nNumberOfBytesToWrite=0x1b16, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000462000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x1b16, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.415] GetFileType (hFile=0x178) returned 0x1
	[0209.415] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1b16, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=6934) returned 1
	[0209.415] GetFileType (hFile=0x178) returned 0x1
	[0209.415] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=6934) returned 1
	[0209.415] WriteFile (in: hFile=0x178, lpBuffer=0xc000212700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000212700*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22d, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.416] GetFileType (hFile=0x178) returned 0x1
	[0209.416] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1b16, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=6934) returned 1
	[0209.416] CloseHandle (hObject=0x178) returned 1
	[0209.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf.egmwv")) returned 0x20
	[0209.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.421] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.443] SetEvent (hEvent=0x150) returned 1
	[0209.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg")) returned 0x20
	[0209.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x20) returned 1
	[0209.453] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.493] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0209.493] ReadFile (in: hFile=0x170, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0x60b7, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc000429cec*=0x60b7, lpOverlapped=0x0) returned 1
	[0209.499] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206720 | out: pbBuffer=0xc000206720) returned 1
	[0209.499] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020673a | out: pbBuffer=0xc00020673a) returned 1
	[0209.499] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00023d002 | out: pbBuffer=0xc00023d002) returned 1
	[0209.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206760 | out: pbBuffer=0xc000206760) returned 1
	[0209.500] GetFileType (hFile=0x170) returned 0x1
	[0209.500] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=24759) returned 1
	[0209.500] WriteFile (in: hFile=0x170, lpBuffer=0xc0000e2000*, nNumberOfBytesToWrite=0x60b7, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x60b7, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.501] GetFileType (hFile=0x170) returned 0x1
	[0209.501] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x60b7, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=24759) returned 1
	[0209.502] GetFileType (hFile=0x170) returned 0x1
	[0209.502] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=24759) returned 1
	[0209.502] WriteFile (in: hFile=0x170, lpBuffer=0xc00015b880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00015b880*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x230, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.502] GetFileType (hFile=0x170) returned 0x1
	[0209.502] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x60b7, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=24759) returned 1
	[0209.503] CloseHandle (hObject=0x170) returned 1
	[0209.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.egmwv")) returned 0x20
	[0209.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.507] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.511] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.522] SetEvent (hEvent=0x150) returned 1
	[0209.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg")) returned 0x20
	[0209.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x20) returned 1
	[0209.527] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.562] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0209.562] ReadFile (in: hFile=0x170, lpBuffer=0xc0001bf000, nNumberOfBytesToRead=0x4752, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001bf000*, lpNumberOfBytesRead=0xc000169cec*=0x4752, lpOverlapped=0x0) returned 1
	[0209.575] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068b0 | out: pbBuffer=0xc0002068b0) returned 1
	[0209.575] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00023dc02 | out: pbBuffer=0xc00023dc02) returned 1
	[0209.575] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068f0 | out: pbBuffer=0xc0002068f0) returned 1
	[0209.575] GetFileType (hFile=0x170) returned 0x1
	[0209.576] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=18258) returned 1
	[0209.576] WriteFile (in: hFile=0x170, lpBuffer=0xc000372000*, nNumberOfBytesToWrite=0x4752, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000372000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x4752, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.577] GetFileType (hFile=0x170) returned 0x1
	[0209.577] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4752, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=18258) returned 1
	[0209.577] GetFileType (hFile=0x170) returned 0x1
	[0209.577] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=18258) returned 1
	[0209.577] WriteFile (in: hFile=0x170, lpBuffer=0xc0000eb180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0000eb180*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22d, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.578] GetFileType (hFile=0x170) returned 0x1
	[0209.578] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4752, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=18258) returned 1
	[0209.578] CloseHandle (hObject=0x170) returned 1
	[0209.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.egmwv")) returned 0x20
	[0209.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.582] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.584] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.590] SetEvent (hEvent=0x150) returned 1
	[0209.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf")) returned 0x20
	[0209.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x20) returned 1
	[0209.592] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.688] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0209.688] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002a4a80, nNumberOfBytesToRead=0x65e6, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a4a80*, lpNumberOfBytesRead=0xc000423cec*=0x65e6, lpOverlapped=0x0) returned 1
	[0209.703] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a40 | out: pbBuffer=0xc000206a40) returned 1
	[0209.703] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fcb02 | out: pbBuffer=0xc0000fcb02) returned 1
	[0209.703] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a80 | out: pbBuffer=0xc000206a80) returned 1
	[0209.704] GetFileType (hFile=0xe0) returned 0x1
	[0209.704] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=26086) returned 1
	[0209.705] WriteFile (in: hFile=0xe0, lpBuffer=0xc000120000*, nNumberOfBytesToWrite=0x65e6, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000120000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x65e6, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.705] GetFileType (hFile=0xe0) returned 0x1
	[0209.705] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x65e6, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=26086) returned 1
	[0209.706] GetFileType (hFile=0xe0) returned 0x1
	[0209.706] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=26086) returned 1
	[0209.706] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001e6a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0001e6a80*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x233, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.706] GetFileType (hFile=0xe0) returned 0x1
	[0209.706] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x65e6, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=26086) returned 1
	[0209.707] CloseHandle (hObject=0xe0) returned 1
	[0209.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf.egmwv")) returned 0x20
	[0209.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.715] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.721] SetEvent (hEvent=0x150) returned 1
	[0209.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg")) returned 0x20
	[0209.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x20) returned 1
	[0209.724] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.845] SetEvent (hEvent=0x70) returned 1
	[0209.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.846] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0209.847] ReadFile (in: hFile=0x170, lpBuffer=0xc000416000, nNumberOfBytesToRead=0x1b11, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000416000*, lpNumberOfBytesRead=0xc000423cec*=0x1b11, lpOverlapped=0x0) returned 1
	[0209.853] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0209.853] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215702 | out: pbBuffer=0xc000215702) returned 1
	[0209.854] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0209.854] GetFileType (hFile=0x170) returned 0x1
	[0209.854] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6929) returned 1
	[0209.854] WriteFile (in: hFile=0x170, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x1b11, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1b11, lpOverlapped=0xc000155ce8) returned 1
	[0209.855] GetFileType (hFile=0x170) returned 0x1
	[0209.855] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1b11, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6929) returned 1
	[0209.855] GetFileType (hFile=0x170) returned 0x1
	[0209.855] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6929) returned 1
	[0209.856] WriteFile (in: hFile=0x170, lpBuffer=0xc000170e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000170e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0209.856] GetFileType (hFile=0x170) returned 0x1
	[0209.856] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1b11, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6929) returned 1
	[0209.856] CloseHandle (hObject=0x170) returned 1
	[0209.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.egmwv")) returned 0x20
	[0209.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.861] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.885] SetEvent (hEvent=0xc0) returned 1
	[0209.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg")) returned 0x20
	[0209.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x20) returned 1
	[0209.887] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.914] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0209.914] ReadFile (in: hFile=0xe0, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x25c7, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc00016bcec*=0x25c7, lpOverlapped=0x0) returned 1
	[0209.923] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0209.923] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0209.923] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000174a02 | out: pbBuffer=0xc000174a02) returned 1
	[0209.923] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0209.924] GetFileType (hFile=0xe0) returned 0x1
	[0209.924] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=9671) returned 1
	[0209.924] WriteFile (in: hFile=0xe0, lpBuffer=0xc000072000*, nNumberOfBytesToWrite=0x25c7, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc000072000*, lpNumberOfBytesWritten=0xc000231ccc*=0x25c7, lpOverlapped=0xc000231ce8) returned 1
	[0209.925] GetFileType (hFile=0xe0) returned 0x1
	[0209.925] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x25c7, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=9671) returned 1
	[0209.925] GetFileType (hFile=0xe0) returned 0x1
	[0209.925] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=9671) returned 1
	[0209.925] WriteFile (in: hFile=0xe0, lpBuffer=0xc000393500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc000393500*, lpNumberOfBytesWritten=0xc000231ccc*=0x230, lpOverlapped=0xc000231ce8) returned 1
	[0209.926] GetFileType (hFile=0xe0) returned 0x1
	[0209.926] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x25c7, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=9671) returned 1
	[0209.926] CloseHandle (hObject=0xe0) returned 1
	[0209.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.egmwv")) returned 0x20
	[0209.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.928] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.937] SetEvent (hEvent=0xc0) returned 1
	[0209.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg")) returned 0x20
	[0209.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x20) returned 1
	[0209.944] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.972] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0209.972] ReadFile (in: hFile=0x170, lpBuffer=0xc0001e8000, nNumberOfBytesToRead=0x3b29, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e8000*, lpNumberOfBytesRead=0xc000387cec*=0x3b29, lpOverlapped=0x0) returned 1
	[0209.978] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0209.978] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0209.979] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039702 | out: pbBuffer=0xc000039702) returned 1
	[0209.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0209.979] GetFileType (hFile=0x170) returned 0x1
	[0209.979] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000269ca0*=15145) returned 1
	[0209.979] WriteFile (in: hFile=0x170, lpBuffer=0xc0000fa000*, nNumberOfBytesToWrite=0x3b29, lpNumberOfBytesWritten=0xc000269ccc, lpOverlapped=0xc000269ce8 | out: lpBuffer=0xc0000fa000*, lpNumberOfBytesWritten=0xc000269ccc*=0x3b29, lpOverlapped=0xc000269ce8) returned 1
	[0209.980] GetFileType (hFile=0x170) returned 0x1
	[0209.980] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3b29, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000269ca0*=15145) returned 1
	[0209.980] GetFileType (hFile=0x170) returned 0x1
	[0209.981] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000269ca0*=15145) returned 1
	[0209.981] WriteFile (in: hFile=0x170, lpBuffer=0xc000271500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000269ccc, lpOverlapped=0xc000269ce8 | out: lpBuffer=0xc000271500*, lpNumberOfBytesWritten=0xc000269ccc*=0x230, lpOverlapped=0xc000269ce8) returned 1
	[0209.981] GetFileType (hFile=0x170) returned 0x1
	[0209.981] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3b29, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000269ca0*=15145) returned 1
	[0209.981] CloseHandle (hObject=0x170) returned 1
	[0209.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.egmwv")) returned 0x20
	[0209.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.983] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0209.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf")) returned 0x20
	[0209.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x20) returned 1
	[0209.989] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.026] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0210.026] ReadFile (in: hFile=0x178, lpBuffer=0xc0003c6000, nNumberOfBytesToRead=0x5754, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c6000*, lpNumberOfBytesRead=0xc000387cec*=0x5754, lpOverlapped=0x0) returned 1
	[0210.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414420 | out: pbBuffer=0xc000414420) returned 1
	[0210.032] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003d0502 | out: pbBuffer=0xc0003d0502) returned 1
	[0210.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003d054c | out: pbBuffer=0xc0003d054c) returned 1
	[0210.033] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414460 | out: pbBuffer=0xc000414460) returned 1
	[0210.033] GetFileType (hFile=0x178) returned 0x1
	[0210.033] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=22356) returned 1
	[0210.033] WriteFile (in: hFile=0x178, lpBuffer=0xc000302000*, nNumberOfBytesToWrite=0x5754, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc000302000*, lpNumberOfBytesWritten=0xc000231ccc*=0x5754, lpOverlapped=0xc000231ce8) returned 1
	[0210.034] GetFileType (hFile=0x178) returned 0x1
	[0210.034] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5754, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=22356) returned 1
	[0210.034] GetFileType (hFile=0x178) returned 0x1
	[0210.034] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=22356) returned 1
	[0210.035] WriteFile (in: hFile=0x178, lpBuffer=0xc0002e8700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc0002e8700*, lpNumberOfBytesWritten=0xc000231ccc*=0x230, lpOverlapped=0xc000231ce8) returned 1
	[0210.035] GetFileType (hFile=0x178) returned 0x1
	[0210.035] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5754, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=22356) returned 1
	[0210.035] CloseHandle (hObject=0x178) returned 1
	[0210.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf.egmwv")) returned 0x20
	[0210.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.040] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg")) returned 0x20
	[0210.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x20) returned 1
	[0210.047] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.089] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0210.090] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0xfcff, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000387cec*=0xfcff, lpOverlapped=0x0) returned 1
	[0210.096] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0210.097] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0210.097] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0210.097] GetFileType (hFile=0xe0) returned 0x1
	[0210.098] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001efca0*=64767) returned 1
	[0210.098] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000aa000*, nNumberOfBytesToWrite=0xfcff, lpNumberOfBytesWritten=0xc0001efccc, lpOverlapped=0xc0001efce8 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesWritten=0xc0001efccc*=0xfcff, lpOverlapped=0xc0001efce8) returned 1
	[0210.099] GetFileType (hFile=0xe0) returned 0x1
	[0210.099] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xfcff, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001efca0*=64767) returned 1
	[0210.099] GetFileType (hFile=0xe0) returned 0x1
	[0210.099] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001efca0*=64767) returned 1
	[0210.099] WriteFile (in: hFile=0xe0, lpBuffer=0xc00041d500*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0xc0001efccc, lpOverlapped=0xc0001efce8 | out: lpBuffer=0xc00041d500*, lpNumberOfBytesWritten=0xc0001efccc*=0x245, lpOverlapped=0xc0001efce8) returned 1
	[0210.100] GetFileType (hFile=0xe0) returned 0x1
	[0210.100] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xfcff, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001efca0*=64767) returned 1
	[0210.100] CloseHandle (hObject=0xe0) returned 1
	[0210.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.egmwv")) returned 0x20
	[0210.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.103] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.120] SetEvent (hEvent=0x150) returned 1
	[0210.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf")) returned 0x20
	[0210.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x20) returned 1
	[0210.123] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.170] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0210.170] ReadFile (in: hFile=0xe0, lpBuffer=0xc00040a000, nNumberOfBytesToRead=0x27d0, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesRead=0xc00038dcec*=0x27d0, lpOverlapped=0x0) returned 1
	[0210.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0210.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0210.176] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215102 | out: pbBuffer=0xc000215102) returned 1
	[0210.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0210.176] GetFileType (hFile=0xe0) returned 0x1
	[0210.176] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ebca0*=10192) returned 1
	[0210.177] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004c6000*, nNumberOfBytesToWrite=0x27d0, lpNumberOfBytesWritten=0xc0001ebccc, lpOverlapped=0xc0001ebce8 | out: lpBuffer=0xc0004c6000*, lpNumberOfBytesWritten=0xc0001ebccc*=0x27d0, lpOverlapped=0xc0001ebce8) returned 1
	[0210.177] GetFileType (hFile=0xe0) returned 0x1
	[0210.177] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x27d0, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ebca0*=10192) returned 1
	[0210.177] GetFileType (hFile=0xe0) returned 0x1
	[0210.178] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ebca0*=10192) returned 1
	[0210.178] WriteFile (in: hFile=0xe0, lpBuffer=0xc000395500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001ebccc, lpOverlapped=0xc0001ebce8 | out: lpBuffer=0xc000395500*, lpNumberOfBytesWritten=0xc0001ebccc*=0x22d, lpOverlapped=0xc0001ebce8) returned 1
	[0210.178] GetFileType (hFile=0xe0) returned 0x1
	[0210.178] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x27d0, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ebca0*=10192) returned 1
	[0210.178] CloseHandle (hObject=0xe0) returned 1
	[0210.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf.egmwv")) returned 0x20
	[0210.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.181] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.196] SetEvent (hEvent=0x150) returned 1
	[0210.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf")) returned 0x20
	[0210.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x20) returned 1
	[0210.198] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.228] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0210.228] ReadFile (in: hFile=0xe0, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0xe392, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc00016dcec*=0xe392, lpOverlapped=0x0) returned 1
	[0210.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0210.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b7a | out: pbBuffer=0xc000052b7a) returned 1
	[0210.236] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0210.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0210.237] GetFileType (hFile=0xe0) returned 0x1
	[0210.237] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=58258) returned 1
	[0210.237] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000f4000*, nNumberOfBytesToWrite=0xe392, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesWritten=0xc000155ccc*=0xe392, lpOverlapped=0xc000155ce8) returned 1
	[0210.238] GetFileType (hFile=0xe0) returned 0x1
	[0210.238] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xe392, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=58258) returned 1
	[0210.238] GetFileType (hFile=0xe0) returned 0x1
	[0210.238] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=58258) returned 1
	[0210.239] WriteFile (in: hFile=0xe0, lpBuffer=0xc00024b880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00024b880*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0210.239] GetFileType (hFile=0xe0) returned 0x1
	[0210.239] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xe392, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=58258) returned 1
	[0210.239] CloseHandle (hObject=0xe0) returned 1
	[0210.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf.egmwv")) returned 0x20
	[0210.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.241] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf")) returned 0x20
	[0210.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x20) returned 1
	[0210.246] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.282] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0210.282] ReadFile (in: hFile=0x178, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x2610, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc00016dcec*=0x2610, lpOverlapped=0x0) returned 1
	[0210.287] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0210.287] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142aa | out: pbBuffer=0xc0004142aa) returned 1
	[0210.287] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002b1502 | out: pbBuffer=0xc0002b1502) returned 1
	[0210.287] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b1549 | out: pbBuffer=0xc0002b1549) returned 1
	[0210.287] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b15e9 | out: pbBuffer=0xc0002b15e9) returned 1
	[0210.288] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0210.288] GetFileType (hFile=0x178) returned 0x1
	[0210.288] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=9744) returned 1
	[0210.288] WriteFile (in: hFile=0x178, lpBuffer=0xc000372000*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000372000*, lpNumberOfBytesWritten=0xc00019dccc*=0x2610, lpOverlapped=0xc00019dce8) returned 1
	[0210.288] GetFileType (hFile=0x178) returned 0x1
	[0210.289] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2610, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=9744) returned 1
	[0210.289] GetFileType (hFile=0x178) returned 0x1
	[0210.289] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=9744) returned 1
	[0210.289] WriteFile (in: hFile=0x178, lpBuffer=0xc000074e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000074e00*, lpNumberOfBytesWritten=0xc00019dccc*=0x224, lpOverlapped=0xc00019dce8) returned 1
	[0210.289] GetFileType (hFile=0x178) returned 0x1
	[0210.290] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2610, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=9744) returned 1
	[0210.290] CloseHandle (hObject=0x178) returned 1
	[0210.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf.egmwv")) returned 0x20
	[0210.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.294] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf")) returned 0x20
	[0210.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x20) returned 1
	[0210.300] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.333] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.333] ReadFile (in: hFile=0x170, lpBuffer=0xc000260000, nNumberOfBytesToRead=0xe16, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000260000*, lpNumberOfBytesRead=0xc000429cec*=0xe16, lpOverlapped=0x0) returned 1
	[0210.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0210.339] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214902 | out: pbBuffer=0xc000214902) returned 1
	[0210.340] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214944 | out: pbBuffer=0xc000214944) returned 1
	[0210.340] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0210.340] GetFileType (hFile=0x170) returned 0x1
	[0210.340] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3606) returned 1
	[0210.340] WriteFile (in: hFile=0x170, lpBuffer=0xc000284000*, nNumberOfBytesToWrite=0xe16, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000284000*, lpNumberOfBytesWritten=0xc000155ccc*=0xe16, lpOverlapped=0xc000155ce8) returned 1
	[0210.340] GetFileType (hFile=0x170) returned 0x1
	[0210.341] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe16, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3606) returned 1
	[0210.341] GetFileType (hFile=0x170) returned 0x1
	[0210.341] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3606) returned 1
	[0210.341] WriteFile (in: hFile=0x170, lpBuffer=0xc000269180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000269180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0210.342] GetFileType (hFile=0x170) returned 0x1
	[0210.342] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe16, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3606) returned 1
	[0210.342] CloseHandle (hObject=0x170) returned 1
	[0210.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf.egmwv")) returned 0x20
	[0210.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.345] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf")) returned 0x20
	[0210.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x20) returned 1
	[0210.382] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.411] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.411] ReadFile (in: hFile=0xe0, lpBuffer=0xc000456000, nNumberOfBytesToRead=0x4ae, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000456000*, lpNumberOfBytesRead=0xc000429cec*=0x4ae, lpOverlapped=0x0) returned 1
	[0210.417] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0210.417] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215702 | out: pbBuffer=0xc000215702) returned 1
	[0210.417] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002157e6 | out: pbBuffer=0xc0002157e6) returned 1
	[0210.417] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0210.417] GetFileType (hFile=0xe0) returned 0x1
	[0210.418] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1198) returned 1
	[0210.418] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003b2000*, nNumberOfBytesToWrite=0x4ae, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003b2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4ae, lpOverlapped=0xc000155ce8) returned 1
	[0210.418] GetFileType (hFile=0xe0) returned 0x1
	[0210.418] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4ae, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1198) returned 1
	[0210.419] GetFileType (hFile=0xe0) returned 0x1
	[0210.419] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1198) returned 1
	[0210.419] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003aea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003aea80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0210.419] GetFileType (hFile=0xe0) returned 0x1
	[0210.419] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4ae, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1198) returned 1
	[0210.419] CloseHandle (hObject=0xe0) returned 1
	[0210.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf.egmwv")) returned 0x20
	[0210.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.422] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.426] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.446] SetEvent (hEvent=0x148) returned 1
	[0210.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf")) returned 0x20
	[0210.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x20) returned 1
	[0210.448] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.477] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0210.477] ReadFile (in: hFile=0xe0, lpBuffer=0xc000351300, nNumberOfBytesToRead=0x1016, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000351300*, lpNumberOfBytesRead=0xc000389cec*=0x1016, lpOverlapped=0x0) returned 1
	[0210.483] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65c0 | out: pbBuffer=0xc0002b65c0) returned 1
	[0210.483] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000433202 | out: pbBuffer=0xc000433202) returned 1
	[0210.484] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6600 | out: pbBuffer=0xc0002b6600) returned 1
	[0210.484] GetFileType (hFile=0xe0) returned 0x1
	[0210.484] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=4118) returned 1
	[0210.485] WriteFile (in: hFile=0xe0, lpBuffer=0xc000132000*, nNumberOfBytesToWrite=0x1016, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000132000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x1016, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.485] GetFileType (hFile=0xe0) returned 0x1
	[0210.485] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1016, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=4118) returned 1
	[0210.485] GetFileType (hFile=0xe0) returned 0x1
	[0210.486] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=4118) returned 1
	[0210.486] WriteFile (in: hFile=0xe0, lpBuffer=0xc000134000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000134000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x224, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.486] GetFileType (hFile=0xe0) returned 0x1
	[0210.486] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1016, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=4118) returned 1
	[0210.486] CloseHandle (hObject=0xe0) returned 1
	[0210.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf.egmwv")) returned 0x20
	[0210.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.489] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.493] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.495] SetEvent (hEvent=0x148) returned 1
	[0210.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg")) returned 0x20
	[0210.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x20) returned 1
	[0210.497] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.542] SetEvent (hEvent=0x70) returned 1
	[0210.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.544] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0210.544] ReadFile (in: hFile=0x178, lpBuffer=0xc0004e2000, nNumberOfBytesToRead=0x5fd0, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004e2000*, lpNumberOfBytesRead=0xc0002d3cec*=0x5fd0, lpOverlapped=0x0) returned 1
	[0210.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6100 | out: pbBuffer=0xc0002b6100) returned 1
	[0210.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b611a | out: pbBuffer=0xc0002b611a) returned 1
	[0210.550] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0210.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6140 | out: pbBuffer=0xc0002b6140) returned 1
	[0210.550] GetFileType (hFile=0x178) returned 0x1
	[0210.550] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24528) returned 1
	[0210.551] WriteFile (in: hFile=0x178, lpBuffer=0xc00042a000*, nNumberOfBytesToWrite=0x5fd0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5fd0, lpOverlapped=0xc000155ce8) returned 1
	[0210.551] GetFileType (hFile=0x178) returned 0x1
	[0210.551] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5fd0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24528) returned 1
	[0210.551] GetFileType (hFile=0x178) returned 0x1
	[0210.551] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24528) returned 1
	[0210.552] WriteFile (in: hFile=0x178, lpBuffer=0xc00048ae00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00048ae00*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0210.552] GetFileType (hFile=0x178) returned 0x1
	[0210.552] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5fd0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24528) returned 1
	[0210.552] CloseHandle (hObject=0x178) returned 1
	[0210.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.egmwv")) returned 0x20
	[0210.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.557] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg")) returned 0x20
	[0210.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x20) returned 1
	[0210.563] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.595] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0210.595] ReadFile (in: hFile=0x170, lpBuffer=0xc00038e000, nNumberOfBytesToRead=0xab74, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00038e000*, lpNumberOfBytesRead=0xc000425cec*=0xab74, lpOverlapped=0x0) returned 1
	[0210.602] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065b0 | out: pbBuffer=0xc0002065b0) returned 1
	[0210.603] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065ca | out: pbBuffer=0xc0002065ca) returned 1
	[0210.603] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003bff02 | out: pbBuffer=0xc0003bff02) returned 1
	[0210.603] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bff80 | out: pbBuffer=0xc0003bff80) returned 1
	[0210.603] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065f0 | out: pbBuffer=0xc0002065f0) returned 1
	[0210.604] GetFileType (hFile=0x170) returned 0x1
	[0210.604] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=43892) returned 1
	[0210.604] WriteFile (in: hFile=0x170, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0xab74, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0xab74, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.605] GetFileType (hFile=0x170) returned 0x1
	[0210.605] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xab74, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=43892) returned 1
	[0210.605] GetFileType (hFile=0x170) returned 0x1
	[0210.605] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=43892) returned 1
	[0210.605] WriteFile (in: hFile=0x170, lpBuffer=0xc000384700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000384700*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x236, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.606] GetFileType (hFile=0x170) returned 0x1
	[0210.606] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xab74, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=43892) returned 1
	[0210.606] CloseHandle (hObject=0x170) returned 1
	[0210.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.egmwv")) returned 0x20
	[0210.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.612] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.621] SetEvent (hEvent=0xe4) returned 1
	[0210.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif")) returned 0x20
	[0210.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x20) returned 1
	[0210.629] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.655] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0210.655] ReadFile (in: hFile=0x178, lpBuffer=0xc0001bc000, nNumberOfBytesToRead=0x8ada, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001bc000*, lpNumberOfBytesRead=0xc000389cec*=0x8ada, lpOverlapped=0x0) returned 1
	[0210.661] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0210.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0210.662] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039a02 | out: pbBuffer=0xc000039a02) returned 1
	[0210.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039a08 | out: pbBuffer=0xc000039a08) returned 1
	[0210.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039ad4 | out: pbBuffer=0xc000039ad4) returned 1
	[0210.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0210.662] GetFileType (hFile=0x178) returned 0x1
	[0210.663] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000457ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000457ca0*=35546) returned 1
	[0210.663] WriteFile (in: hFile=0x178, lpBuffer=0xc00024a000*, nNumberOfBytesToWrite=0x8ada, lpNumberOfBytesWritten=0xc000457ccc, lpOverlapped=0xc000457ce8 | out: lpBuffer=0xc00024a000*, lpNumberOfBytesWritten=0xc000457ccc*=0x8ada, lpOverlapped=0xc000457ce8) returned 1
	[0210.664] GetFileType (hFile=0x178) returned 0x1
	[0210.664] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x8ada, lpNewFilePointer=0xc000457ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000457ca0*=35546) returned 1
	[0210.664] GetFileType (hFile=0x178) returned 0x1
	[0210.664] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000457ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000457ca0*=35546) returned 1
	[0210.664] WriteFile (in: hFile=0x178, lpBuffer=0xc000115500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000457ccc, lpOverlapped=0xc000457ce8 | out: lpBuffer=0xc000115500*, lpNumberOfBytesWritten=0xc000457ccc*=0x233, lpOverlapped=0xc000457ce8) returned 1
	[0210.664] GetFileType (hFile=0x178) returned 0x1
	[0210.665] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x8ada, lpNewFilePointer=0xc000457ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000457ca0*=35546) returned 1
	[0210.665] CloseHandle (hObject=0x178) returned 1
	[0210.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif.egmwv")) returned 0x20
	[0210.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.668] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.671] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.679] SetEvent (hEvent=0xe4) returned 1
	[0210.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif")) returned 0x20
	[0210.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x20) returned 1
	[0210.684] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.721] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0210.721] ReadFile (in: hFile=0xe0, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x3801, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc000389cec*=0x3801, lpOverlapped=0x0) returned 1
	[0210.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0210.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0210.726] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001602 | out: pbBuffer=0xc000001602) returned 1
	[0210.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000163a | out: pbBuffer=0xc00000163a) returned 1
	[0210.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001670 | out: pbBuffer=0xc000001670) returned 1
	[0210.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0210.726] GetFileType (hFile=0xe0) returned 0x1
	[0210.726] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=14337) returned 1
	[0210.727] WriteFile (in: hFile=0xe0, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0x3801, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x3801, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.727] GetFileType (hFile=0xe0) returned 0x1
	[0210.727] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3801, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=14337) returned 1
	[0210.727] GetFileType (hFile=0xe0) returned 0x1
	[0210.728] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=14337) returned 1
	[0210.728] WriteFile (in: hFile=0xe0, lpBuffer=0xc000346a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000346a80*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x224, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.728] GetFileType (hFile=0xe0) returned 0x1
	[0210.728] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3801, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=14337) returned 1
	[0210.728] CloseHandle (hObject=0xe0) returned 1
	[0210.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif.egmwv")) returned 0x20
	[0210.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.730] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.733] SetEvent (hEvent=0xc0) returned 1
	[0210.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif")) returned 0x20
	[0210.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x20) returned 1
	[0210.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.765] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0210.765] ReadFile (in: hFile=0x170, lpBuffer=0xc0003e6000, nNumberOfBytesToRead=0x84b7, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesRead=0xc00016bcec*=0x84b7, lpOverlapped=0x0) returned 1
	[0210.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0210.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0210.771] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000432c02 | out: pbBuffer=0xc000432c02) returned 1
	[0210.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0210.771] GetFileType (hFile=0x170) returned 0x1
	[0210.772] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=33975) returned 1
	[0210.772] WriteFile (in: hFile=0x170, lpBuffer=0xc000364000*, nNumberOfBytesToWrite=0x84b7, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000364000*, lpNumberOfBytesWritten=0xc000155ccc*=0x84b7, lpOverlapped=0xc000155ce8) returned 1
	[0210.772] GetFileType (hFile=0x170) returned 0x1
	[0210.773] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x84b7, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=33975) returned 1
	[0210.773] GetFileType (hFile=0x170) returned 0x1
	[0210.773] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=33975) returned 1
	[0210.773] WriteFile (in: hFile=0x170, lpBuffer=0xc000391500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000391500*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0210.773] GetFileType (hFile=0x170) returned 0x1
	[0210.773] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x84b7, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=33975) returned 1
	[0210.773] CloseHandle (hObject=0x170) returned 1
	[0210.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif.egmwv")) returned 0x20
	[0210.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.777] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.830] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.834] SetEvent (hEvent=0xc0) returned 1
	[0210.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif")) returned 0x20
	[0210.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x20) returned 1
	[0210.835] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.865] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0210.865] ReadFile (in: hFile=0x178, lpBuffer=0xc000120000, nNumberOfBytesToRead=0x1367, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000120000*, lpNumberOfBytesRead=0xc000169cec*=0x1367, lpOverlapped=0x0) returned 1
	[0210.870] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0210.870] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0210.870] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000433802 | out: pbBuffer=0xc000433802) returned 1
	[0210.870] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000433886 | out: pbBuffer=0xc000433886) returned 1
	[0210.870] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0210.870] GetFileType (hFile=0x178) returned 0x1
	[0210.871] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4967) returned 1
	[0210.871] WriteFile (in: hFile=0x178, lpBuffer=0xc0000aa000*, nNumberOfBytesToWrite=0x1367, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1367, lpOverlapped=0xc000155ce8) returned 1
	[0210.871] GetFileType (hFile=0x178) returned 0x1
	[0210.871] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1367, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4967) returned 1
	[0210.872] GetFileType (hFile=0x178) returned 0x1
	[0210.872] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4967) returned 1
	[0210.872] WriteFile (in: hFile=0x178, lpBuffer=0xc000310e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000310e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0210.872] GetFileType (hFile=0x178) returned 0x1
	[0210.872] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1367, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4967) returned 1
	[0210.872] CloseHandle (hObject=0x178) returned 1
	[0210.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif.egmwv")) returned 0x20
	[0210.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.877] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.892] SetEvent (hEvent=0xc0) returned 1
	[0210.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf")) returned 0x20
	[0210.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x20) returned 1
	[0210.895] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.921] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0210.921] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002f2800, nNumberOfBytesToRead=0x45be, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f2800*, lpNumberOfBytesRead=0xc00038dcec*=0x45be, lpOverlapped=0x0) returned 1
	[0210.927] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206740 | out: pbBuffer=0xc000206740) returned 1
	[0210.927] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003ba702 | out: pbBuffer=0xc0003ba702) returned 1
	[0210.927] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206780 | out: pbBuffer=0xc000206780) returned 1
	[0210.927] GetFileType (hFile=0xe0) returned 0x1
	[0210.927] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=17854) returned 1
	[0210.927] WriteFile (in: hFile=0xe0, lpBuffer=0xc00012c000*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00012c000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x45be, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.928] GetFileType (hFile=0xe0) returned 0x1
	[0210.928] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x45be, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=17854) returned 1
	[0210.928] GetFileType (hFile=0xe0) returned 0x1
	[0210.928] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=17854) returned 1
	[0210.929] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000e7880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0000e7880*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x233, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.929] GetFileType (hFile=0xe0) returned 0x1
	[0210.929] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x45be, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=17854) returned 1
	[0210.929] CloseHandle (hObject=0xe0) returned 1
	[0210.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf.egmwv")) returned 0x20
	[0210.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.931] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.944] SetEvent (hEvent=0x15c) returned 1
	[0210.944] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp")) returned 0x20
	[0210.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x20) returned 1
	[0210.953] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp.egmwv"), dwFlags=0x1) returned 1
	[0210.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.974] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.974] ReadFile (in: hFile=0x170, lpBuffer=0xc000462000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000462000*, lpNumberOfBytesRead=0xc000429cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0210.982] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6120 | out: pbBuffer=0xc0002b6120) returned 1
	[0210.982] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b613a | out: pbBuffer=0xc0002b613a) returned 1
	[0210.982] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214e02 | out: pbBuffer=0xc000214e02) returned 1
	[0210.982] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6160 | out: pbBuffer=0xc0002b6160) returned 1
	[0210.982] GetFileType (hFile=0x170) returned 0x1
	[0210.983] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=32184) returned 1
	[0210.983] WriteFile (in: hFile=0x170, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x7db8, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.984] GetFileType (hFile=0x170) returned 0x1
	[0210.984] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=32184) returned 1
	[0210.984] GetFileType (hFile=0x170) returned 0x1
	[0210.984] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=32184) returned 1
	[0210.984] WriteFile (in: hFile=0x170, lpBuffer=0xc00028b500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc00028b500*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x236, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.984] GetFileType (hFile=0x170) returned 0x1
	[0210.985] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=32184) returned 1
	[0210.985] CloseHandle (hObject=0x170) returned 1
	[0210.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp.egmwv")) returned 0x20
	[0210.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0210.987] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.990] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0210.993] SetEvent (hEvent=0x150) returned 1
	[0210.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp")) returned 0x20
	[0210.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP", dwFileAttributes=0x20) returned 1
	[0210.994] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.020] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0211.020] ReadFile (in: hFile=0xe0, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc000387cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0211.025] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0211.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0211.026] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000376102 | out: pbBuffer=0xc000376102) returned 1
	[0211.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000376136 | out: pbBuffer=0xc000376136) returned 1
	[0211.026] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0211.026] GetFileType (hFile=0xe0) returned 0x1
	[0211.026] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.027] WriteFile (in: hFile=0xe0, lpBuffer=0xc000118000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000118000*, lpNumberOfBytesWritten=0xc000351ccc*=0x7db8, lpOverlapped=0xc000351ce8) returned 1
	[0211.027] GetFileType (hFile=0xe0) returned 0x1
	[0211.027] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.027] GetFileType (hFile=0xe0) returned 0x1
	[0211.028] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.028] WriteFile (in: hFile=0xe0, lpBuffer=0xc00043ce00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc00043ce00*, lpNumberOfBytesWritten=0xc000351ccc*=0x236, lpOverlapped=0xc000351ce8) returned 1
	[0211.028] GetFileType (hFile=0xe0) returned 0x1
	[0211.028] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.028] CloseHandle (hObject=0xe0) returned 1
	[0211.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp.egmwv")) returned 0x20
	[0211.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.033] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0211.043] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0211.065] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0211.085] SetEvent (hEvent=0xe4) returned 1
	[0211.086] SetEvent (hEvent=0xc0) returned 1
	[0211.086] SetEvent (hEvent=0x5c) returned 1
	[0211.086] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0211.089] SetEvent (hEvent=0xe4) returned 1
	[0211.089] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0211.113] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0211.374] SetEvent (hEvent=0x150) returned 1
	[0211.374] SetEvent (hEvent=0x5c) returned 1
	[0211.374] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0211.631] SetEvent (hEvent=0xe4) returned 1
	[0211.631] SetEvent (hEvent=0x150) returned 1
	[0211.631] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0211.930] SetEvent (hEvent=0x150) returned 1
	[0211.930] SetEvent (hEvent=0xe4) returned 1
	[0211.930] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0212.190] SetEvent (hEvent=0x150) returned 1
	[0212.190] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0212.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf")) returned 0x20
	[0212.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF", dwFileAttributes=0x20) returned 1
	[0212.564] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0212.567] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0212.729] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0212.729] ReadFile (in: hFile=0x164, lpBuffer=0xc0003be000, nNumberOfBytesToRead=0x5bfc, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003be000*, lpNumberOfBytesRead=0xc0002d7cec*=0x5bfc, lpOverlapped=0x0) returned 1
	[0212.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414780 | out: pbBuffer=0xc000414780) returned 1
	[0212.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041479a | out: pbBuffer=0xc00041479a) returned 1
	[0212.736] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00050ad02 | out: pbBuffer=0xc00050ad02) returned 1
	[0212.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00050ad5c | out: pbBuffer=0xc00050ad5c) returned 1
	[0212.737] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004147c0 | out: pbBuffer=0xc0004147c0) returned 1
	[0212.737] GetFileType (hFile=0x164) returned 0x1
	[0212.737] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=23548) returned 1
	[0212.737] WriteFile (in: hFile=0x164, lpBuffer=0xc000406000*, nNumberOfBytesToWrite=0x5bfc, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc000406000*, lpNumberOfBytesWritten=0xc000373ccc*=0x5bfc, lpOverlapped=0xc000373ce8) returned 1
	[0212.738] GetFileType (hFile=0x164) returned 0x1
	[0212.738] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x5bfc, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=23548) returned 1
	[0212.738] GetFileType (hFile=0x164) returned 0x1
	[0212.739] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=23548) returned 1
	[0212.739] WriteFile (in: hFile=0x164, lpBuffer=0xc00040e000*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc00040e000*, lpNumberOfBytesWritten=0xc000373ccc*=0x239, lpOverlapped=0xc000373ce8) returned 1
	[0212.739] GetFileType (hFile=0x164) returned 0x1
	[0212.739] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x5bfc, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=23548) returned 1
	[0212.739] CloseHandle (hObject=0x164) returned 1
	[0212.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf.egmwv")) returned 0x20
	[0212.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf")) returned 0x20
	[0212.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF", dwFileAttributes=0x20) returned 1
	[0212.754] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0212.950] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0212.950] ReadFile (in: hFile=0x130, lpBuffer=0xc0001fe000, nNumberOfBytesToRead=0x11b8, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001fe000*, lpNumberOfBytesRead=0xc0002d7cec*=0x11b8, lpOverlapped=0x0) returned 1
	[0212.955] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531a0 | out: pbBuffer=0xc0000531a0) returned 1
	[0212.955] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531ba | out: pbBuffer=0xc0000531ba) returned 1
	[0212.955] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1302 | out: pbBuffer=0xc0002c1302) returned 1
	[0212.955] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531e0 | out: pbBuffer=0xc0000531e0) returned 1
	[0212.955] GetFileType (hFile=0x130) returned 0x1
	[0212.955] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=4536) returned 1
	[0212.955] WriteFile (in: hFile=0x130, lpBuffer=0xc0003b6000*, nNumberOfBytesToWrite=0x11b8, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc0003b6000*, lpNumberOfBytesWritten=0xc000183ccc*=0x11b8, lpOverlapped=0xc000183ce8) returned 1
	[0212.956] GetFileType (hFile=0x130) returned 0x1
	[0212.956] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x11b8, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=4536) returned 1
	[0212.956] GetFileType (hFile=0x130) returned 0x1
	[0212.956] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=4536) returned 1
	[0212.956] WriteFile (in: hFile=0x130, lpBuffer=0xc0003b8000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc0003b8000*, lpNumberOfBytesWritten=0xc000183ccc*=0x22a, lpOverlapped=0xc000183ce8) returned 1
	[0212.956] GetFileType (hFile=0x130) returned 0x1
	[0212.957] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x11b8, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=4536) returned 1
	[0212.957] CloseHandle (hObject=0x130) returned 1
	[0212.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf.egmwv")) returned 0x20
	[0212.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.958] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0212.962] SetEvent (hEvent=0x144) returned 1
	[0212.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf")) returned 0x20
	[0212.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF", dwFileAttributes=0x20) returned 1
	[0212.964] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.005] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00014bcc4 | out: lpMode=0xc00014bcc4) returned 0
	[0213.005] ReadFile (in: hFile=0x170, lpBuffer=0xc0004ce000, nNumberOfBytesToRead=0x2168, lpNumberOfBytesRead=0xc00014bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ce000*, lpNumberOfBytesRead=0xc00014bcec*=0x2168, lpOverlapped=0x0) returned 1
	[0213.009] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0213.009] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039c02 | out: pbBuffer=0xc000039c02) returned 1
	[0213.009] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039c5f | out: pbBuffer=0xc000039c5f) returned 1
	[0213.010] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0213.010] GetFileType (hFile=0x170) returned 0x1
	[0213.010] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8552) returned 1
	[0213.010] WriteFile (in: hFile=0x170, lpBuffer=0xc0000c6000*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000c6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2168, lpOverlapped=0xc000155ce8) returned 1
	[0213.011] GetFileType (hFile=0x170) returned 0x1
	[0213.011] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2168, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8552) returned 1
	[0213.011] GetFileType (hFile=0x170) returned 0x1
	[0213.011] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8552) returned 1
	[0213.011] WriteFile (in: hFile=0x170, lpBuffer=0xc0003c9180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c9180*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0213.011] GetFileType (hFile=0x170) returned 0x1
	[0213.011] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2168, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8552) returned 1
	[0213.012] CloseHandle (hObject=0x170) returned 1
	[0213.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf.egmwv")) returned 0x20
	[0213.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.014] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf")) returned 0x20
	[0213.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF", dwFileAttributes=0x20) returned 1
	[0213.021] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0213.053] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0213.053] ReadFile (in: hFile=0x130, lpBuffer=0xc0000f6000, nNumberOfBytesToRead=0x16ec, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesRead=0xc00016dcec*=0x16ec, lpOverlapped=0x0) returned 1
	[0213.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0213.061] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000213302 | out: pbBuffer=0xc000213302) returned 1
	[0213.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002133a0 | out: pbBuffer=0xc0002133a0) returned 1
	[0213.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002133d4 | out: pbBuffer=0xc0002133d4) returned 1
	[0213.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0213.061] GetFileType (hFile=0x130) returned 0x1
	[0213.061] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5868) returned 1
	[0213.062] WriteFile (in: hFile=0x130, lpBuffer=0xc00006a000*, nNumberOfBytesToWrite=0x16ec, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00006a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x16ec, lpOverlapped=0xc000155ce8) returned 1
	[0213.062] GetFileType (hFile=0x130) returned 0x1
	[0213.062] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x16ec, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5868) returned 1
	[0213.062] GetFileType (hFile=0x130) returned 0x1
	[0213.062] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5868) returned 1
	[0213.063] WriteFile (in: hFile=0x130, lpBuffer=0xc000398380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000398380*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0213.063] GetFileType (hFile=0x130) returned 0x1
	[0213.063] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x16ec, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5868) returned 1
	[0213.063] CloseHandle (hObject=0x130) returned 1
	[0213.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf.egmwv")) returned 0x20
	[0213.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.067] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.081] SetEvent (hEvent=0xc4) returned 1
	[0213.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf")) returned 0x20
	[0213.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF", dwFileAttributes=0x20) returned 1
	[0213.084] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.111] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0213.111] ReadFile (in: hFile=0x164, lpBuffer=0xc0004be000, nNumberOfBytesToRead=0x347c, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004be000*, lpNumberOfBytesRead=0xc000169cec*=0x347c, lpOverlapped=0x0) returned 1
	[0213.117] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0213.117] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000326102 | out: pbBuffer=0xc000326102) returned 1
	[0213.117] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003261c2 | out: pbBuffer=0xc0003261c2) returned 1
	[0213.117] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206300 | out: pbBuffer=0xc000206300) returned 1
	[0213.117] GetFileType (hFile=0x164) returned 0x1
	[0213.118] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=13436) returned 1
	[0213.118] WriteFile (in: hFile=0x164, lpBuffer=0xc0003f8000*, nNumberOfBytesToWrite=0x347c, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc0003f8000*, lpNumberOfBytesWritten=0xc000347ccc*=0x347c, lpOverlapped=0xc000347ce8) returned 1
	[0213.118] GetFileType (hFile=0x164) returned 0x1
	[0213.118] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x347c, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=13436) returned 1
	[0213.118] GetFileType (hFile=0x164) returned 0x1
	[0213.119] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=13436) returned 1
	[0213.119] WriteFile (in: hFile=0x164, lpBuffer=0xc000324e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc000324e00*, lpNumberOfBytesWritten=0xc000347ccc*=0x230, lpOverlapped=0xc000347ce8) returned 1
	[0213.119] GetFileType (hFile=0x164) returned 0x1
	[0213.119] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x347c, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=13436) returned 1
	[0213.119] CloseHandle (hObject=0x164) returned 1
	[0213.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf.egmwv")) returned 0x20
	[0213.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.121] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.132] SetEvent (hEvent=0xc4) returned 1
	[0213.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf")) returned 0x20
	[0213.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF", dwFileAttributes=0x20) returned 1
	[0213.135] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.163] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0213.163] ReadFile (in: hFile=0x170, lpBuffer=0xc0000d9300, nNumberOfBytesToRead=0x1028, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d9300*, lpNumberOfBytesRead=0xc0002d3cec*=0x1028, lpOverlapped=0x0) returned 1
	[0213.169] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0213.169] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020647a | out: pbBuffer=0xc00020647a) returned 1
	[0213.170] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000326d02 | out: pbBuffer=0xc000326d02) returned 1
	[0213.170] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002064a0 | out: pbBuffer=0xc0002064a0) returned 1
	[0213.170] GetFileType (hFile=0x170) returned 0x1
	[0213.170] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=4136) returned 1
	[0213.170] WriteFile (in: hFile=0x170, lpBuffer=0xc0002f4000*, nNumberOfBytesToWrite=0x1028, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc0002f4000*, lpNumberOfBytesWritten=0xc000347ccc*=0x1028, lpOverlapped=0xc000347ce8) returned 1
	[0213.171] GetFileType (hFile=0x170) returned 0x1
	[0213.171] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1028, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=4136) returned 1
	[0213.171] GetFileType (hFile=0x170) returned 0x1
	[0213.171] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=4136) returned 1
	[0213.171] WriteFile (in: hFile=0x170, lpBuffer=0xc0002ee700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc0002ee700*, lpNumberOfBytesWritten=0xc000347ccc*=0x221, lpOverlapped=0xc000347ce8) returned 1
	[0213.172] GetFileType (hFile=0x170) returned 0x1
	[0213.172] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1028, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=4136) returned 1
	[0213.172] CloseHandle (hObject=0x170) returned 1
	[0213.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf.egmwv")) returned 0x20
	[0213.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.174] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf")) returned 0x20
	[0213.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF", dwFileAttributes=0x20) returned 1
	[0213.186] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.216] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0213.216] ReadFile (in: hFile=0x164, lpBuffer=0xc0001e8000, nNumberOfBytesToRead=0x2c18, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e8000*, lpNumberOfBytesRead=0xc0002d3cec*=0x2c18, lpOverlapped=0x0) returned 1
	[0213.222] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053030 | out: pbBuffer=0xc000053030) returned 1
	[0213.222] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005304a | out: pbBuffer=0xc00005304a) returned 1
	[0213.222] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00044f802 | out: pbBuffer=0xc00044f802) returned 1
	[0213.222] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00044f807 | out: pbBuffer=0xc00044f807) returned 1
	[0213.222] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00044f829 | out: pbBuffer=0xc00044f829) returned 1
	[0213.222] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00044f84e | out: pbBuffer=0xc00044f84e) returned 1
	[0213.223] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053070 | out: pbBuffer=0xc000053070) returned 1
	[0213.223] GetFileType (hFile=0x164) returned 0x1
	[0213.223] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=11288) returned 1
	[0213.223] WriteFile (in: hFile=0x164, lpBuffer=0xc000200000*, nNumberOfBytesToWrite=0x2c18, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000200000*, lpNumberOfBytesWritten=0xc000351ccc*=0x2c18, lpOverlapped=0xc000351ce8) returned 1
	[0213.224] GetFileType (hFile=0x164) returned 0x1
	[0213.224] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2c18, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=11288) returned 1
	[0213.224] GetFileType (hFile=0x164) returned 0x1
	[0213.224] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=11288) returned 1
	[0213.224] WriteFile (in: hFile=0x164, lpBuffer=0xc00021a000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc00021a000*, lpNumberOfBytesWritten=0xc000351ccc*=0x227, lpOverlapped=0xc000351ce8) returned 1
	[0213.225] GetFileType (hFile=0x164) returned 0x1
	[0213.225] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2c18, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=11288) returned 1
	[0213.225] CloseHandle (hObject=0x164) returned 1
	[0213.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf.egmwv")) returned 0x20
	[0213.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.229] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf")) returned 0x20
	[0213.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF", dwFileAttributes=0x20) returned 1
	[0213.236] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.359] SetEvent (hEvent=0x70) returned 1
	[0213.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.360] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000149cc4 | out: lpMode=0xc000149cc4) returned 0
	[0213.360] ReadFile (in: hFile=0x170, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x13d4, lpNumberOfBytesRead=0xc000149cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000149cec*=0x13d4, lpOverlapped=0x0) returned 1
	[0213.366] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070100 | out: pbBuffer=0xc000070100) returned 1
	[0213.366] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0213.366] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070140 | out: pbBuffer=0xc000070140) returned 1
	[0213.366] GetFileType (hFile=0x170) returned 0x1
	[0213.366] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5076) returned 1
	[0213.366] WriteFile (in: hFile=0x170, lpBuffer=0xc000484000*, nNumberOfBytesToWrite=0x13d4, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000484000*, lpNumberOfBytesWritten=0xc000155ccc*=0x13d4, lpOverlapped=0xc000155ce8) returned 1
	[0213.367] GetFileType (hFile=0x170) returned 0x1
	[0213.367] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x13d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5076) returned 1
	[0213.367] GetFileType (hFile=0x170) returned 0x1
	[0213.367] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5076) returned 1
	[0213.367] WriteFile (in: hFile=0x170, lpBuffer=0xc0002b8e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002b8e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0213.368] GetFileType (hFile=0x170) returned 0x1
	[0213.368] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x13d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5076) returned 1
	[0213.368] CloseHandle (hObject=0x170) returned 1
	[0213.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf.egmwv")) returned 0x20
	[0213.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.371] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf")) returned 0x20
	[0213.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF", dwFileAttributes=0x20) returned 1
	[0213.380] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.391] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0213.391] ReadFile (in: hFile=0x164, lpBuffer=0xc0000f6000, nNumberOfBytesToRead=0x40cc, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesRead=0xc00038dcec*=0x40cc, lpOverlapped=0x0) returned 1
	[0213.418] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0213.418] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0213.418] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215a02 | out: pbBuffer=0xc000215a02) returned 1
	[0213.418] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0213.418] GetFileType (hFile=0x164) returned 0x1
	[0213.418] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=16588) returned 1
	[0213.419] WriteFile (in: hFile=0x164, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x40cc, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc00022dccc*=0x40cc, lpOverlapped=0xc00022dce8) returned 1
	[0213.419] GetFileType (hFile=0x164) returned 0x1
	[0213.419] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x40cc, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=16588) returned 1
	[0213.419] GetFileType (hFile=0x164) returned 0x1
	[0213.419] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=16588) returned 1
	[0213.419] WriteFile (in: hFile=0x164, lpBuffer=0xc0002c4e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc0002c4e00*, lpNumberOfBytesWritten=0xc00022dccc*=0x227, lpOverlapped=0xc00022dce8) returned 1
	[0213.420] GetFileType (hFile=0x164) returned 0x1
	[0213.420] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x40cc, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=16588) returned 1
	[0213.420] CloseHandle (hObject=0x164) returned 1
	[0213.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf.egmwv")) returned 0x20
	[0213.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.425] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.441] SetEvent (hEvent=0xe4) returned 1
	[0213.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf")) returned 0x20
	[0213.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF", dwFileAttributes=0x20) returned 1
	[0213.443] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0213.557] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000145cc4 | out: lpMode=0xc000145cc4) returned 0
	[0213.557] ReadFile (in: hFile=0xcc, lpBuffer=0xc000120000, nNumberOfBytesToRead=0x52e0, lpNumberOfBytesRead=0xc000145cec, lpOverlapped=0x0 | out: lpBuffer=0xc000120000*, lpNumberOfBytesRead=0xc000145cec*=0x52e0, lpOverlapped=0x0) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070440 | out: pbBuffer=0xc000070440) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00007045a | out: pbBuffer=0xc00007045a) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000111802 | out: pbBuffer=0xc000111802) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000111815 | out: pbBuffer=0xc000111815) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000111832 | out: pbBuffer=0xc000111832) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001118a3 | out: pbBuffer=0xc0001118a3) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001118d3 | out: pbBuffer=0xc0001118d3) returned 1
	[0213.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070480 | out: pbBuffer=0xc000070480) returned 1
	[0213.564] GetFileType (hFile=0xcc) returned 0x1
	[0213.564] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21216) returned 1
	[0213.564] WriteFile (in: hFile=0xcc, lpBuffer=0xc00034a000*, nNumberOfBytesToWrite=0x52e0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x52e0, lpOverlapped=0xc000155ce8) returned 1
	[0213.565] GetFileType (hFile=0xcc) returned 0x1
	[0213.565] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x52e0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21216) returned 1
	[0213.565] GetFileType (hFile=0xcc) returned 0x1
	[0213.565] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21216) returned 1
	[0213.565] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000f2000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0213.566] GetFileType (hFile=0xcc) returned 0x1
	[0213.566] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x52e0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21216) returned 1
	[0213.566] CloseHandle (hObject=0xcc) returned 1
	[0213.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf.egmwv")) returned 0x20
	[0213.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.569] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.574] SetEvent (hEvent=0x108) returned 1
	[0213.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf")) returned 0x20
	[0213.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF", dwFileAttributes=0x20) returned 1
	[0213.575] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0213.599] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000145cc4 | out: lpMode=0xc000145cc4) returned 0
	[0213.599] ReadFile (in: hFile=0x118, lpBuffer=0xc000352000, nNumberOfBytesToRead=0x258c, lpNumberOfBytesRead=0xc000145cec, lpOverlapped=0x0 | out: lpBuffer=0xc000352000*, lpNumberOfBytesRead=0xc000145cec*=0x258c, lpOverlapped=0x0) returned 1
	[0213.635] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b80 | out: pbBuffer=0xc000052b80) returned 1
	[0213.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b9a | out: pbBuffer=0xc000052b9a) returned 1
	[0213.641] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001902 | out: pbBuffer=0xc000001902) returned 1
	[0213.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001940 | out: pbBuffer=0xc000001940) returned 1
	[0213.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bc0 | out: pbBuffer=0xc000052bc0) returned 1
	[0213.642] GetFileType (hFile=0x118) returned 0x1
	[0213.642] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=9612) returned 1
	[0213.642] WriteFile (in: hFile=0x118, lpBuffer=0xc0001d8000*, nNumberOfBytesToWrite=0x258c, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc0001d8000*, lpNumberOfBytesWritten=0xc0000bfccc*=0x258c, lpOverlapped=0xc0000bfce8) returned 1
	[0213.642] GetFileType (hFile=0x118) returned 0x1
	[0213.643] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x258c, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=9612) returned 1
	[0213.643] GetFileType (hFile=0x118) returned 0x1
	[0213.643] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=9612) returned 1
	[0213.643] WriteFile (in: hFile=0x118, lpBuffer=0xc000411500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc000411500*, lpNumberOfBytesWritten=0xc0000bfccc*=0x22a, lpOverlapped=0xc0000bfce8) returned 1
	[0213.643] GetFileType (hFile=0x118) returned 0x1
	[0213.643] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x258c, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=9612) returned 1
	[0213.644] CloseHandle (hObject=0x118) returned 1
	[0213.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf.egmwv")) returned 0x20
	[0213.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.658] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.662] SetEvent (hEvent=0x144) returned 1
	[0213.663] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.665] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.684] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.868] SetEvent (hEvent=0x144) returned 1
	[0213.868] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.874] SetEvent (hEvent=0x124) returned 1
	[0213.874] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.882] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0213.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf")) returned 0x20
	[0213.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF", dwFileAttributes=0x20) returned 1
	[0213.886] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0213.981] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0213.981] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.461] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.505] SetEvent (hEvent=0xc4) returned 1
	[0214.505] SetEvent (hEvent=0xf8) returned 1
	[0214.505] SetEvent (hEvent=0x104) returned 1
	[0214.505] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0214.510] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.510] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0214.513] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.513] SetEvent (hEvent=0xac) returned 1
	[0214.513] SetEvent (hEvent=0x104) returned 1
	[0214.513] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0214.571] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.571] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0214.574] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.574] SetEvent (hEvent=0x104) returned 1
	[0214.574] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0214.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.egmwv")) returned 0x20
	[0214.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.583] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.606] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.615] SetEvent (hEvent=0x84) returned 1
	[0214.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg")) returned 0x20
	[0214.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG", dwFileAttributes=0x20) returned 1
	[0214.617] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.638] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.648] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0214.648] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0xfd22, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc000169cec*=0xfd22, lpOverlapped=0x0) returned 1
	[0214.656] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0214.656] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031f502 | out: pbBuffer=0xc00031f502) returned 1
	[0214.656] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00031f513 | out: pbBuffer=0xc00031f513) returned 1
	[0214.656] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0214.657] GetFileType (hFile=0xa8) returned 0x1
	[0214.657] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=64802) returned 1
	[0214.657] WriteFile (in: hFile=0xa8, lpBuffer=0xc000592000*, nNumberOfBytesToWrite=0xfd22, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000592000*, lpNumberOfBytesWritten=0xc00030dccc*=0xfd22, lpOverlapped=0xc00030dce8) returned 1
	[0214.658] GetFileType (hFile=0xa8) returned 0x1
	[0214.658] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xfd22, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=64802) returned 1
	[0214.658] GetFileType (hFile=0xa8) returned 0x1
	[0214.658] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=64802) returned 1
	[0214.659] WriteFile (in: hFile=0xa8, lpBuffer=0xc000170380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000170380*, lpNumberOfBytesWritten=0xc00030dccc*=0x236, lpOverlapped=0xc00030dce8) returned 1
	[0214.659] GetFileType (hFile=0xa8) returned 0x1
	[0214.659] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xfd22, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=64802) returned 1
	[0214.659] CloseHandle (hObject=0xa8) returned 1
	[0214.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.egmwv")) returned 0x20
	[0214.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.663] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.664] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.672] SetEvent (hEvent=0x120) returned 1
	[0214.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf")) returned 0x20
	[0214.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF", dwFileAttributes=0x20) returned 1
	[0214.673] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0214.689] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0214.689] ReadFile (in: hFile=0xd8, lpBuffer=0xc000462000, nNumberOfBytesToRead=0x1104, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000462000*, lpNumberOfBytesRead=0xc000389cec*=0x1104, lpOverlapped=0x0) returned 1
	[0214.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b60f0 | out: pbBuffer=0xc0002b60f0) returned 1
	[0214.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b610a | out: pbBuffer=0xc0002b610a) returned 1
	[0214.724] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039602 | out: pbBuffer=0xc000039602) returned 1
	[0214.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6130 | out: pbBuffer=0xc0002b6130) returned 1
	[0214.725] GetFileType (hFile=0xd8) returned 0x1
	[0214.725] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=4356) returned 1
	[0214.725] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0x1104, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc000309ccc*=0x1104, lpOverlapped=0xc000309ce8) returned 1
	[0214.725] GetFileType (hFile=0xd8) returned 0x1
	[0214.725] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x1104, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=4356) returned 1
	[0214.726] GetFileType (hFile=0xd8) returned 0x1
	[0214.726] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=4356) returned 1
	[0214.726] WriteFile (in: hFile=0xd8, lpBuffer=0xc00017f880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc00017f880*, lpNumberOfBytesWritten=0xc000309ccc*=0x221, lpOverlapped=0xc000309ce8) returned 1
	[0214.726] GetFileType (hFile=0xd8) returned 0x1
	[0214.726] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x1104, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=4356) returned 1
	[0214.726] CloseHandle (hObject=0xd8) returned 1
	[0214.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf.egmwv")) returned 0x20
	[0214.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.740] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.750] SetEvent (hEvent=0xc4) returned 1
	[0214.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf")) returned 0x20
	[0214.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF", dwFileAttributes=0x20) returned 1
	[0214.751] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.787] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0214.787] ReadFile (in: hFile=0x118, lpBuffer=0xc000160000, nNumberOfBytesToRead=0x3928, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000160000*, lpNumberOfBytesRead=0xc00016bcec*=0x3928, lpOverlapped=0x0) returned 1
	[0214.794] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0214.794] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b812a | out: pbBuffer=0xc0001b812a) returned 1
	[0214.794] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031ec02 | out: pbBuffer=0xc00031ec02) returned 1
	[0214.794] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00031ec97 | out: pbBuffer=0xc00031ec97) returned 1
	[0214.794] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0214.795] GetFileType (hFile=0x118) returned 0x1
	[0214.795] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=14632) returned 1
	[0214.795] WriteFile (in: hFile=0x118, lpBuffer=0xc00036c000*, nNumberOfBytesToWrite=0x3928, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00036c000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3928, lpOverlapped=0xc000155ce8) returned 1
	[0214.796] GetFileType (hFile=0x118) returned 0x1
	[0214.796] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3928, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=14632) returned 1
	[0214.796] GetFileType (hFile=0x118) returned 0x1
	[0214.796] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=14632) returned 1
	[0214.796] WriteFile (in: hFile=0x118, lpBuffer=0xc000313500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000313500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0214.796] GetFileType (hFile=0x118) returned 0x1
	[0214.797] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3928, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=14632) returned 1
	[0214.797] CloseHandle (hObject=0x118) returned 1
	[0214.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf.egmwv")) returned 0x20
	[0214.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.800] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.804] SetEvent (hEvent=0xc4) returned 1
	[0214.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf")) returned 0x20
	[0214.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF", dwFileAttributes=0x20) returned 1
	[0214.805] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.846] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0214.846] ReadFile (in: hFile=0xa8, lpBuffer=0xc0005c0000, nNumberOfBytesToRead=0x3394, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0005c0000*, lpNumberOfBytesRead=0xc00016bcec*=0x3394, lpOverlapped=0x0) returned 1
	[0214.851] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65b0 | out: pbBuffer=0xc0002b65b0) returned 1
	[0214.851] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ca | out: pbBuffer=0xc0002b65ca) returned 1
	[0214.851] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215602 | out: pbBuffer=0xc000215602) returned 1
	[0214.851] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002156e2 | out: pbBuffer=0xc0002156e2) returned 1
	[0214.851] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65f0 | out: pbBuffer=0xc0002b65f0) returned 1
	[0214.852] GetFileType (hFile=0xa8) returned 0x1
	[0214.852] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=13204) returned 1
	[0214.852] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002ee000*, nNumberOfBytesToWrite=0x3394, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc0002ee000*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x3394, lpOverlapped=0xc0005d3ce8) returned 1
	[0214.853] GetFileType (hFile=0xa8) returned 0x1
	[0214.853] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3394, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=13204) returned 1
	[0214.853] GetFileType (hFile=0xa8) returned 0x1
	[0214.853] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=13204) returned 1
	[0214.853] WriteFile (in: hFile=0xa8, lpBuffer=0xc0005daa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc0005daa80*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x22d, lpOverlapped=0xc0005d3ce8) returned 1
	[0214.854] GetFileType (hFile=0xa8) returned 0x1
	[0214.854] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3394, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=13204) returned 1
	[0214.854] CloseHandle (hObject=0xa8) returned 1
	[0214.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf.egmwv")) returned 0x20
	[0214.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.855] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.863] SetEvent (hEvent=0xe4) returned 1
	[0214.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf")) returned 0x20
	[0214.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF", dwFileAttributes=0x20) returned 1
	[0214.869] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.899] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0214.899] SetEvent (hEvent=0xe4) returned 1
	[0214.899] ReadFile (in: hFile=0x118, lpBuffer=0xc00012a000, nNumberOfBytesToRead=0x610c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00012a000*, lpNumberOfBytesRead=0xc00038dcec*=0x610c, lpOverlapped=0x0) returned 1
	[0214.906] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6740 | out: pbBuffer=0xc0002b6740) returned 1
	[0214.906] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b675a | out: pbBuffer=0xc0002b675a) returned 1
	[0214.906] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000232302 | out: pbBuffer=0xc000232302) returned 1
	[0214.906] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000232359 | out: pbBuffer=0xc000232359) returned 1
	[0214.906] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002323d3 | out: pbBuffer=0xc0002323d3) returned 1
	[0214.907] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6780 | out: pbBuffer=0xc0002b6780) returned 1
	[0214.907] GetFileType (hFile=0x118) returned 0x1
	[0214.907] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=24844) returned 1
	[0214.907] WriteFile (in: hFile=0x118, lpBuffer=0xc000268000*, nNumberOfBytesToWrite=0x610c, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc000268000*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x610c, lpOverlapped=0xc0005d3ce8) returned 1
	[0214.908] GetFileType (hFile=0x118) returned 0x1
	[0214.908] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x610c, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=24844) returned 1
	[0214.908] GetFileType (hFile=0x118) returned 0x1
	[0214.909] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=24844) returned 1
	[0214.909] WriteFile (in: hFile=0x118, lpBuffer=0xc00023a380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc00023a380*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x227, lpOverlapped=0xc0005d3ce8) returned 1
	[0214.909] GetFileType (hFile=0x118) returned 0x1
	[0214.909] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x610c, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=24844) returned 1
	[0214.909] CloseHandle (hObject=0x118) returned 1
	[0214.911] SwitchToThread () returned 1
	[0214.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf.egmwv")) returned 0x20
	[0214.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.915] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.919] SetEvent (hEvent=0x120) returned 1
	[0214.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf")) returned 0x20
	[0214.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF", dwFileAttributes=0x20) returned 1
	[0214.920] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.951] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0214.951] ReadFile (in: hFile=0xcc, lpBuffer=0xc000180000, nNumberOfBytesToRead=0x2c4c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000180000*, lpNumberOfBytesRead=0xc00038dcec*=0x2c4c, lpOverlapped=0x0) returned 1
	[0214.958] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0214.958] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b812a | out: pbBuffer=0xc0001b812a) returned 1
	[0214.958] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0214.958] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001251 | out: pbBuffer=0xc000001251) returned 1
	[0214.958] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000012ad | out: pbBuffer=0xc0000012ad) returned 1
	[0214.958] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000012cf | out: pbBuffer=0xc0000012cf) returned 1
	[0214.958] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0214.958] GetFileType (hFile=0xcc) returned 0x1
	[0214.959] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005cfca0*=11340) returned 1
	[0214.959] WriteFile (in: hFile=0xcc, lpBuffer=0xc000394000*, nNumberOfBytesToWrite=0x2c4c, lpNumberOfBytesWritten=0xc0005cfccc, lpOverlapped=0xc0005cfce8 | out: lpBuffer=0xc000394000*, lpNumberOfBytesWritten=0xc0005cfccc*=0x2c4c, lpOverlapped=0xc0005cfce8) returned 1
	[0214.959] GetFileType (hFile=0xcc) returned 0x1
	[0214.959] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2c4c, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005cfca0*=11340) returned 1
	[0214.960] GetFileType (hFile=0xcc) returned 0x1
	[0214.960] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005cfca0*=11340) returned 1
	[0214.960] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003eb500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0005cfccc, lpOverlapped=0xc0005cfce8 | out: lpBuffer=0xc0003eb500*, lpNumberOfBytesWritten=0xc0005cfccc*=0x22a, lpOverlapped=0xc0005cfce8) returned 1
	[0214.960] GetFileType (hFile=0xcc) returned 0x1
	[0214.961] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2c4c, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005cfca0*=11340) returned 1
	[0214.961] CloseHandle (hObject=0xcc) returned 1
	[0214.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf.egmwv")) returned 0x20
	[0214.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.965] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0214.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf")) returned 0x20
	[0214.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF", dwFileAttributes=0x20) returned 1
	[0214.972] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.007] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0215.007] ReadFile (in: hFile=0xa8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x2a80, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc00016dcec*=0x2a80, lpOverlapped=0x0) returned 1
	[0215.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82a0 | out: pbBuffer=0xc0001b82a0) returned 1
	[0215.012] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000224002 | out: pbBuffer=0xc000224002) returned 1
	[0215.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000224018 | out: pbBuffer=0xc000224018) returned 1
	[0215.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000224044 | out: pbBuffer=0xc000224044) returned 1
	[0215.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00022409f | out: pbBuffer=0xc00022409f) returned 1
	[0215.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82e0 | out: pbBuffer=0xc0001b82e0) returned 1
	[0215.013] GetFileType (hFile=0xa8) returned 0x1
	[0215.013] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005cfca0*=10880) returned 1
	[0215.013] WriteFile (in: hFile=0xa8, lpBuffer=0xc00022c000*, nNumberOfBytesToWrite=0x2a80, lpNumberOfBytesWritten=0xc0005cfccc, lpOverlapped=0xc0005cfce8 | out: lpBuffer=0xc00022c000*, lpNumberOfBytesWritten=0xc0005cfccc*=0x2a80, lpOverlapped=0xc0005cfce8) returned 1
	[0215.013] GetFileType (hFile=0xa8) returned 0x1
	[0215.013] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2a80, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005cfca0*=10880) returned 1
	[0215.013] GetFileType (hFile=0xa8) returned 0x1
	[0215.014] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005cfca0*=10880) returned 1
	[0215.014] WriteFile (in: hFile=0xa8, lpBuffer=0xc000222e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0005cfccc, lpOverlapped=0xc0005cfce8 | out: lpBuffer=0xc000222e00*, lpNumberOfBytesWritten=0xc0005cfccc*=0x224, lpOverlapped=0xc0005cfce8) returned 1
	[0215.014] GetFileType (hFile=0xa8) returned 0x1
	[0215.014] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2a80, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005cfca0*=10880) returned 1
	[0215.014] CloseHandle (hObject=0xa8) returned 1
	[0215.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf.egmwv")) returned 0x20
	[0215.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.018] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0215.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf")) returned 0x20
	[0215.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF", dwFileAttributes=0x20) returned 1
	[0215.034] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0215.064] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0215.064] ReadFile (in: hFile=0x118, lpBuffer=0xc0001e2000, nNumberOfBytesToRead=0x2ab4, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesRead=0xc0002d3cec*=0x2ab4, lpOverlapped=0x0) returned 1
	[0215.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0215.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0215.073] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f4202 | out: pbBuffer=0xc0001f4202) returned 1
	[0215.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0215.074] GetFileType (hFile=0x118) returned 0x1
	[0215.074] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=10932) returned 1
	[0215.074] WriteFile (in: hFile=0x118, lpBuffer=0xc000200000*, nNumberOfBytesToWrite=0x2ab4, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc000200000*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x2ab4, lpOverlapped=0xc0005d3ce8) returned 1
	[0215.074] GetFileType (hFile=0x118) returned 0x1
	[0215.074] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2ab4, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=10932) returned 1
	[0215.075] GetFileType (hFile=0x118) returned 0x1
	[0215.075] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=10932) returned 1
	[0215.075] WriteFile (in: hFile=0x118, lpBuffer=0xc0001f2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc0001f2e00*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x22d, lpOverlapped=0xc0005d3ce8) returned 1
	[0215.075] GetFileType (hFile=0x118) returned 0x1
	[0215.075] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2ab4, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=10932) returned 1
	[0215.076] CloseHandle (hObject=0x118) returned 1
	[0215.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf.egmwv")) returned 0x20
	[0215.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.078] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0215.083] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0215.092] SetEvent (hEvent=0x120) returned 1
	[0215.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf")) returned 0x20
	[0215.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF", dwFileAttributes=0x20) returned 1
	[0215.096] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0215.127] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.128] ReadFile (in: hFile=0x118, lpBuffer=0xc0002ea000, nNumberOfBytesToRead=0x1884, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ea000*, lpNumberOfBytesRead=0xc000389cec*=0x1884, lpOverlapped=0x0) returned 1
	[0215.148] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ea0 | out: pbBuffer=0xc000052ea0) returned 1
	[0215.148] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eba | out: pbBuffer=0xc000052eba) returned 1
	[0215.149] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003a8a02 | out: pbBuffer=0xc0003a8a02) returned 1
	[0215.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a8a58 | out: pbBuffer=0xc0003a8a58) returned 1
	[0215.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ee0 | out: pbBuffer=0xc000052ee0) returned 1
	[0215.149] GetFileType (hFile=0x118) returned 0x1
	[0215.149] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=6276) returned 1
	[0215.149] WriteFile (in: hFile=0x118, lpBuffer=0xc000312000*, nNumberOfBytesToWrite=0x1884, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc000312000*, lpNumberOfBytesWritten=0xc0000edccc*=0x1884, lpOverlapped=0xc0000edce8) returned 1
	[0215.150] GetFileType (hFile=0x118) returned 0x1
	[0215.150] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1884, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=6276) returned 1
	[0215.150] GetFileType (hFile=0x118) returned 0x1
	[0215.150] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=6276) returned 1
	[0215.151] WriteFile (in: hFile=0x118, lpBuffer=0xc000300700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc000300700*, lpNumberOfBytesWritten=0xc0000edccc*=0x224, lpOverlapped=0xc0000edce8) returned 1
	[0215.151] GetFileType (hFile=0x118) returned 0x1
	[0215.151] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1884, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=6276) returned 1
	[0215.151] CloseHandle (hObject=0x118) returned 1
	[0215.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf.egmwv")) returned 0x20
	[0215.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.161] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0215.593] SetEvent (hEvent=0x120) returned 1
	[0215.594] SetEvent (hEvent=0xe4) returned 1
	[0215.594] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0215.903] SetEvent (hEvent=0xe4) returned 1
	[0215.903] SetEvent (hEvent=0x120) returned 1
	[0215.903] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.092] SetEvent (hEvent=0x104) returned 1
	[0216.092] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.108] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.328] SetEvent (hEvent=0x124) returned 1
	[0216.329] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.331] SetEvent (hEvent=0x124) returned 1
	[0216.331] SwitchToThread () returned 1
	[0216.332] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.345] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.365] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.381] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.401] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.425] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.442] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.462] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.492] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.523] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.542] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.560] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.593] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.609] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.615] SetEvent (hEvent=0x124) returned 1
	[0216.615] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0216.623] SetEvent (hEvent=0x124) returned 1
	[0216.623] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0216.625] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.625] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.768] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.770] SetEvent (hEvent=0x104) returned 1
	[0216.770] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.774] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.784] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.804] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.815] SetEvent (hEvent=0x120) returned 1
	[0216.815] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.821] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.832] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.856] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.873] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.882] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.899] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.928] SetEvent (hEvent=0x104) returned 1
	[0216.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf")) returned 0x20
	[0216.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x20) returned 1
	[0216.930] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.957] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0216.957] ReadFile (in: hFile=0xcc, lpBuffer=0xc000105000, nNumberOfBytesToRead=0x4e46, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000105000*, lpNumberOfBytesRead=0xc0002d3cec*=0x4e46, lpOverlapped=0x0) returned 1
	[0216.966] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6760 | out: pbBuffer=0xc0002b6760) returned 1
	[0216.966] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b677a | out: pbBuffer=0xc0002b677a) returned 1
	[0216.966] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002edd02 | out: pbBuffer=0xc0002edd02) returned 1
	[0216.967] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002eddbc | out: pbBuffer=0xc0002eddbc) returned 1
	[0216.967] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67a0 | out: pbBuffer=0xc0002b67a0) returned 1
	[0216.967] GetFileType (hFile=0xcc) returned 0x1
	[0216.967] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=20038) returned 1
	[0216.968] WriteFile (in: hFile=0xcc, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x4e46, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000381ccc*=0x4e46, lpOverlapped=0xc000381ce8) returned 1
	[0216.969] GetFileType (hFile=0xcc) returned 0x1
	[0216.969] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4e46, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=20038) returned 1
	[0216.969] GetFileType (hFile=0xcc) returned 0x1
	[0216.969] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=20038) returned 1
	[0216.969] WriteFile (in: hFile=0xcc, lpBuffer=0xc000331880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc000331880*, lpNumberOfBytesWritten=0xc000381ccc*=0x22d, lpOverlapped=0xc000381ce8) returned 1
	[0216.970] GetFileType (hFile=0xcc) returned 0x1
	[0216.970] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4e46, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=20038) returned 1
	[0216.970] CloseHandle (hObject=0xcc) returned 1
	[0216.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf.egmwv")) returned 0x20
	[0216.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.975] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0216.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf")) returned 0x20
	[0216.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x20) returned 1
	[0216.982] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.030] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0217.030] ReadFile (in: hFile=0xa8, lpBuffer=0xc000068000, nNumberOfBytesToRead=0xe956, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesRead=0xc0002d3cec*=0xe956, lpOverlapped=0x0) returned 1
	[0217.036] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0217.036] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0217.036] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0217.037] GetFileType (hFile=0xa8) returned 0x1
	[0217.037] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=59734) returned 1
	[0217.037] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0xe956, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc0003ddccc*=0xe956, lpOverlapped=0xc0003ddce8) returned 1
	[0217.039] GetFileType (hFile=0xa8) returned 0x1
	[0217.039] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe956, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=59734) returned 1
	[0217.039] GetFileType (hFile=0xa8) returned 0x1
	[0217.039] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=59734) returned 1
	[0217.039] WriteFile (in: hFile=0xa8, lpBuffer=0xc000203500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc000203500*, lpNumberOfBytesWritten=0xc0003ddccc*=0x236, lpOverlapped=0xc0003ddce8) returned 1
	[0217.040] GetFileType (hFile=0xa8) returned 0x1
	[0217.040] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe956, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=59734) returned 1
	[0217.040] CloseHandle (hObject=0xa8) returned 1
	[0217.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf.egmwv")) returned 0x20
	[0217.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.045] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.056] SetEvent (hEvent=0x104) returned 1
	[0217.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf")) returned 0x20
	[0217.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x20) returned 1
	[0217.064] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.094] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0217.095] ReadFile (in: hFile=0xe8, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x650c, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000425cec*=0x650c, lpOverlapped=0x0) returned 1
	[0217.100] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0217.100] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0f02 | out: pbBuffer=0xc0002c0f02) returned 1
	[0217.100] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0f62 | out: pbBuffer=0xc0002c0f62) returned 1
	[0217.100] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0217.100] GetFileType (hFile=0xe8) returned 0x1
	[0217.100] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=25868) returned 1
	[0217.101] WriteFile (in: hFile=0xe8, lpBuffer=0xc000382000*, nNumberOfBytesToWrite=0x650c, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc000382000*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x650c, lpOverlapped=0xc0003d9ce8) returned 1
	[0217.101] GetFileType (hFile=0xe8) returned 0x1
	[0217.101] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x650c, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=25868) returned 1
	[0217.101] GetFileType (hFile=0xe8) returned 0x1
	[0217.101] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=25868) returned 1
	[0217.102] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001a1500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc0001a1500*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x22a, lpOverlapped=0xc0003d9ce8) returned 1
	[0217.102] GetFileType (hFile=0xe8) returned 0x1
	[0217.102] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x650c, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=25868) returned 1
	[0217.102] CloseHandle (hObject=0xe8) returned 1
	[0217.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf.egmwv")) returned 0x20
	[0217.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.104] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.112] SetEvent (hEvent=0x104) returned 1
	[0217.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf")) returned 0x20
	[0217.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x20) returned 1
	[0217.118] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.143] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0217.143] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000fc000, nNumberOfBytesToRead=0x773a, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000fc000*, lpNumberOfBytesRead=0xc0002d3cec*=0x773a, lpOverlapped=0x0) returned 1
	[0217.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82b0 | out: pbBuffer=0xc0001b82b0) returned 1
	[0217.149] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1c02 | out: pbBuffer=0xc0002c1c02) returned 1
	[0217.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1c8c | out: pbBuffer=0xc0002c1c8c) returned 1
	[0217.150] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82f0 | out: pbBuffer=0xc0001b82f0) returned 1
	[0217.150] GetFileType (hFile=0xcc) returned 0x1
	[0217.150] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=30522) returned 1
	[0217.150] WriteFile (in: hFile=0xcc, lpBuffer=0xc000310000*, nNumberOfBytesToWrite=0x773a, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc000310000*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x773a, lpOverlapped=0xc0003d9ce8) returned 1
	[0217.151] GetFileType (hFile=0xcc) returned 0x1
	[0217.151] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x773a, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=30522) returned 1
	[0217.151] GetFileType (hFile=0xcc) returned 0x1
	[0217.151] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=30522) returned 1
	[0217.151] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002f2e00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc0002f2e00*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x236, lpOverlapped=0xc0003d9ce8) returned 1
	[0217.152] GetFileType (hFile=0xcc) returned 0x1
	[0217.152] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x773a, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=30522) returned 1
	[0217.152] CloseHandle (hObject=0xcc) returned 1
	[0217.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf.egmwv")) returned 0x20
	[0217.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.154] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf")) returned 0x20
	[0217.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x20) returned 1
	[0217.161] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.203] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0217.203] ReadFile (in: hFile=0xa8, lpBuffer=0xc00018e000, nNumberOfBytesToRead=0x2182, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesRead=0xc0002d3cec*=0x2182, lpOverlapped=0x0) returned 1
	[0217.208] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8290 | out: pbBuffer=0xc0001b8290) returned 1
	[0217.208] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b82aa | out: pbBuffer=0xc0001b82aa) returned 1
	[0217.208] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0102 | out: pbBuffer=0xc0002c0102) returned 1
	[0217.208] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0130 | out: pbBuffer=0xc0002c0130) returned 1
	[0217.209] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c01af | out: pbBuffer=0xc0002c01af) returned 1
	[0217.209] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c01b2 | out: pbBuffer=0xc0002c01b2) returned 1
	[0217.209] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82d0 | out: pbBuffer=0xc0001b82d0) returned 1
	[0217.209] GetFileType (hFile=0xa8) returned 0x1
	[0217.209] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8578) returned 1
	[0217.209] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0x2182, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2182, lpOverlapped=0xc000155ce8) returned 1
	[0217.210] GetFileType (hFile=0xa8) returned 0x1
	[0217.210] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2182, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8578) returned 1
	[0217.210] GetFileType (hFile=0xa8) returned 0x1
	[0217.210] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8578) returned 1
	[0217.210] WriteFile (in: hFile=0xa8, lpBuffer=0xc00028e000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0217.210] GetFileType (hFile=0xa8) returned 0x1
	[0217.210] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2182, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8578) returned 1
	[0217.210] CloseHandle (hObject=0xa8) returned 1
	[0217.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf.egmwv")) returned 0x20
	[0217.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.214] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf")) returned 0x20
	[0217.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x20) returned 1
	[0217.219] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.251] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0217.252] ReadFile (in: hFile=0xcc, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x843a, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc0002d3cec*=0x843a, lpOverlapped=0x0) returned 1
	[0217.259] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0217.259] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000335a02 | out: pbBuffer=0xc000335a02) returned 1
	[0217.259] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0217.260] GetFileType (hFile=0xcc) returned 0x1
	[0217.260] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=33850) returned 1
	[0217.260] WriteFile (in: hFile=0xcc, lpBuffer=0xc000364000*, nNumberOfBytesToWrite=0x843a, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000364000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x843a, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.261] GetFileType (hFile=0xcc) returned 0x1
	[0217.261] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x843a, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=33850) returned 1
	[0217.261] GetFileType (hFile=0xcc) returned 0x1
	[0217.261] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=33850) returned 1
	[0217.261] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002c2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0002c2e00*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.261] GetFileType (hFile=0xcc) returned 0x1
	[0217.262] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x843a, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=33850) returned 1
	[0217.262] CloseHandle (hObject=0xcc) returned 1
	[0217.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf.egmwv")) returned 0x20
	[0217.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.267] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.279] SetEvent (hEvent=0xc4) returned 1
	[0217.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf")) returned 0x20
	[0217.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x20) returned 1
	[0217.283] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.312] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0217.312] ReadFile (in: hFile=0xcc, lpBuffer=0xc000410000, nNumberOfBytesToRead=0x19c4, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000410000*, lpNumberOfBytesRead=0xc000429cec*=0x19c4, lpOverlapped=0x0) returned 1
	[0217.318] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0217.318] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a2602 | out: pbBuffer=0xc0002a2602) returned 1
	[0217.318] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0217.319] GetFileType (hFile=0xcc) returned 0x1
	[0217.319] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=6596) returned 1
	[0217.319] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003c0000*, nNumberOfBytesToWrite=0x19c4, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0003c0000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x19c4, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.319] GetFileType (hFile=0xcc) returned 0x1
	[0217.320] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x19c4, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=6596) returned 1
	[0217.320] GetFileType (hFile=0xcc) returned 0x1
	[0217.320] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=6596) returned 1
	[0217.320] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002ac700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0002ac700*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22a, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.320] GetFileType (hFile=0xcc) returned 0x1
	[0217.320] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x19c4, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=6596) returned 1
	[0217.321] CloseHandle (hObject=0xcc) returned 1
	[0217.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf.egmwv")) returned 0x20
	[0217.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.323] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.336] SetEvent (hEvent=0xc4) returned 1
	[0217.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf")) returned 0x20
	[0217.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x20) returned 1
	[0217.337] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.366] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0000fbcc4 | out: lpMode=0xc0000fbcc4) returned 0
	[0217.366] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001de000, nNumberOfBytesToRead=0x2870, lpNumberOfBytesRead=0xc0000fbcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001de000*, lpNumberOfBytesRead=0xc0000fbcec*=0x2870, lpOverlapped=0x0) returned 1
	[0217.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8110 | out: pbBuffer=0xc0001d8110) returned 1
	[0217.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d812a | out: pbBuffer=0xc0001d812a) returned 1
	[0217.372] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215302 | out: pbBuffer=0xc000215302) returned 1
	[0217.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021537d | out: pbBuffer=0xc00021537d) returned 1
	[0217.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8150 | out: pbBuffer=0xc0001d8150) returned 1
	[0217.373] GetFileType (hFile=0xcc) returned 0x1
	[0217.373] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=10352) returned 1
	[0217.373] WriteFile (in: hFile=0xcc, lpBuffer=0xc00012e000*, nNumberOfBytesToWrite=0x2870, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesWritten=0xc00030dccc*=0x2870, lpOverlapped=0xc00030dce8) returned 1
	[0217.374] GetFileType (hFile=0xcc) returned 0x1
	[0217.374] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2870, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=10352) returned 1
	[0217.374] GetFileType (hFile=0xcc) returned 0x1
	[0217.374] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=10352) returned 1
	[0217.374] WriteFile (in: hFile=0xcc, lpBuffer=0xc000315500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000315500*, lpNumberOfBytesWritten=0xc00030dccc*=0x227, lpOverlapped=0xc00030dce8) returned 1
	[0217.374] GetFileType (hFile=0xcc) returned 0x1
	[0217.374] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2870, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=10352) returned 1
	[0217.375] CloseHandle (hObject=0xcc) returned 1
	[0217.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf.egmwv")) returned 0x20
	[0217.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.377] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.479] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.494] SetEvent (hEvent=0xc4) returned 1
	[0217.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf")) returned 0x20
	[0217.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x20) returned 1
	[0217.495] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.539] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0217.539] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001ac500, nNumberOfBytesToRead=0x2480, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac500*, lpNumberOfBytesRead=0xc000425cec*=0x2480, lpOverlapped=0x0) returned 1
	[0217.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8270 | out: pbBuffer=0xc0001b8270) returned 1
	[0217.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b828a | out: pbBuffer=0xc0001b828a) returned 1
	[0217.545] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039e02 | out: pbBuffer=0xc000039e02) returned 1
	[0217.545] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82b0 | out: pbBuffer=0xc0001b82b0) returned 1
	[0217.545] GetFileType (hFile=0xa8) returned 0x1
	[0217.545] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9344) returned 1
	[0217.545] WriteFile (in: hFile=0xa8, lpBuffer=0xc000470000*, nNumberOfBytesToWrite=0x2480, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000470000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2480, lpOverlapped=0xc000155ce8) returned 1
	[0217.546] GetFileType (hFile=0xa8) returned 0x1
	[0217.546] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2480, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9344) returned 1
	[0217.546] GetFileType (hFile=0xa8) returned 0x1
	[0217.546] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9344) returned 1
	[0217.546] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002be000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002be000*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0217.547] GetFileType (hFile=0xa8) returned 0x1
	[0217.547] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2480, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9344) returned 1
	[0217.547] CloseHandle (hObject=0xa8) returned 1
	[0217.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf.egmwv")) returned 0x20
	[0217.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.551] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf")) returned 0x20
	[0217.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x20) returned 1
	[0217.557] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.638] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0217.638] ReadFile (in: hFile=0xcc, lpBuffer=0xc00042e000, nNumberOfBytesToRead=0x1bcc, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042e000*, lpNumberOfBytesRead=0xc000425cec*=0x1bcc, lpOverlapped=0x0) returned 1
	[0217.644] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b85a0 | out: pbBuffer=0xc0001b85a0) returned 1
	[0217.644] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215802 | out: pbBuffer=0xc000215802) returned 1
	[0217.644] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215863 | out: pbBuffer=0xc000215863) returned 1
	[0217.644] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b85e0 | out: pbBuffer=0xc0001b85e0) returned 1
	[0217.644] GetFileType (hFile=0xcc) returned 0x1
	[0217.644] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7116) returned 1
	[0217.645] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x1bcc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1bcc, lpOverlapped=0xc000155ce8) returned 1
	[0217.645] GetFileType (hFile=0xcc) returned 0x1
	[0217.645] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1bcc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7116) returned 1
	[0217.645] GetFileType (hFile=0xcc) returned 0x1
	[0217.646] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7116) returned 1
	[0217.646] WriteFile (in: hFile=0xcc, lpBuffer=0xc000437180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000437180*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0217.646] GetFileType (hFile=0xcc) returned 0x1
	[0217.646] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1bcc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7116) returned 1
	[0217.646] CloseHandle (hObject=0xcc) returned 1
	[0217.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf.egmwv")) returned 0x20
	[0217.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.652] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.702] SetEvent (hEvent=0x104) returned 1
	[0217.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf")) returned 0x20
	[0217.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x20) returned 1
	[0217.705] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.752] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000343cc4 | out: lpMode=0xc000343cc4) returned 0
	[0217.752] ReadFile (in: hFile=0xa8, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0xaac, lpNumberOfBytesRead=0xc000343cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000343cec*=0xaac, lpOverlapped=0x0) returned 1
	[0217.760] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0217.760] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0217.761] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1202 | out: pbBuffer=0xc0002c1202) returned 1
	[0217.761] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c127d | out: pbBuffer=0xc0002c127d) returned 1
	[0217.761] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0217.762] GetFileType (hFile=0xa8) returned 0x1
	[0217.762] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=2732) returned 1
	[0217.762] WriteFile (in: hFile=0xa8, lpBuffer=0xc000384000*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc000384000*, lpNumberOfBytesWritten=0xc000465ccc*=0xaac, lpOverlapped=0xc000465ce8) returned 1
	[0217.762] GetFileType (hFile=0xa8) returned 0x1
	[0217.763] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xaac, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=2732) returned 1
	[0217.763] GetFileType (hFile=0xa8) returned 0x1
	[0217.763] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=2732) returned 1
	[0217.764] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000f1500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0000f1500*, lpNumberOfBytesWritten=0xc000465ccc*=0x22a, lpOverlapped=0xc000465ce8) returned 1
	[0217.764] GetFileType (hFile=0xa8) returned 0x1
	[0217.765] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xaac, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=2732) returned 1
	[0217.765] CloseHandle (hObject=0xa8) returned 1
	[0217.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf.egmwv")) returned 0x20
	[0217.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.770] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.787] SetEvent (hEvent=0x104) returned 1
	[0217.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf")) returned 0x20
	[0217.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x20) returned 1
	[0217.791] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.817] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0217.817] ReadFile (in: hFile=0xe8, lpBuffer=0xc00024cc00, nNumberOfBytesToRead=0x1258, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00024cc00*, lpNumberOfBytesRead=0xc000425cec*=0x1258, lpOverlapped=0x0) returned 1
	[0217.826] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8a50 | out: pbBuffer=0xc0001b8a50) returned 1
	[0217.826] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000357e02 | out: pbBuffer=0xc000357e02) returned 1
	[0217.826] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000357e16 | out: pbBuffer=0xc000357e16) returned 1
	[0217.826] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000357e1e | out: pbBuffer=0xc000357e1e) returned 1
	[0217.826] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000357e8a | out: pbBuffer=0xc000357e8a) returned 1
	[0217.826] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8a90 | out: pbBuffer=0xc0001b8a90) returned 1
	[0217.827] GetFileType (hFile=0xe8) returned 0x1
	[0217.827] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4696) returned 1
	[0217.828] WriteFile (in: hFile=0xe8, lpBuffer=0xc000174000*, nNumberOfBytesToWrite=0x1258, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000174000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1258, lpOverlapped=0xc000155ce8) returned 1
	[0217.828] GetFileType (hFile=0xe8) returned 0x1
	[0217.828] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1258, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4696) returned 1
	[0217.829] GetFileType (hFile=0xe8) returned 0x1
	[0217.829] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4696) returned 1
	[0217.829] WriteFile (in: hFile=0xe8, lpBuffer=0xc000123c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000123c00*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0217.829] GetFileType (hFile=0xe8) returned 0x1
	[0217.829] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1258, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4696) returned 1
	[0217.829] CloseHandle (hObject=0xe8) returned 1
	[0217.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf.egmwv")) returned 0x20
	[0217.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.834] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.850] SetEvent (hEvent=0x104) returned 1
	[0217.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf")) returned 0x20
	[0217.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x20) returned 1
	[0217.855] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.880] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0217.880] ReadFile (in: hFile=0xcc, lpBuffer=0xc00022d000, nNumberOfBytesToRead=0xd90, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00022d000*, lpNumberOfBytesRead=0xc000425cec*=0xd90, lpOverlapped=0x0) returned 1
	[0217.887] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d85d0 | out: pbBuffer=0xc0001d85d0) returned 1
	[0217.888] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d85ea | out: pbBuffer=0xc0001d85ea) returned 1
	[0217.888] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b1b02 | out: pbBuffer=0xc0000b1b02) returned 1
	[0217.888] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000b1b3e | out: pbBuffer=0xc0000b1b3e) returned 1
	[0217.888] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8610 | out: pbBuffer=0xc0001d8610) returned 1
	[0217.888] GetFileType (hFile=0xcc) returned 0x1
	[0217.888] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=3472) returned 1
	[0217.888] WriteFile (in: hFile=0xcc, lpBuffer=0xc000246000*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000246000*, lpNumberOfBytesWritten=0xc000469ccc*=0xd90, lpOverlapped=0xc000469ce8) returned 1
	[0217.889] GetFileType (hFile=0xcc) returned 0x1
	[0217.889] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xd90, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=3472) returned 1
	[0217.889] GetFileType (hFile=0xcc) returned 0x1
	[0217.889] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=3472) returned 1
	[0217.889] WriteFile (in: hFile=0xcc, lpBuffer=0xc000260000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000260000*, lpNumberOfBytesWritten=0xc000469ccc*=0x227, lpOverlapped=0xc000469ce8) returned 1
	[0217.890] GetFileType (hFile=0xcc) returned 0x1
	[0217.890] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xd90, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=3472) returned 1
	[0217.890] CloseHandle (hObject=0xcc) returned 1
	[0217.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf.egmwv")) returned 0x20
	[0217.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.893] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.898] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.908] SetEvent (hEvent=0x104) returned 1
	[0217.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf")) returned 0x20
	[0217.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x20) returned 1
	[0217.911] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.936] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0217.936] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003c2000, nNumberOfBytesToRead=0x3004, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c2000*, lpNumberOfBytesRead=0xc000425cec*=0x3004, lpOverlapped=0x0) returned 1
	[0217.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0217.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eaa | out: pbBuffer=0xc000052eaa) returned 1
	[0217.942] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001fab02 | out: pbBuffer=0xc0001fab02) returned 1
	[0217.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0217.943] GetFileType (hFile=0xcc) returned 0x1
	[0217.943] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=12292) returned 1
	[0217.943] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002f6000*, nNumberOfBytesToWrite=0x3004, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0002f6000*, lpNumberOfBytesWritten=0xc000465ccc*=0x3004, lpOverlapped=0xc000465ce8) returned 1
	[0217.943] GetFileType (hFile=0xcc) returned 0x1
	[0217.943] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x3004, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=12292) returned 1
	[0217.943] GetFileType (hFile=0xcc) returned 0x1
	[0217.944] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=12292) returned 1
	[0217.944] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002e6700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0002e6700*, lpNumberOfBytesWritten=0xc000465ccc*=0x221, lpOverlapped=0xc000465ce8) returned 1
	[0217.944] GetFileType (hFile=0xcc) returned 0x1
	[0217.944] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x3004, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=12292) returned 1
	[0217.945] CloseHandle (hObject=0xcc) returned 1
	[0217.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf.egmwv")) returned 0x20
	[0217.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.947] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0217.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf")) returned 0x20
	[0217.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x20) returned 1
	[0217.953] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.993] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0217.993] ReadFile (in: hFile=0xa8, lpBuffer=0xc00037c000, nNumberOfBytesToRead=0x3e9e, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesRead=0xc000425cec*=0x3e9e, lpOverlapped=0x0) returned 1
	[0217.999] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82a0 | out: pbBuffer=0xc0001d82a0) returned 1
	[0217.999] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d82ba | out: pbBuffer=0xc0001d82ba) returned 1
	[0217.999] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1602 | out: pbBuffer=0xc0002c1602) returned 1
	[0218.000] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82e0 | out: pbBuffer=0xc0001d82e0) returned 1
	[0218.000] GetFileType (hFile=0xa8) returned 0x1
	[0218.000] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16030) returned 1
	[0218.000] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001da000*, nNumberOfBytesToWrite=0x3e9e, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001da000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3e9e, lpOverlapped=0xc000155ce8) returned 1
	[0218.001] GetFileType (hFile=0xa8) returned 0x1
	[0218.001] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3e9e, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16030) returned 1
	[0218.001] GetFileType (hFile=0xa8) returned 0x1
	[0218.001] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16030) returned 1
	[0218.002] WriteFile (in: hFile=0xa8, lpBuffer=0xc00010a700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00010a700*, lpNumberOfBytesWritten=0xc000155ccc*=0x236, lpOverlapped=0xc000155ce8) returned 1
	[0218.002] GetFileType (hFile=0xa8) returned 0x1
	[0218.002] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3e9e, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16030) returned 1
	[0218.003] CloseHandle (hObject=0xa8) returned 1
	[0218.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf.egmwv")) returned 0x20
	[0218.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.008] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf")) returned 0x20
	[0218.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x20) returned 1
	[0218.014] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.053] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0218.053] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002c8000, nNumberOfBytesToRead=0x1ca4, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesRead=0xc000425cec*=0x1ca4, lpOverlapped=0x0) returned 1
	[0218.059] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82a0 | out: pbBuffer=0xc0001b82a0) returned 1
	[0218.059] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215c02 | out: pbBuffer=0xc000215c02) returned 1
	[0218.060] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82e0 | out: pbBuffer=0xc0001b82e0) returned 1
	[0218.061] GetFileType (hFile=0xe8) returned 0x1
	[0218.061] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=7332) returned 1
	[0218.061] WriteFile (in: hFile=0xe8, lpBuffer=0xc00034e000*, nNumberOfBytesToWrite=0x1ca4, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc00034e000*, lpNumberOfBytesWritten=0xc000465ccc*=0x1ca4, lpOverlapped=0xc000465ce8) returned 1
	[0218.061] GetFileType (hFile=0xe8) returned 0x1
	[0218.062] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1ca4, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=7332) returned 1
	[0218.062] GetFileType (hFile=0xe8) returned 0x1
	[0218.062] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=7332) returned 1
	[0218.062] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002eae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0002eae00*, lpNumberOfBytesWritten=0xc000465ccc*=0x22a, lpOverlapped=0xc000465ce8) returned 1
	[0218.062] GetFileType (hFile=0xe8) returned 0x1
	[0218.063] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1ca4, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=7332) returned 1
	[0218.063] CloseHandle (hObject=0xe8) returned 1
	[0218.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf.egmwv")) returned 0x20
	[0218.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.067] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.085] SetEvent (hEvent=0x104) returned 1
	[0218.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf")) returned 0x20
	[0218.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x20) returned 1
	[0218.087] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.113] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0218.113] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000b0000, nNumberOfBytesToRead=0x72f8, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000b0000*, lpNumberOfBytesRead=0xc000423cec*=0x72f8, lpOverlapped=0x0) returned 1
	[0218.119] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8420 | out: pbBuffer=0xc0001b8420) returned 1
	[0218.119] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b843a | out: pbBuffer=0xc0001b843a) returned 1
	[0218.119] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ba802 | out: pbBuffer=0xc0000ba802) returned 1
	[0218.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8460 | out: pbBuffer=0xc0001b8460) returned 1
	[0218.120] GetFileType (hFile=0xcc) returned 0x1
	[0218.120] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=29432) returned 1
	[0218.120] WriteFile (in: hFile=0xcc, lpBuffer=0xc000168000*, nNumberOfBytesToWrite=0x72f8, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc000168000*, lpNumberOfBytesWritten=0xc000465ccc*=0x72f8, lpOverlapped=0xc000465ce8) returned 1
	[0218.121] GetFileType (hFile=0xcc) returned 0x1
	[0218.121] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x72f8, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=29432) returned 1
	[0218.121] GetFileType (hFile=0xcc) returned 0x1
	[0218.122] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=29432) returned 1
	[0218.122] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003fc700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0003fc700*, lpNumberOfBytesWritten=0xc000465ccc*=0x233, lpOverlapped=0xc000465ce8) returned 1
	[0218.122] GetFileType (hFile=0xcc) returned 0x1
	[0218.122] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x72f8, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=29432) returned 1
	[0218.122] CloseHandle (hObject=0xcc) returned 1
	[0218.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf.egmwv")) returned 0x20
	[0218.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.125] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.134] SetEvent (hEvent=0x104) returned 1
	[0218.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf")) returned 0x20
	[0218.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x20) returned 1
	[0218.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.168] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0218.168] ReadFile (in: hFile=0xe8, lpBuffer=0xc000232000, nNumberOfBytesToRead=0xe60, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000232000*, lpNumberOfBytesRead=0xc000429cec*=0xe60, lpOverlapped=0x0) returned 1
	[0218.174] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0218.174] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0218.174] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00023a402 | out: pbBuffer=0xc00023a402) returned 1
	[0218.174] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00023a409 | out: pbBuffer=0xc00023a409) returned 1
	[0218.174] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00023a4bc | out: pbBuffer=0xc00023a4bc) returned 1
	[0218.175] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0218.175] GetFileType (hFile=0xe8) returned 0x1
	[0218.175] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=3680) returned 1
	[0218.175] WriteFile (in: hFile=0xe8, lpBuffer=0xc00025a000*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc00025a000*, lpNumberOfBytesWritten=0xc000469ccc*=0xe60, lpOverlapped=0xc000469ce8) returned 1
	[0218.175] GetFileType (hFile=0xe8) returned 0x1
	[0218.176] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xe60, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=3680) returned 1
	[0218.176] GetFileType (hFile=0xe8) returned 0x1
	[0218.176] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=3680) returned 1
	[0218.176] WriteFile (in: hFile=0xe8, lpBuffer=0xc000242e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000242e00*, lpNumberOfBytesWritten=0xc000469ccc*=0x227, lpOverlapped=0xc000469ce8) returned 1
	[0218.177] GetFileType (hFile=0xe8) returned 0x1
	[0218.177] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xe60, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=3680) returned 1
	[0218.177] CloseHandle (hObject=0xe8) returned 1
	[0218.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf.egmwv")) returned 0x20
	[0218.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.179] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.184] SetEvent (hEvent=0x104) returned 1
	[0218.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf")) returned 0x20
	[0218.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x20) returned 1
	[0218.185] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0218.226] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0218.226] ReadFile (in: hFile=0xa8, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x14ce, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000429cec*=0x14ce, lpOverlapped=0x0) returned 1
	[0218.232] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0218.232] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0218.232] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d30 | out: pbBuffer=0xc0002c0d30) returned 1
	[0218.232] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d61 | out: pbBuffer=0xc0002c0d61) returned 1
	[0218.232] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0218.232] GetFileType (hFile=0xa8) returned 0x1
	[0218.233] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000131ca0*=5326) returned 1
	[0218.233] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004a4000*, nNumberOfBytesToWrite=0x14ce, lpNumberOfBytesWritten=0xc000131ccc, lpOverlapped=0xc000131ce8 | out: lpBuffer=0xc0004a4000*, lpNumberOfBytesWritten=0xc000131ccc*=0x14ce, lpOverlapped=0xc000131ce8) returned 1
	[0218.233] GetFileType (hFile=0xa8) returned 0x1
	[0218.233] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x14ce, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000131ca0*=5326) returned 1
	[0218.233] GetFileType (hFile=0xa8) returned 0x1
	[0218.234] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000131ca0*=5326) returned 1
	[0218.234] WriteFile (in: hFile=0xa8, lpBuffer=0xc000307500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000131ccc, lpOverlapped=0xc000131ce8 | out: lpBuffer=0xc000307500*, lpNumberOfBytesWritten=0xc000131ccc*=0x22d, lpOverlapped=0xc000131ce8) returned 1
	[0218.234] GetFileType (hFile=0xa8) returned 0x1
	[0218.234] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x14ce, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000131ca0*=5326) returned 1
	[0218.234] CloseHandle (hObject=0xa8) returned 1
	[0218.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf.egmwv")) returned 0x20
	[0218.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.239] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.253] SetEvent (hEvent=0x120) returned 1
	[0218.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf")) returned 0x20
	[0218.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x20) returned 1
	[0218.256] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.297] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0218.297] ReadFile (in: hFile=0xcc, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x1b00, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc0002d5cec*=0x1b00, lpOverlapped=0x0) returned 1
	[0218.302] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8290 | out: pbBuffer=0xc0001b8290) returned 1
	[0218.302] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b82aa | out: pbBuffer=0xc0001b82aa) returned 1
	[0218.302] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001e02 | out: pbBuffer=0xc000001e02) returned 1
	[0218.302] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001e42 | out: pbBuffer=0xc000001e42) returned 1
	[0218.302] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82d0 | out: pbBuffer=0xc0001b82d0) returned 1
	[0218.303] GetFileType (hFile=0xcc) returned 0x1
	[0218.303] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6912) returned 1
	[0218.303] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002ac000*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002ac000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1b00, lpOverlapped=0xc000155ce8) returned 1
	[0218.303] GetFileType (hFile=0xcc) returned 0x1
	[0218.303] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1b00, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6912) returned 1
	[0218.303] GetFileType (hFile=0xcc) returned 0x1
	[0218.304] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6912) returned 1
	[0218.304] WriteFile (in: hFile=0xcc, lpBuffer=0xc000373180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000373180*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0218.304] GetFileType (hFile=0xcc) returned 0x1
	[0218.304] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1b00, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6912) returned 1
	[0218.304] CloseHandle (hObject=0xcc) returned 1
	[0218.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf.egmwv")) returned 0x20
	[0218.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.306] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf")) returned 0x20
	[0218.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x20) returned 1
	[0218.320] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.347] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0218.347] ReadFile (in: hFile=0xcc, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x668c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc0002d7cec*=0x668c, lpOverlapped=0x0) returned 1
	[0218.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0218.353] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0218.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b28 | out: pbBuffer=0xc0002c1b28) returned 1
	[0218.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b2f | out: pbBuffer=0xc0002c1b2f) returned 1
	[0218.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0218.354] GetFileType (hFile=0xcc) returned 0x1
	[0218.354] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000131ca0*=26252) returned 1
	[0218.354] WriteFile (in: hFile=0xcc, lpBuffer=0xc000104000*, nNumberOfBytesToWrite=0x668c, lpNumberOfBytesWritten=0xc000131ccc, lpOverlapped=0xc000131ce8 | out: lpBuffer=0xc000104000*, lpNumberOfBytesWritten=0xc000131ccc*=0x668c, lpOverlapped=0xc000131ce8) returned 1
	[0218.354] GetFileType (hFile=0xcc) returned 0x1
	[0218.355] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x668c, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000131ca0*=26252) returned 1
	[0218.355] GetFileType (hFile=0xcc) returned 0x1
	[0218.355] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000131ca0*=26252) returned 1
	[0218.355] WriteFile (in: hFile=0xcc, lpBuffer=0xc00016ce00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000131ccc, lpOverlapped=0xc000131ce8 | out: lpBuffer=0xc00016ce00*, lpNumberOfBytesWritten=0xc000131ccc*=0x22d, lpOverlapped=0xc000131ce8) returned 1
	[0218.355] GetFileType (hFile=0xcc) returned 0x1
	[0218.355] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x668c, lpNewFilePointer=0xc000131ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000131ca0*=26252) returned 1
	[0218.355] CloseHandle (hObject=0xcc) returned 1
	[0218.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf.egmwv")) returned 0x20
	[0218.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.358] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.362] SetEvent (hEvent=0x120) returned 1
	[0218.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf")) returned 0x20
	[0218.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x20) returned 1
	[0218.363] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.400] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0218.400] ReadFile (in: hFile=0xe8, lpBuffer=0xc00031a000, nNumberOfBytesToRead=0x8860, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc00031a000*, lpNumberOfBytesRead=0xc0002d7cec*=0x8860, lpOverlapped=0x0) returned 1
	[0218.407] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0218.407] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215802 | out: pbBuffer=0xc000215802) returned 1
	[0218.407] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215833 | out: pbBuffer=0xc000215833) returned 1
	[0218.407] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021586f | out: pbBuffer=0xc00021586f) returned 1
	[0218.407] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0218.407] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x102
	[0218.409] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.409] SetEvent (hEvent=0x70) returned 1
	[0218.409] SetEvent (hEvent=0x124) returned 1
	[0218.410] GetFileType (hFile=0xe8) returned 0x1
	[0218.410] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00012dca0*=34912) returned 1
	[0218.410] WriteFile (in: hFile=0xe8, lpBuffer=0xc00024c000*, nNumberOfBytesToWrite=0x8860, lpNumberOfBytesWritten=0xc00012dccc, lpOverlapped=0xc00012dce8 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesWritten=0xc00012dccc*=0x8860, lpOverlapped=0xc00012dce8) returned 1
	[0218.411] GetFileType (hFile=0xe8) returned 0x1
	[0218.411] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x8860, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00012dca0*=34912) returned 1
	[0218.411] GetFileType (hFile=0xe8) returned 0x1
	[0218.411] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00012dca0*=34912) returned 1
	[0218.411] WriteFile (in: hFile=0xe8, lpBuffer=0xc000332700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00012dccc, lpOverlapped=0xc00012dce8 | out: lpBuffer=0xc000332700*, lpNumberOfBytesWritten=0xc00012dccc*=0x227, lpOverlapped=0xc00012dce8) returned 1
	[0218.411] GetFileType (hFile=0xe8) returned 0x1
	[0218.412] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x8860, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00012dca0*=34912) returned 1
	[0218.412] CloseHandle (hObject=0xe8) returned 1
	[0218.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf.egmwv")) returned 0x20
	[0218.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.416] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.420] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.424] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.439] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.831] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.965] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.984] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0218.995] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0219.021] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0219.053] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0219.075] SetEvent (hEvent=0x120) returned 1
	[0219.075] SetEvent (hEvent=0xe4) returned 1
	[0219.075] SetEvent (hEvent=0x144) returned 1
	[0219.075] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0219.078] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0219.080] SetEvent (hEvent=0xe4) returned 1
	[0219.080] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0x1) returned 0x0
	[0219.088] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0219.213] SetEvent (hEvent=0x144) returned 1
	[0219.213] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) 

Thread:
	id = 29
	os_tid = 0x8fc

	[0065.443] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x3f2feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3f2feb0*=0xb4) returned 1
	[0065.443] VirtualQuery (in: lpAddress=0x3f2fed0, lpBuffer=0x3f2fed0, dwLength=0x30 | out: lpBuffer=0x3f2fed0*(BaseAddress=0x3f2f000, AllocationBase=0x3d30000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0065.443] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xb0
	[0065.443] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0065.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc000037180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8
	[0065.565] CloseHandle (hObject=0xb8) returned 1
	[0065.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc000037500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8
	[0065.592] CloseHandle (hObject=0xb8) returned 1
	[0065.592] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0065.624] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0065.625] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0065.627] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0065.627] SetEvent (hEvent=0x68) returned 1
	[0065.628] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0065.727] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0065.727] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0067.930] SetEvent (hEvent=0xc8) returned 1
	[0067.930] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0067.941] SetEvent (hEvent=0xc8) returned 1
	[0067.941] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0067.956] SetEvent (hEvent=0xc8) returned 1
	[0067.956] SetEvent (hEvent=0x5c) returned 1
	[0067.956] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab")) returned 0x2020
	[0067.956] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", dwFileAttributes=0x2020) returned 1
	[0068.025] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.egmwv"), dwFlags=0x1) returned 1
	[0074.101] SwitchToThread () returned 1
	[0075.300] VirtualAlloc (lpAddress=0xc00006c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006c000
	[0075.301] SwitchToThread () returned 1
	[0075.319] VirtualAlloc (lpAddress=0xc00006e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006e000
	[0075.320] ReadFile (in: hFile=0xec, lpBuffer=0xc000242000, nNumberOfBytesToRead=0x2ac99, lpNumberOfBytesRead=0xc000163cec, lpOverlapped=0x0 | out: lpBuffer=0xc000242000*, lpNumberOfBytesRead=0xc000163cec*=0x2ac99, lpOverlapped=0x0) returned 1
	[0075.397] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0075.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005213a | out: pbBuffer=0xc00005213a) returned 1
	[0075.399] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0075.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038b56 | out: pbBuffer=0xc000038b56) returned 1
	[0075.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038bb4 | out: pbBuffer=0xc000038bb4) returned 1
	[0075.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052160 | out: pbBuffer=0xc000052160) returned 1
	[0075.400] VirtualAlloc (lpAddress=0xc000122000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000122000
	[0075.401] VirtualFree (lpAddress=0xc0003a2000, dwSize=0x42000, dwFreeType=0x4000) returned 1
	[0075.413] VirtualAlloc (lpAddress=0xc0002c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c4000
	[0075.414] VirtualAlloc (lpAddress=0xc0002c8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c8000
	[0075.428] VirtualAlloc (lpAddress=0xc00020e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020e000
	[0075.429] VirtualAlloc (lpAddress=0xc00042a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00042a000
	[0075.431] VirtualAlloc (lpAddress=0xc00026e000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00026e000
	[0075.574] SwitchToThread () returned 1
	[0075.921] VirtualAlloc (lpAddress=0xc0003a2000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a2000
	[0075.930] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0076.438] SwitchToThread () returned 1
	[0077.007] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0077.853] VirtualAlloc (lpAddress=0xc000bb4000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bb4000
	[0077.860] SetEvent (hEvent=0x5c) returned 1
	[0077.863] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bf4000
	[0077.866] VirtualAlloc (lpAddress=0xc000bf8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bf8000
	[0077.868] VirtualAlloc (lpAddress=0xc000bfc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bfc000
	[0077.870] VirtualAlloc (lpAddress=0xc0003c2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003c2000
	[0077.873] VirtualAlloc (lpAddress=0xc0003c6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003c6000
	[0077.875] VirtualAlloc (lpAddress=0xc0003ca000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ca000
	[0077.877] VirtualAlloc (lpAddress=0xc0003ce000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ce000
	[0077.880] VirtualAlloc (lpAddress=0xc000138000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000138000
	[0077.882] VirtualAlloc (lpAddress=0xc00013c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013c000
	[0077.885] VirtualAlloc (lpAddress=0xc000140000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000140000
	[0078.014] VirtualAlloc (lpAddress=0xc000144000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000144000
	[0078.016] VirtualAlloc (lpAddress=0xc000148000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000148000
	[0078.018] VirtualAlloc (lpAddress=0xc00014c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014c000
	[0078.020] VirtualAlloc (lpAddress=0xc0002c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c0000
	[0078.021] VirtualAlloc (lpAddress=0xc0002d0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002d0000
	[0078.022] VirtualAlloc (lpAddress=0xc000408000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000408000
	[0078.023] VirtualAlloc (lpAddress=0xc000374000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000374000
	[0078.024] VirtualAlloc (lpAddress=0xc000376000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000376000
	[0078.068] VirtualAlloc (lpAddress=0xc000378000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000378000
	[0078.070] VirtualAlloc (lpAddress=0xc000410000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000410000
	[0078.071] VirtualAlloc (lpAddress=0xc000412000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000412000
	[0078.072] VirtualAlloc (lpAddress=0xc0000b2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b2000
	[0078.074] VirtualAlloc (lpAddress=0xc00031e000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00031e000
	[0078.078] VirtualAlloc (lpAddress=0xc000624000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000624000
	[0078.086] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.434] SwitchToThread () returned 1
	[0078.771] SwitchToThread () returned 1
	[0078.937] SetEvent (hEvent=0xc4) returned 1
	[0078.937] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0079.061] SetEvent (hEvent=0xc4) returned 1
	[0079.062] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000a6500*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038d9b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6500*, lpNumberOfBytesWritten=0xc00038d9b4*=0x25d, lpOverlapped=0x0) returned 1
	[0079.067] CloseHandle (hObject=0xe0) returned 1
	[0079.068] VirtualAlloc (lpAddress=0xc0000dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000dc000
	[0079.069] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8f86a3f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x8f86a3f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0079.070] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0079.071] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc00038d708 | out: lpFindFileData=0xc00038d708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0083.672] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.672] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0083.673] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
	[0083.673] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
	[0083.673] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1
	[0083.673] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0083.673] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0083.674] VirtualAlloc (lpAddress=0xc0003e6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e6000
	[0083.677] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1
	[0083.681] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1
	[0083.681] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1
	[0083.683] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc00038d880 | out: lpFileInformation=0xc00038d880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1
	[0083.683] VirtualAlloc (lpAddress=0xc0003e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e8000
	[0083.684] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0084.032] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038da14 | out: lpMode=0xc00038da14) returned 0
	[0084.032] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ea000
	[0084.033] VirtualAlloc (lpAddress=0xc0003ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ec000
	[0084.034] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003ec000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc00038d9b4, lpOverlapped=0x0 | out: lpBuffer=0xc0003ec000*, lpNumberOfBytesWritten=0xc00038d9b4*=0x25d, lpOverlapped=0x0) returned 1
	[0084.038] CloseHandle (hObject=0xe0) returned 1
	[0084.040] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc00038d990 | out: lpFileInformation=0xc00038d990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9446f2f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0x9446f2f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0084.041] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.041] VirtualAlloc (lpAddress=0xc0003ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ee000
	[0084.042] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc00038d708 | out: lpFindFileData=0xc00038d708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0085.948] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.949] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0085.949] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0085.949] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0085.949] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
	[0085.949] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
	[0085.949] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0085.949] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d7a8 | out: lpFindFileData=0xc00038d7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0085.949] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0085.952] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0085.955] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0xc00038d5f8 | out: lpFindFileData=0xc00038d5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0085.956] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.956] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0085.956] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0085.957] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0085.957] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc00038d698 | out: lpFindFileData=0xc00038d698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0085.957] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0085.959] VirtualAlloc (lpAddress=0xc00033c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00033c000
	[0085.961] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000343770 | out: lpFileInformation=0xc000343770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1
	[0086.160] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000343770 | out: lpFileInformation=0xc000343770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1
	[0086.160] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000343770 | out: lpFileInformation=0xc000343770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1
	[0086.161] SwitchToThread () returned 1
	[0086.267] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.555] SetEvent (hEvent=0x68) returned 1
	[0086.556] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 0x2020
	[0086.556] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", dwFileAttributes=0x2020) returned 1
	[0086.682] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.egmwv"), dwFlags=0x1) returned 1
	[0086.683] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc
	[0086.683] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0086.684] ReadFile (in: hFile=0xdc, lpBuffer=0xc00027a000, nNumberOfBytesToRead=0x543, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00027a000*, lpNumberOfBytesRead=0xc000423cec*=0x543, lpOverlapped=0x0) returned 1
	[0086.851] SwitchToThread () returned 1
	[0086.975] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0091.156] SwitchToThread () returned 1
	[0092.530] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0093.278] VirtualAlloc (lpAddress=0xc000050000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000050000
	[0093.279] SetEvent (hEvent=0x68) returned 1
	[0093.279] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0093.280] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0093.280] VirtualAlloc (lpAddress=0xc00015c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015c000
	[0093.281] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0093.284] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0093.285] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0093.285] VirtualAlloc (lpAddress=0xc0001ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ca000
	[0093.286] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001ca000, nNumberOfBytesToRead=0x978, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ca000*, lpNumberOfBytesRead=0xc000387cec*=0x978, lpOverlapped=0x0) returned 1
	[0093.358] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0093.612] VirtualAlloc (lpAddress=0xc000184000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000184000
	[0093.615] VirtualAlloc (lpAddress=0xc00020a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020a000
	[0093.616] VirtualAlloc (lpAddress=0xc00020e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020e000
	[0093.618] VirtualAlloc (lpAddress=0xc000210000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000210000
	[0093.618] VirtualAlloc (lpAddress=0xc000212000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000212000
	[0093.619] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ea000
	[0093.620] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a02a0 | out: pbBuffer=0xc0003a02a0) returned 1
	[0093.620] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a02ba | out: pbBuffer=0xc0003a02ba) returned 1
	[0093.620] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039902 | out: pbBuffer=0xc000039902) returned 1
	[0093.620] VirtualAlloc (lpAddress=0xc0003ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ec000
	[0093.621] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a02e0 | out: pbBuffer=0xc0003a02e0) returned 1
	[0093.622] VirtualAlloc (lpAddress=0xc000068000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000068000
	[0093.624] GetFileType (hFile=0xa8) returned 0x1
	[0093.624] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000b1ca0*=2424) returned 1
	[0093.624] WriteFile (in: hFile=0xa8, lpBuffer=0xc000211000*, nNumberOfBytesToWrite=0x978, lpNumberOfBytesWritten=0xc0000b1ccc, lpOverlapped=0xc0000b1ce8 | out: lpBuffer=0xc000211000*, lpNumberOfBytesWritten=0xc0000b1ccc*=0x978, lpOverlapped=0xc0000b1ce8) returned 1
	[0093.625] GetFileType (hFile=0xa8) returned 0x1
	[0093.625] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x978, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000b1ca0*=2424) returned 1
	[0093.625] VirtualAlloc (lpAddress=0xc0003ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ee000
	[0093.626] GetFileType (hFile=0xa8) returned 0x1
	[0093.626] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000b1ca0*=2424) returned 1
	[0093.626] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003eae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000b1ccc, lpOverlapped=0xc0000b1ce8 | out: lpBuffer=0xc0003eae00*, lpNumberOfBytesWritten=0xc0000b1ccc*=0x22a, lpOverlapped=0xc0000b1ce8) returned 1
	[0093.626] GetFileType (hFile=0xa8) returned 0x1
	[0093.627] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x978, lpNewFilePointer=0xc0000b1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000b1ca0*=2424) returned 1
	[0093.627] CloseHandle (hObject=0xa8) returned 1
	[0093.628] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0093.628] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0093.629] ReadFile (in: hFile=0xe0, lpBuffer=0xc000bb4000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000bb4000*, lpNumberOfBytesRead=0xc00016bcec*=0x100000, lpOverlapped=0x0) returned 1
	[0093.768] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0093.917] VirtualAlloc (lpAddress=0xc0001f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f0000
	[0093.918] SetEvent (hEvent=0x90) returned 1
	[0093.918] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0094.061] SwitchToThread () returned 1
	[0094.234] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0094.311] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0094.349] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0094.349] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x0
	[0094.398] SetEvent (hEvent=0x68) returned 1
	[0094.399] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0094.473] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0094.473] SwitchToThread () returned 1
	[0099.100] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0101.519] SwitchToThread () returned 1
	[0101.659] VirtualAlloc (lpAddress=0xc0000dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000dc000
	[0101.660] VirtualAlloc (lpAddress=0xc000206000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000206000
	[0101.662] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab")) returned 0x2020
	[0101.663] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", dwFileAttributes=0x2020) returned 1
	[0101.749] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.egmwv"), dwFlags=0x1) returned 1
	[0101.751] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0101.752] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00039bcc4 | out: lpMode=0xc00039bcc4) returned 0
	[0101.752] VirtualAlloc (lpAddress=0xc000438000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000438000
	[0102.040] VirtualAlloc (lpAddress=0xc000382000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000382000
	[0102.041] VirtualAlloc (lpAddress=0xc0002b6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b6000
	[0102.149] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.egmwv")) returned 0x2020
	[0102.150] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0102.150] VirtualAlloc (lpAddress=0xc0002ba000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ba000
	[0102.151] VirtualAlloc (lpAddress=0xc0002bc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002bc000
	[0102.152] VirtualAlloc (lpAddress=0xc0002be000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002be000
	[0102.152] VirtualAlloc (lpAddress=0xc0002c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c0000
	[0102.153] VirtualAlloc (lpAddress=0xc00042a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00042a000
	[0102.154] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0102.384] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0102.384] SetEvent (hEvent=0x70) returned 1
	[0102.384] SetEvent (hEvent=0x5c) returned 1
	[0102.385] SetEvent (hEvent=0x90) returned 1
	[0102.385] VirtualAlloc (lpAddress=0xc00042c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00042c000
	[0102.388] VirtualAlloc (lpAddress=0xc000434000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000434000
	[0102.390] VirtualAlloc (lpAddress=0xc000b18000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b18000
	[0102.390] VirtualAlloc (lpAddress=0xc000b1a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b1a000
	[0102.391] VirtualAlloc (lpAddress=0xc000b1c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b1c000
	[0102.392] VirtualAlloc (lpAddress=0xc000b1e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b1e000
	[0102.392] VirtualAlloc (lpAddress=0xc000b20000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b20000
	[0102.393] VirtualAlloc (lpAddress=0xc000b22000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b22000
	[0102.393] VirtualAlloc (lpAddress=0xc0001f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f6000
	[0102.394] VirtualAlloc (lpAddress=0xc0001f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f8000
	[0102.394] VirtualAlloc (lpAddress=0xc0001fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fa000
	[0102.395] VirtualAlloc (lpAddress=0xc0001fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fc000
	[0102.396] VirtualAlloc (lpAddress=0xc0001fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fe000
	[0102.397] VirtualAlloc (lpAddress=0xc000200000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000200000
	[0102.397] VirtualAlloc (lpAddress=0xc000202000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000202000
	[0102.398] VirtualAlloc (lpAddress=0xc000272000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000272000
	[0102.398] VirtualAlloc (lpAddress=0xc000274000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000274000
	[0102.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a130 | out: pbBuffer=0xc00041a130) returned 1
	[0102.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a14a | out: pbBuffer=0xc00041a14a) returned 1
	[0102.399] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000434802 | out: pbBuffer=0xc000434802) returned 1
	[0102.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000434848 | out: pbBuffer=0xc000434848) returned 1
	[0102.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043489e | out: pbBuffer=0xc00043489e) returned 1
	[0102.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004348d5 | out: pbBuffer=0xc0004348d5) returned 1
	[0102.399] VirtualAlloc (lpAddress=0xc000276000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000276000
	[0102.400] VirtualAlloc (lpAddress=0xc000278000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000278000
	[0102.401] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a170 | out: pbBuffer=0xc00041a170) returned 1
	[0102.401] VirtualAlloc (lpAddress=0xc00027a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027a000
	[0102.402] VirtualAlloc (lpAddress=0xc001300000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001300000
	[0102.404] VirtualAlloc (lpAddress=0xc000068000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000068000
	[0102.405] VirtualAlloc (lpAddress=0xc0000b8000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b8000
	[0102.407] VirtualAlloc (lpAddress=0xc00006c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006c000
	[0102.408] VirtualAlloc (lpAddress=0xc0000c6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000c6000
	[0102.409] VirtualAlloc (lpAddress=0xc0001ce000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ce000
	[0102.592] VirtualAlloc (lpAddress=0xc000070000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000070000
	[0102.593] VirtualAlloc (lpAddress=0xc000074000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000074000
	[0102.594] VirtualAlloc (lpAddress=0xc00034a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00034a000
	[0102.596] VirtualAlloc (lpAddress=0xc00034e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00034e000
	[0102.596] VirtualAlloc (lpAddress=0xc0007c0000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007c0000
	[0102.614] VirtualAlloc (lpAddress=0xc000352000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000352000
	[0102.615] VirtualAlloc (lpAddress=0xc000356000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000356000
	[0102.616] VirtualAlloc (lpAddress=0xc0000ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ca000
	[0102.617] VirtualAlloc (lpAddress=0xc0001ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ec000
	[0102.618] VirtualAlloc (lpAddress=0xc00027e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027e000
	[0102.618] VirtualAlloc (lpAddress=0xc00035a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035a000
	[0102.619] VirtualAlloc (lpAddress=0xc0001ac000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ac000
	[0102.622] VirtualAlloc (lpAddress=0xc0001b4000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001b4000
	[0102.625] VirtualAlloc (lpAddress=0xc000324000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000324000
	[0102.817] SetEvent (hEvent=0xc4) returned 1
	[0102.817] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0110.492] SetEvent (hEvent=0x90) returned 1
	[0110.492] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0110.707] SwitchToThread () returned 1
	[0110.864] SwitchToThread () returned 1
	[0111.235] SwitchToThread () returned 1
	[0111.395] VirtualAlloc (lpAddress=0xc000fbe000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.395] VirtualAlloc (lpAddress=0xc000fbe000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.395] VirtualAlloc (lpAddress=0xc000fbe000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.395] VirtualAlloc (lpAddress=0xc000fbe000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fbe000
	[0111.398] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0xc0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.398] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x60000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.399] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.399] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.399] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.399] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.399] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.400] VirtualAlloc (lpAddress=0xc000ffe000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ffe000
	[0111.400] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0xbf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.400] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x5f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.400] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x2f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.400] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x17000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.401] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.401] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.401] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0111.401] VirtualAlloc (lpAddress=0xc000fff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fff000
	[0111.401] VirtualAlloc (lpAddress=0xc001000000, dwSize=0xbe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001000000
	[0111.409] VirtualFree (lpAddress=0xc000d40000, dwSize=0xfc000, dwFreeType=0x4000) returned 1
	[0111.757] SetEvent (hEvent=0x60) returned 1
	[0111.757] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0111.941] SwitchToThread () returned 1
	[0112.141] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0112.263] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0112.263] SetEvent (hEvent=0xe4) returned 1
	[0112.263] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0112.423] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0112.423] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0112.532] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0112.532] SetEvent (hEvent=0x70) returned 1
	[0112.533] SetEvent (hEvent=0xe4) returned 1
	[0112.533] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x1) returned 0x102
	[0112.630] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0112.631] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0100 | out: pbBuffer=0xc0003a0100) returned 1
	[0112.631] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a011a | out: pbBuffer=0xc0003a011a) returned 1
	[0112.631] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0112.632] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038bd8 | out: pbBuffer=0xc000038bd8) returned 1
	[0112.632] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0140 | out: pbBuffer=0xc0003a0140) returned 1
	[0112.634] VirtualAlloc (lpAddress=0xc0011be000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011be000
	[0112.635] VirtualFree (lpAddress=0xc0002e0000, dwSize=0x68000, dwFreeType=0x4000) returned 1
	[0112.650] VirtualAlloc (lpAddress=0xc000d40000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d40000
	[0112.655] VirtualFree (lpAddress=0xc0003a2000, dwSize=0x42000, dwFreeType=0x4000) returned 1
	[0112.809] VirtualAlloc (lpAddress=0xc00067a000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00067a000
	[0112.932] VirtualFree (lpAddress=0xc000cb8000, dwSize=0x5a000, dwFreeType=0x4000) returned 1
	[0112.939] VirtualFree (lpAddress=0xc000912000, dwSize=0x3c000, dwFreeType=0x4000) returned 1
	[0112.944] VirtualFree (lpAddress=0xc0001ce000, dwSize=0x2a000, dwFreeType=0x4000) returned 1
	[0112.947] VirtualFree (lpAddress=0xc000130000, dwSize=0x24000, dwFreeType=0x4000) returned 1
	[0112.950] VirtualFree (lpAddress=0xc0000aa000, dwSize=0x22000, dwFreeType=0x4000) returned 1
	[0112.952] SetEvent (hEvent=0x90) returned 1
	[0117.103] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 0x2020
	[0117.104] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", dwFileAttributes=0x2020) returned 1
	[0117.106] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.egmwv"), dwFlags=0x1) returned 1
	[0122.716] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0122.842] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0122.843] ReadFile (in: hFile=0xd0, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x5b2, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc00038dcec*=0x5b2, lpOverlapped=0x0) returned 1
	[0127.302] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0130 | out: pbBuffer=0xc0003a0130) returned 1
	[0127.302] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a014a | out: pbBuffer=0xc0003a014a) returned 1
	[0127.302] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0127.303] VirtualAlloc (lpAddress=0xc0001b0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001b0000
	[0127.303] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0170 | out: pbBuffer=0xc0003a0170) returned 1
	[0127.303] VirtualAlloc (lpAddress=0xc0001b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001b2000
	[0127.304] GetFileType (hFile=0xd0) returned 0x1
	[0127.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00094bca0*=1458) returned 1
	[0127.305] WriteFile (in: hFile=0xd0, lpBuffer=0xc0001b3000*, nNumberOfBytesToWrite=0x5b2, lpNumberOfBytesWritten=0xc00094bccc, lpOverlapped=0xc00094bce8 | out: lpBuffer=0xc0001b3000*, lpNumberOfBytesWritten=0xc00094bccc*=0x5b2, lpOverlapped=0xc00094bce8) returned 1
	[0127.305] GetFileType (hFile=0xd0) returned 0x1
	[0127.306] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x5b2, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00094bca0*=1458) returned 1
	[0127.306] VirtualAlloc (lpAddress=0xc000374000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000374000
	[0127.306] GetFileType (hFile=0xd0) returned 0x1
	[0127.306] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00094bca0*=1458) returned 1
	[0127.307] WriteFile (in: hFile=0xd0, lpBuffer=0xc00041d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00094bccc, lpOverlapped=0xc00094bce8 | out: lpBuffer=0xc00041d500*, lpNumberOfBytesWritten=0xc00094bccc*=0x22a, lpOverlapped=0xc00094bce8) returned 1
	[0127.307] GetFileType (hFile=0xd0) returned 0x1
	[0127.307] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x5b2, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00094bca0*=1458) returned 1
	[0127.307] CloseHandle (hObject=0xd0) returned 1
	[0127.310] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.egmwv")) returned 0x2020
	[0127.311] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0127.315] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0128.390] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 0x2020
	[0128.390] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", dwFileAttributes=0x2020) returned 1
	[0128.392] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.egmwv"), dwFlags=0x1) returned 1
	[0128.393] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0128.393] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0128.393] VirtualAlloc (lpAddress=0xc0003e6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e6000
	[0128.394] ReadFile (in: hFile=0x84, lpBuffer=0xc0003e6000, nNumberOfBytesToRead=0x4cf, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesRead=0xc000167cec*=0x4cf, lpOverlapped=0x0) returned 1
	[0131.804] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ea000
	[0131.807] VirtualAlloc (lpAddress=0xc000cb0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cb0000
	[0131.808] VirtualAlloc (lpAddress=0xc000cb2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cb2000
	[0131.809] VirtualAlloc (lpAddress=0xc000cb4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cb4000
	[0131.809] VirtualAlloc (lpAddress=0xc000cb6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cb6000
	[0131.810] VirtualAlloc (lpAddress=0xc000e34000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000e34000
	[0131.811] VirtualAlloc (lpAddress=0xc000e36000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000e36000
	[0131.812] VirtualAlloc (lpAddress=0xc000e38000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000e38000
	[0131.813] VirtualAlloc (lpAddress=0xc000e3a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000e3a000
	[0131.814] VirtualAlloc (lpAddress=0xc0002c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c8000
	[0131.815] VirtualAlloc (lpAddress=0xc0002ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ca000
	[0131.816] VirtualAlloc (lpAddress=0xc0002cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002cc000
	[0131.818] VirtualAlloc (lpAddress=0xc0002ce000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ce000
	[0131.819] VirtualAlloc (lpAddress=0xc0002d0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002d0000
	[0131.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101a0 | out: pbBuffer=0xc0000101a0) returned 1
	[0131.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000101ba | out: pbBuffer=0xc0000101ba) returned 1
	[0131.826] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0131.826] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101e0 | out: pbBuffer=0xc0000101e0) returned 1
	[0131.827] GetFileType (hFile=0x84) returned 0x1
	[0131.827] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x0, lpNewFilePointer=0xc000947ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000947ca0*=1231) returned 1
	[0131.827] WriteFile (in: hFile=0x84, lpBuffer=0xc000ac8000*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0xc000947ccc, lpOverlapped=0xc000947ce8 | out: lpBuffer=0xc000ac8000*, lpNumberOfBytesWritten=0xc000947ccc*=0x4cf, lpOverlapped=0xc000947ce8) returned 1
	[0131.828] GetFileType (hFile=0x84) returned 0x1
	[0131.828] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x4cf, lpNewFilePointer=0xc000947ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000947ca0*=1231) returned 1
	[0131.828] GetFileType (hFile=0x84) returned 0x1
	[0131.828] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x0, lpNewFilePointer=0xc000947ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000947ca0*=1231) returned 1
	[0131.828] WriteFile (in: hFile=0x84, lpBuffer=0xc00042b500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000947ccc, lpOverlapped=0xc000947ce8 | out: lpBuffer=0xc00042b500*, lpNumberOfBytesWritten=0xc000947ccc*=0x22d, lpOverlapped=0xc000947ce8) returned 1
	[0131.829] GetFileType (hFile=0x84) returned 0x1
	[0131.829] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x4cf, lpNewFilePointer=0xc000947ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000947ca0*=1231) returned 1
	[0131.829] CloseHandle (hObject=0x84) returned 1
	[0131.834] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.egmwv")) returned 0x2020
	[0131.834] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0131.835] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0133.299] VirtualAlloc (lpAddress=0xc00134c000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00134c000
	[0133.305] ReadFile (in: hFile=0xd4, lpBuffer=0xc00134c000, nNumberOfBytesToRead=0x15566, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc00134c000*, lpNumberOfBytesRead=0xc000193cec*=0x15566, lpOverlapped=0x0) returned 1
	[0135.933] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0137.128] SetEvent (hEvent=0x5c) returned 1
	[0137.128] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0137.267] SetEvent (hEvent=0x108) returned 1
	[0137.267] SetEvent (hEvent=0x148) returned 1
	[0137.267] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.547] SetEvent (hEvent=0x68) returned 1
	[0201.548] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf")) returned 0x20
	[0201.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x20) returned 1
	[0201.565] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.818] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000397cc4 | out: lpMode=0xc000397cc4) returned 0
	[0201.818] ReadFile (in: hFile=0xd0, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0xac4, lpNumberOfBytesRead=0xc000397cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc000397cec*=0xac4, lpOverlapped=0x0) returned 1
	[0201.824] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0201.824] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215702 | out: pbBuffer=0xc000215702) returned 1
	[0201.824] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021577d | out: pbBuffer=0xc00021577d) returned 1
	[0201.824] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0201.824] GetFileType (hFile=0xd0) returned 0x1
	[0201.825] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2756) returned 1
	[0201.825] WriteFile (in: hFile=0xd0, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0xac4, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.825] GetFileType (hFile=0xd0) returned 0x1
	[0201.825] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xac4, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2756) returned 1
	[0201.825] GetFileType (hFile=0xd0) returned 0x1
	[0201.826] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2756) returned 1
	[0201.826] WriteFile (in: hFile=0xd0, lpBuffer=0xc0002c6e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0002c6e00*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x227, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.826] GetFileType (hFile=0xd0) returned 0x1
	[0201.826] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xac4, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2756) returned 1
	[0201.827] CloseHandle (hObject=0xd0) returned 1
	[0201.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf.egmwv")) returned 0x20
	[0201.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.844] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.329] SetEvent (hEvent=0xc0) returned 1
	[0203.330] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.364] SetEvent (hEvent=0x14c) returned 1
	[0208.364] SetEvent (hEvent=0xe4) returned 1
	[0208.364] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.368] SetEvent (hEvent=0x14c) returned 1
	[0208.368] SetEvent (hEvent=0xc8) returned 1
	[0208.368] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.372] SetEvent (hEvent=0x15c) returned 1
	[0208.372] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.507] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf")) returned 0x20
	[0212.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF", dwFileAttributes=0x20) returned 1
	[0212.575] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.576] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec
	[0212.772] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0212.772] ReadFile (in: hFile=0xec, lpBuffer=0xc000521000, nNumberOfBytesToRead=0x4c90, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000521000*, lpNumberOfBytesRead=0xc000199cec*=0x4c90, lpOverlapped=0x0) returned 1
	[0212.778] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414c40 | out: pbBuffer=0xc000414c40) returned 1
	[0212.778] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f0f02 | out: pbBuffer=0xc0001f0f02) returned 1
	[0212.778] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f0f86 | out: pbBuffer=0xc0001f0f86) returned 1
	[0212.778] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414c80 | out: pbBuffer=0xc000414c80) returned 1
	[0212.779] GetFileType (hFile=0xec) returned 0x1
	[0212.779] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=19600) returned 1
	[0212.779] WriteFile (in: hFile=0xec, lpBuffer=0xc00033c000*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc00033c000*, lpNumberOfBytesWritten=0xc000373ccc*=0x4c90, lpOverlapped=0xc000373ce8) returned 1
	[0212.779] GetFileType (hFile=0xec) returned 0x1
	[0212.779] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x4c90, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=19600) returned 1
	[0212.780] GetFileType (hFile=0xec) returned 0x1
	[0212.780] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=19600) returned 1
	[0212.780] WriteFile (in: hFile=0xec, lpBuffer=0xc000322a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc000322a80*, lpNumberOfBytesWritten=0xc000373ccc*=0x227, lpOverlapped=0xc000373ce8) returned 1
	[0212.780] GetFileType (hFile=0xec) returned 0x1
	[0212.780] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x4c90, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=19600) returned 1
	[0212.780] CloseHandle (hObject=0xec) returned 1
	[0212.796] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf.egmwv")) returned 0x20
	[0212.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.821] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) 

Thread:
	id = 30
	os_tid = 0x90c

	[0065.589] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x416feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x416feb0*=0xbc) returned 1
	[0065.589] VirtualQuery (in: lpAddress=0x416fed0, lpBuffer=0x416fed0, dwLength=0x30 | out: lpBuffer=0x416fed0*(BaseAddress=0x416f000, AllocationBase=0x3f70000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0065.589] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x850000
	[0065.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002da000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0
	[0065.622] CloseHandle (hObject=0xc0) returned 1
	[0065.623] SetEvent (hEvent=0x68) returned 1
	[0065.623] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xc0
	[0065.623] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.706] SetEvent (hEvent=0x68) returned 1
	[0069.706] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.748] SetEvent (hEvent=0x5c) returned 1
	[0069.748] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.991] SwitchToThread () returned 1
	[0070.004] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 0x2020
	[0070.004] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", dwFileAttributes=0x2020) returned 1
	[0070.005] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.egmwv"), dwFlags=0x1) returned 1
	[0070.006] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0070.006] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000195cc4 | out: lpMode=0xc000195cc4) returned 0
	[0070.006] ReadFile (in: hFile=0xd8, lpBuffer=0xc0002a0000, nNumberOfBytesToRead=0x5aa, lpNumberOfBytesRead=0xc000195cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesRead=0xc000195cec*=0x5aa, lpOverlapped=0x0) returned 1
	[0070.142] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0072.744] VirtualAlloc (lpAddress=0xc000068000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000068000
	[0072.746] SetEvent (hEvent=0x68) returned 1
	[0072.746] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0118.300] SwitchToThread () returned 1
	[0118.336] SwitchToThread () returned 1
	[0118.370] VirtualAlloc (lpAddress=0xc00004c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004c000
	[0118.371] VirtualFree (lpAddress=0xc001600000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0118.392] SetEvent (hEvent=0xc4) returned 1
	[0118.393] VirtualAlloc (lpAddress=0xc000050000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000050000
	[0118.395] VirtualAlloc (lpAddress=0xc000080000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000080000
	[0118.396] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0080 | out: pbBuffer=0xc0003a0080) returned 1
	[0118.397] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038902 | out: pbBuffer=0xc000038902) returned 1
	[0118.397] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038976 | out: pbBuffer=0xc000038976) returned 1
	[0118.397] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000389c4 | out: pbBuffer=0xc0000389c4) returned 1
	[0118.398] VirtualAlloc (lpAddress=0xc000178000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000178000
	[0118.399] VirtualAlloc (lpAddress=0xc00019a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019a000
	[0118.400] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a00c0 | out: pbBuffer=0xc0003a00c0) returned 1
	[0118.400] VirtualAlloc (lpAddress=0xc0001c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c4000
	[0118.400] VirtualAlloc (lpAddress=0xc000282000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000282000
	[0118.401] GetFileType (hFile=0x84) returned 0x1
	[0118.401] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba9ca0*=1457) returned 1
	[0118.402] WriteFile (in: hFile=0x84, lpBuffer=0xc0001c5000*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0xc000ba9ccc, lpOverlapped=0xc000ba9ce8 | out: lpBuffer=0xc0001c5000*, lpNumberOfBytesWritten=0xc000ba9ccc*=0x5b1, lpOverlapped=0xc000ba9ce8) returned 1
	[0119.553] GetFileType (hFile=0x84) returned 0x1
	[0119.553] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x5b1, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba9ca0*=1457) returned 1
	[0119.553] GetFileType (hFile=0x84) returned 0x1
	[0119.553] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba9ca0*=1457) returned 1
	[0119.553] WriteFile (in: hFile=0x84, lpBuffer=0xc00017c000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000ba9ccc, lpOverlapped=0xc000ba9ce8 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesWritten=0xc000ba9ccc*=0x22a, lpOverlapped=0xc000ba9ce8) returned 1
	[0119.930] SetEvent (hEvent=0x70) returned 1
	[0119.930] GetFileType (hFile=0x84) returned 0x1
	[0119.930] SetFilePointerEx (in: hFile=0x84, liDistanceToMove=0x5b1, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba9ca0*=1457) returned 1
	[0119.930] CloseHandle (hObject=0x84) returned 1
	[0121.067] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.egmwv")) returned 0x2020
	[0121.067] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0121.067] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0137.127] SetEvent (hEvent=0x108) returned 1
	[0137.128] SetEvent (hEvent=0x104) returned 1
	[0137.128] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf")) returned 0x20
	[0201.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x20) returned 1
	[0201.572] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.574] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0201.847] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc00015fcc4 | out: lpMode=0xc00015fcc4) returned 0
	[0201.848] ReadFile (in: hFile=0x174, lpBuffer=0xc00040a000, nNumberOfBytesToRead=0x19e8, lpNumberOfBytesRead=0xc00015fcec, lpOverlapped=0x0 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesRead=0xc00015fcec*=0x19e8, lpOverlapped=0x0) returned 1
	[0201.859] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414740 | out: pbBuffer=0xc000414740) returned 1
	[0201.860] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fc102 | out: pbBuffer=0xc0000fc102) returned 1
	[0201.860] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414780 | out: pbBuffer=0xc000414780) returned 1
	[0201.860] GetFileType (hFile=0x174) returned 0x1
	[0201.860] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=6632) returned 1
	[0201.860] WriteFile (in: hFile=0x174, lpBuffer=0xc000104000*, nNumberOfBytesToWrite=0x19e8, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000104000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x19e8, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.861] GetFileType (hFile=0x174) returned 0x1
	[0201.861] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x19e8, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=6632) returned 1
	[0201.861] GetFileType (hFile=0x174) returned 0x1
	[0201.861] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=6632) returned 1
	[0201.861] WriteFile (in: hFile=0x174, lpBuffer=0xc0000f1880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0000f1880*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x22d, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.862] GetFileType (hFile=0x174) returned 0x1
	[0201.862] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x19e8, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=6632) returned 1
	[0201.862] CloseHandle (hObject=0x174) returned 1
	[0201.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf.egmwv")) returned 0x20
	[0201.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.887] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.265] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x20
	[0203.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x20) returned 1
	[0203.278] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.328] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.333] SetEvent (hEvent=0xc8) returned 1
	[0203.333] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.348] SetEvent (hEvent=0xc8) returned 1
	[0203.348] SetEvent (hEvent=0x15c) returned 1
	[0203.348] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.357] SetEvent (hEvent=0x54) returned 1
	[0203.357] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.364] SetEvent (hEvent=0x148) returned 1
	[0203.364] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x20
	[0203.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x20) returned 1
	[0203.373] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.422] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0203.422] ReadFile (in: hFile=0x168, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x69aa, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc000199cec*=0x69aa, lpOverlapped=0x0) returned 1
	[0203.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0203.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0203.428] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000231602 | out: pbBuffer=0xc000231602) returned 1
	[0203.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002316cf | out: pbBuffer=0xc0002316cf) returned 1
	[0203.429] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0203.429] GetFileType (hFile=0x168) returned 0x1
	[0203.429] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=27050) returned 1
	[0203.429] WriteFile (in: hFile=0x168, lpBuffer=0xc00017c000*, nNumberOfBytesToWrite=0x69aa, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesWritten=0xc000171ccc*=0x69aa, lpOverlapped=0xc000171ce8) returned 1
	[0203.430] GetFileType (hFile=0x168) returned 0x1
	[0203.430] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x69aa, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=27050) returned 1
	[0203.431] GetFileType (hFile=0x168) returned 0x1
	[0203.431] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=27050) returned 1
	[0203.431] WriteFile (in: hFile=0x168, lpBuffer=0xc00022f500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc00022f500*, lpNumberOfBytesWritten=0xc000171ccc*=0x230, lpOverlapped=0xc000171ce8) returned 1
	[0203.431] GetFileType (hFile=0x168) returned 0x1
	[0203.431] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x69aa, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=27050) returned 1
	[0203.431] CloseHandle (hObject=0x168) returned 1
	[0203.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf.egmwv")) returned 0x20
	[0203.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.434] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.437] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.440] SetEvent (hEvent=0xe4) returned 1
	[0203.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x20
	[0203.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x20) returned 1
	[0203.442] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.467] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0203.467] ReadFile (in: hFile=0x164, lpBuffer=0xc0001b4000, nNumberOfBytesToRead=0x6ba0, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001b4000*, lpNumberOfBytesRead=0xc0002d7cec*=0x6ba0, lpOverlapped=0x0) returned 1
	[0203.479] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0203.479] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ba | out: pbBuffer=0xc0004142ba) returned 1
	[0203.479] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000000b02 | out: pbBuffer=0xc000000b02) returned 1
	[0203.479] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0203.479] GetFileType (hFile=0x164) returned 0x1
	[0203.479] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=27552) returned 1
	[0203.480] WriteFile (in: hFile=0x164, lpBuffer=0xc00037c000*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesWritten=0xc000171ccc*=0x6ba0, lpOverlapped=0xc000171ce8) returned 1
	[0203.480] GetFileType (hFile=0x164) returned 0x1
	[0203.480] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x6ba0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=27552) returned 1
	[0203.480] GetFileType (hFile=0x164) returned 0x1
	[0203.480] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=27552) returned 1
	[0203.481] WriteFile (in: hFile=0x164, lpBuffer=0xc0002a2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc0002a2e00*, lpNumberOfBytesWritten=0xc000171ccc*=0x22d, lpOverlapped=0xc000171ce8) returned 1
	[0203.481] GetFileType (hFile=0x164) returned 0x1
	[0203.481] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x6ba0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=27552) returned 1
	[0203.481] CloseHandle (hObject=0x164) returned 1
	[0203.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf.egmwv")) returned 0x20
	[0203.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.488] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x20
	[0203.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x20) returned 1
	[0203.496] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.529] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0203.529] ReadFile (in: hFile=0x168, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x1870, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0002d7cec*=0x1870, lpOverlapped=0x0) returned 1
	[0203.539] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6420 | out: pbBuffer=0xc0002b6420) returned 1
	[0203.539] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b8b02 | out: pbBuffer=0xc0000b8b02) returned 1
	[0203.539] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6460 | out: pbBuffer=0xc0002b6460) returned 1
	[0203.539] GetFileType (hFile=0x168) returned 0x1
	[0203.540] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=6256) returned 1
	[0203.540] WriteFile (in: hFile=0x168, lpBuffer=0xc0000ca000*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0000ca000*, lpNumberOfBytesWritten=0xc000175ccc*=0x1870, lpOverlapped=0xc000175ce8) returned 1
	[0203.540] GetFileType (hFile=0x168) returned 0x1
	[0203.540] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1870, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=6256) returned 1
	[0203.540] GetFileType (hFile=0x168) returned 0x1
	[0203.541] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=6256) returned 1
	[0203.541] WriteFile (in: hFile=0x168, lpBuffer=0xc0002e6a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0002e6a80*, lpNumberOfBytesWritten=0xc000175ccc*=0x227, lpOverlapped=0xc000175ce8) returned 1
	[0203.541] GetFileType (hFile=0x168) returned 0x1
	[0203.541] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1870, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=6256) returned 1
	[0203.541] CloseHandle (hObject=0x168) returned 1
	[0203.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf.egmwv")) returned 0x20
	[0203.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.548] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf")) returned 0x20
	[0203.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x20) returned 1
	[0203.564] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.597] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0203.597] ReadFile (in: hFile=0x17c, lpBuffer=0xc000408000, nNumberOfBytesToRead=0xd16, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000408000*, lpNumberOfBytesRead=0xc0002d7cec*=0xd16, lpOverlapped=0x0) returned 1
	[0203.605] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145c0 | out: pbBuffer=0xc0004145c0) returned 1
	[0203.605] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145da | out: pbBuffer=0xc0004145da) returned 1
	[0203.605] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004ca202 | out: pbBuffer=0xc0004ca202) returned 1
	[0203.605] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414600 | out: pbBuffer=0xc000414600) returned 1
	[0203.605] SetEvent (hEvent=0xe4) returned 1
	[0203.605] GetFileType (hFile=0x17c) returned 0x1
	[0203.606] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=3350) returned 1
	[0203.606] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004e0000*, nNumberOfBytesToWrite=0xd16, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc0004e0000*, lpNumberOfBytesWritten=0xc000171ccc*=0xd16, lpOverlapped=0xc000171ce8) returned 1
	[0203.606] GetFileType (hFile=0x17c) returned 0x1
	[0203.606] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xd16, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=3350) returned 1
	[0203.606] GetFileType (hFile=0x17c) returned 0x1
	[0203.607] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=3350) returned 1
	[0203.607] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004e2000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc0004e2000*, lpNumberOfBytesWritten=0xc000171ccc*=0x22a, lpOverlapped=0xc000171ce8) returned 1
	[0203.607] GetFileType (hFile=0x17c) returned 0x1
	[0203.607] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xd16, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=3350) returned 1
	[0203.607] CloseHandle (hObject=0x17c) returned 1
	[0203.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf.egmwv")) returned 0x20
	[0203.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.612] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.613] SetEvent (hEvent=0xe4) returned 1
	[0203.614] SetEvent (hEvent=0x60) returned 1
	[0203.614] SwitchToThread () returned 1
	[0203.615] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.621] SetEvent (hEvent=0x60) returned 1
	[0203.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x20
	[0203.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x20) returned 1
	[0203.629] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.662] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0203.662] ReadFile (in: hFile=0x168, lpBuffer=0xc0002b4000, nNumberOfBytesToRead=0x5a4, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002b4000*, lpNumberOfBytesRead=0xc000199cec*=0x5a4, lpOverlapped=0x0) returned 1
	[0203.667] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0203.667] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001402 | out: pbBuffer=0xc000001402) returned 1
	[0203.667] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0203.667] GetFileType (hFile=0x168) returned 0x1
	[0203.667] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=1444) returned 1
	[0203.668] WriteFile (in: hFile=0x168, lpBuffer=0xc000177000*, nNumberOfBytesToWrite=0x5a4, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc000177000*, lpNumberOfBytesWritten=0xc0000ddccc*=0x5a4, lpOverlapped=0xc0000ddce8) returned 1
	[0203.668] GetFileType (hFile=0x168) returned 0x1
	[0203.668] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x5a4, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=1444) returned 1
	[0203.668] GetFileType (hFile=0x168) returned 0x1
	[0203.668] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=1444) returned 1
	[0203.669] WriteFile (in: hFile=0x168, lpBuffer=0xc000123500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc000123500*, lpNumberOfBytesWritten=0xc0000ddccc*=0x227, lpOverlapped=0xc0000ddce8) returned 1
	[0203.669] GetFileType (hFile=0x168) returned 0x1
	[0203.669] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x5a4, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=1444) returned 1
	[0203.669] CloseHandle (hObject=0x168) returned 1
	[0203.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf.egmwv")) returned 0x20
	[0203.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.672] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x20
	[0203.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x20) returned 1
	[0203.684] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.715] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0203.715] ReadFile (in: hFile=0x164, lpBuffer=0xc00008c480, nNumberOfBytesToRead=0x414, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc00008c480*, lpNumberOfBytesRead=0xc000199cec*=0x414, lpOverlapped=0x0) returned 1
	[0203.722] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065a0 | out: pbBuffer=0xc0002065a0) returned 1
	[0203.722] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004cb102 | out: pbBuffer=0xc0004cb102) returned 1
	[0203.722] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004cb107 | out: pbBuffer=0xc0004cb107) returned 1
	[0203.722] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004cb1e3 | out: pbBuffer=0xc0004cb1e3) returned 1
	[0203.723] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065e0 | out: pbBuffer=0xc0002065e0) returned 1
	[0203.723] GetFileType (hFile=0x164) returned 0x1
	[0203.723] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1044) returned 1
	[0203.723] WriteFile (in: hFile=0x164, lpBuffer=0xc000075000*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000075000*, lpNumberOfBytesWritten=0xc000151ccc*=0x414, lpOverlapped=0xc000151ce8) returned 1
	[0203.723] GetFileType (hFile=0x164) returned 0x1
	[0203.723] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x414, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1044) returned 1
	[0203.723] GetFileType (hFile=0x164) returned 0x1
	[0203.724] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1044) returned 1
	[0203.724] WriteFile (in: hFile=0x164, lpBuffer=0xc00015a380*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00015a380*, lpNumberOfBytesWritten=0xc000151ccc*=0x221, lpOverlapped=0xc000151ce8) returned 1
	[0203.724] GetFileType (hFile=0x164) returned 0x1
	[0203.724] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x414, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1044) returned 1
	[0203.724] CloseHandle (hObject=0x164) returned 1
	[0203.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf.egmwv")) returned 0x20
	[0203.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.728] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.734] SetEvent (hEvent=0x60) returned 1
	[0203.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x20
	[0203.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x20) returned 1
	[0203.736] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.773] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0203.774] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001ba000, nNumberOfBytesToRead=0x20ae, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesRead=0xc000197cec*=0x20ae, lpOverlapped=0x0) returned 1
	[0203.781] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206730 | out: pbBuffer=0xc000206730) returned 1
	[0203.781] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004cbf02 | out: pbBuffer=0xc0004cbf02) returned 1
	[0203.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206770 | out: pbBuffer=0xc000206770) returned 1
	[0203.782] GetFileType (hFile=0x17c) returned 0x1
	[0203.782] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8366) returned 1
	[0203.783] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004c6000*, nNumberOfBytesToWrite=0x20ae, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004c6000*, lpNumberOfBytesWritten=0xc000151ccc*=0x20ae, lpOverlapped=0xc000151ce8) returned 1
	[0203.783] GetFileType (hFile=0x17c) returned 0x1
	[0203.784] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x20ae, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8366) returned 1
	[0203.784] GetFileType (hFile=0x17c) returned 0x1
	[0203.784] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8366) returned 1
	[0203.785] WriteFile (in: hFile=0x17c, lpBuffer=0xc00015bc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00015bc00*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0203.785] GetFileType (hFile=0x17c) returned 0x1
	[0203.785] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x20ae, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8366) returned 1
	[0203.786] CloseHandle (hObject=0x17c) returned 1
	[0203.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf.egmwv")) returned 0x20
	[0203.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.790] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x20
	[0203.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x20) returned 1
	[0203.808] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.838] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0203.838] ReadFile (in: hFile=0x168, lpBuffer=0xc000452000, nNumberOfBytesToRead=0xc20, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000452000*, lpNumberOfBytesRead=0xc0002d3cec*=0xc20, lpOverlapped=0x0) returned 1
	[0203.842] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0203.842] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0203.842] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00015ec02 | out: pbBuffer=0xc00015ec02) returned 1
	[0203.843] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00015ec20 | out: pbBuffer=0xc00015ec20) returned 1
	[0203.843] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0203.843] GetFileType (hFile=0x168) returned 0x1
	[0203.843] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=3104) returned 1
	[0203.843] WriteFile (in: hFile=0x168, lpBuffer=0xc0003cc000*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0003cc000*, lpNumberOfBytesWritten=0xc00014bccc*=0xc20, lpOverlapped=0xc00014bce8) returned 1
	[0203.843] GetFileType (hFile=0x168) returned 0x1
	[0203.843] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc20, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=3104) returned 1
	[0203.844] GetFileType (hFile=0x168) returned 0x1
	[0203.844] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=3104) returned 1
	[0203.844] WriteFile (in: hFile=0x168, lpBuffer=0xc0003b3500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0003b3500*, lpNumberOfBytesWritten=0xc00014bccc*=0x221, lpOverlapped=0xc00014bce8) returned 1
	[0203.844] GetFileType (hFile=0x168) returned 0x1
	[0203.844] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc20, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=3104) returned 1
	[0203.844] CloseHandle (hObject=0x168) returned 1
	[0203.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf.egmwv")) returned 0x20
	[0203.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.847] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.858] SetEvent (hEvent=0x60) returned 1
	[0203.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x20
	[0203.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x20) returned 1
	[0203.860] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.895] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0203.895] ReadFile (in: hFile=0x168, lpBuffer=0xc000108000, nNumberOfBytesToRead=0x804, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000108000*, lpNumberOfBytesRead=0xc000197cec*=0x804, lpOverlapped=0x0) returned 1
	[0203.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6280 | out: pbBuffer=0xc0002b6280) returned 1
	[0203.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b629a | out: pbBuffer=0xc0002b629a) returned 1
	[0203.901] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00015f802 | out: pbBuffer=0xc00015f802) returned 1
	[0203.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00015f821 | out: pbBuffer=0xc00015f821) returned 1
	[0203.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00015f8cd | out: pbBuffer=0xc00015f8cd) returned 1
	[0203.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62c0 | out: pbBuffer=0xc0002b62c0) returned 1
	[0203.902] GetFileType (hFile=0x168) returned 0x1
	[0203.902] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2052) returned 1
	[0203.902] WriteFile (in: hFile=0x168, lpBuffer=0xc0001d3000*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0001d3000*, lpNumberOfBytesWritten=0xc00014bccc*=0x804, lpOverlapped=0xc00014bce8) returned 1
	[0203.902] GetFileType (hFile=0x168) returned 0x1
	[0203.903] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x804, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2052) returned 1
	[0203.903] GetFileType (hFile=0x168) returned 0x1
	[0203.903] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2052) returned 1
	[0203.903] WriteFile (in: hFile=0x168, lpBuffer=0xc0001d6e00*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0001d6e00*, lpNumberOfBytesWritten=0xc00014bccc*=0x21e, lpOverlapped=0xc00014bce8) returned 1
	[0203.903] GetFileType (hFile=0x168) returned 0x1
	[0203.903] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x804, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2052) returned 1
	[0203.903] CloseHandle (hObject=0x168) returned 1
	[0203.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf.egmwv")) returned 0x20
	[0203.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.906] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x20
	[0203.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x20) returned 1
	[0203.915] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.950] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0203.950] ReadFile (in: hFile=0x164, lpBuffer=0xc000246000, nNumberOfBytesToRead=0x9b8, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000246000*, lpNumberOfBytesRead=0xc000197cec*=0x9b8, lpOverlapped=0x0) returned 1
	[0203.957] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6400 | out: pbBuffer=0xc0002b6400) returned 1
	[0203.957] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00024c502 | out: pbBuffer=0xc00024c502) returned 1
	[0203.957] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00024c55c | out: pbBuffer=0xc00024c55c) returned 1
	[0203.957] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00024c5aa | out: pbBuffer=0xc00024c5aa) returned 1
	[0203.957] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0203.958] GetFileType (hFile=0x164) returned 0x1
	[0203.958] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2488) returned 1
	[0203.958] WriteFile (in: hFile=0x164, lpBuffer=0xc000262000*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000262000*, lpNumberOfBytesWritten=0xc00014bccc*=0x9b8, lpOverlapped=0xc00014bce8) returned 1
	[0203.959] GetFileType (hFile=0x164) returned 0x1
	[0203.959] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9b8, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2488) returned 1
	[0203.959] GetFileType (hFile=0x164) returned 0x1
	[0203.959] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2488) returned 1
	[0203.959] WriteFile (in: hFile=0x164, lpBuffer=0xc000258700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000258700*, lpNumberOfBytesWritten=0xc00014bccc*=0x22a, lpOverlapped=0xc00014bce8) returned 1
	[0203.960] GetFileType (hFile=0x164) returned 0x1
	[0203.960] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9b8, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2488) returned 1
	[0203.960] CloseHandle (hObject=0x164) returned 1
	[0203.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf.egmwv")) returned 0x20
	[0203.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.965] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x20
	[0203.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x20) returned 1
	[0203.970] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.003] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0204.004] ReadFile (in: hFile=0x17c, lpBuffer=0xc000263000, nNumberOfBytesToRead=0xed4, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000263000*, lpNumberOfBytesRead=0xc000197cec*=0xed4, lpOverlapped=0x0) returned 1
	[0204.010] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65b0 | out: pbBuffer=0xc0002b65b0) returned 1
	[0204.011] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ca | out: pbBuffer=0xc0002b65ca) returned 1
	[0204.011] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00024d302 | out: pbBuffer=0xc00024d302) returned 1
	[0204.011] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00024d31a | out: pbBuffer=0xc00024d31a) returned 1
	[0204.011] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65f0 | out: pbBuffer=0xc0002b65f0) returned 1
	[0204.011] GetFileType (hFile=0x17c) returned 0x1
	[0204.011] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=3796) returned 1
	[0204.012] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002f8000*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesWritten=0xc00014bccc*=0xed4, lpOverlapped=0xc00014bce8) returned 1
	[0204.012] GetFileType (hFile=0x17c) returned 0x1
	[0204.012] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xed4, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=3796) returned 1
	[0204.012] GetFileType (hFile=0x17c) returned 0x1
	[0204.012] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=3796) returned 1
	[0204.013] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002fa000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0002fa000*, lpNumberOfBytesWritten=0xc00014bccc*=0x22d, lpOverlapped=0xc00014bce8) returned 1
	[0204.013] GetFileType (hFile=0x17c) returned 0x1
	[0204.014] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xed4, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=3796) returned 1
	[0204.014] CloseHandle (hObject=0x17c) returned 1
	[0204.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf.egmwv")) returned 0x20
	[0204.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.021] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.031] SetEvent (hEvent=0x150) returned 1
	[0204.031] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x20
	[0204.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x20) returned 1
	[0204.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.062] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0204.062] ReadFile (in: hFile=0x168, lpBuffer=0xc00048a000, nNumberOfBytesToRead=0x1c08, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc00048a000*, lpNumberOfBytesRead=0xc000193cec*=0x1c08, lpOverlapped=0x0) returned 1
	[0204.067] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0204.067] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000000802 | out: pbBuffer=0xc000000802) returned 1
	[0204.067] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000000824 | out: pbBuffer=0xc000000824) returned 1
	[0204.067] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000088c | out: pbBuffer=0xc00000088c) returned 1
	[0204.067] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0204.067] GetFileType (hFile=0x168) returned 0x1
	[0204.067] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=7176) returned 1
	[0204.068] WriteFile (in: hFile=0x168, lpBuffer=0xc00018e000*, nNumberOfBytesToWrite=0x1c08, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesWritten=0xc00014bccc*=0x1c08, lpOverlapped=0xc00014bce8) returned 1
	[0204.068] GetFileType (hFile=0x168) returned 0x1
	[0204.068] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1c08, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=7176) returned 1
	[0204.069] GetFileType (hFile=0x168) returned 0x1
	[0204.069] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=7176) returned 1
	[0204.069] WriteFile (in: hFile=0x168, lpBuffer=0xc000188700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000188700*, lpNumberOfBytesWritten=0xc00014bccc*=0x224, lpOverlapped=0xc00014bce8) returned 1
	[0204.069] GetFileType (hFile=0x168) returned 0x1
	[0204.069] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1c08, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=7176) returned 1
	[0204.070] CloseHandle (hObject=0x168) returned 1
	[0204.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf.egmwv")) returned 0x20
	[0204.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.072] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.089] SetEvent (hEvent=0xc8) returned 1
	[0204.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x20
	[0204.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x20) returned 1
	[0204.093] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.177] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0204.177] ReadFile (in: hFile=0x168, lpBuffer=0xc000298000, nNumberOfBytesToRead=0x752, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000298000*, lpNumberOfBytesRead=0xc000193cec*=0x752, lpOverlapped=0x0) returned 1
	[0204.184] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0204.184] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0204.184] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ea802 | out: pbBuffer=0xc0001ea802) returned 1
	[0204.184] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0204.184] GetFileType (hFile=0x168) returned 0x1
	[0204.184] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1874) returned 1
	[0204.185] WriteFile (in: hFile=0x168, lpBuffer=0xc000465000*, nNumberOfBytesToWrite=0x752, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000465000*, lpNumberOfBytesWritten=0xc000151ccc*=0x752, lpOverlapped=0xc000151ce8) returned 1
	[0204.185] GetFileType (hFile=0x168) returned 0x1
	[0204.185] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x752, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1874) returned 1
	[0204.185] GetFileType (hFile=0x168) returned 0x1
	[0204.186] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1874) returned 1
	[0204.186] WriteFile (in: hFile=0x168, lpBuffer=0xc00019f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00019f500*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0204.186] GetFileType (hFile=0x168) returned 0x1
	[0204.186] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x752, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1874) returned 1
	[0204.187] CloseHandle (hObject=0x168) returned 1
	[0204.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf.egmwv")) returned 0x20
	[0204.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.190] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.193] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.197] SetEvent (hEvent=0xc8) returned 1
	[0204.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x20
	[0204.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x20) returned 1
	[0204.198] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.262] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.262] ReadFile (in: hFile=0x164, lpBuffer=0xc0002e4000, nNumberOfBytesToRead=0x108c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e4000*, lpNumberOfBytesRead=0xc0002d3cec*=0x108c, lpOverlapped=0x0) returned 1
	[0204.268] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0204.268] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eaa | out: pbBuffer=0xc000052eaa) returned 1
	[0204.268] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00039ca02 | out: pbBuffer=0xc00039ca02) returned 1
	[0204.268] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0204.268] GetFileType (hFile=0x164) returned 0x1
	[0204.268] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=4236) returned 1
	[0204.269] WriteFile (in: hFile=0x164, lpBuffer=0xc00011e000*, nNumberOfBytesToWrite=0x108c, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc00011e000*, lpNumberOfBytesWritten=0xc000147ccc*=0x108c, lpOverlapped=0xc000147ce8) returned 1
	[0204.269] GetFileType (hFile=0x164) returned 0x1
	[0204.269] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x108c, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=4236) returned 1
	[0204.269] GetFileType (hFile=0x164) returned 0x1
	[0204.270] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=4236) returned 1
	[0204.270] WriteFile (in: hFile=0x164, lpBuffer=0xc000118700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc000118700*, lpNumberOfBytesWritten=0xc000147ccc*=0x224, lpOverlapped=0xc000147ce8) returned 1
	[0204.270] GetFileType (hFile=0x164) returned 0x1
	[0204.270] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x108c, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=4236) returned 1
	[0204.271] CloseHandle (hObject=0x164) returned 1
	[0204.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf.egmwv")) returned 0x20
	[0204.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.277] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf")) returned 0x20
	[0204.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x20) returned 1
	[0204.287] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.325] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.325] ReadFile (in: hFile=0x17c, lpBuffer=0xc00034e000, nNumberOfBytesToRead=0x976, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034e000*, lpNumberOfBytesRead=0xc0002d3cec*=0x976, lpOverlapped=0x0) returned 1
	[0204.330] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414720 | out: pbBuffer=0xc000414720) returned 1
	[0204.330] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041473a | out: pbBuffer=0xc00041473a) returned 1
	[0204.330] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039902 | out: pbBuffer=0xc000039902) returned 1
	[0204.330] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003997e | out: pbBuffer=0xc00003997e) returned 1
	[0204.331] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414760 | out: pbBuffer=0xc000414760) returned 1
	[0204.331] GetFileType (hFile=0x17c) returned 0x1
	[0204.331] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2422) returned 1
	[0204.331] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x976, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc00014bccc*=0x976, lpOverlapped=0xc00014bce8) returned 1
	[0204.331] GetFileType (hFile=0x17c) returned 0x1
	[0204.331] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x976, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2422) returned 1
	[0204.332] GetFileType (hFile=0x17c) returned 0x1
	[0204.332] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2422) returned 1
	[0204.332] WriteFile (in: hFile=0x17c, lpBuffer=0xc000359180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000359180*, lpNumberOfBytesWritten=0xc00014bccc*=0x22d, lpOverlapped=0xc00014bce8) returned 1
	[0204.332] GetFileType (hFile=0x17c) returned 0x1
	[0204.332] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x976, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2422) returned 1
	[0204.333] CloseHandle (hObject=0x17c) returned 1
	[0204.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf.egmwv")) returned 0x20
	[0204.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.336] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x20
	[0204.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x20) returned 1
	[0204.357] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0204.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.388] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.388] ReadFile (in: hFile=0x164, lpBuffer=0xc0001ba000, nNumberOfBytesToRead=0x1b3a, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesRead=0xc0002d3cec*=0x1b3a, lpOverlapped=0x0) returned 1
	[0204.406] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0204.406] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001be802 | out: pbBuffer=0xc0001be802) returned 1
	[0204.406] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0204.407] GetFileType (hFile=0x164) returned 0x1
	[0204.407] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=6970) returned 1
	[0204.407] WriteFile (in: hFile=0x164, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x1b3a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x1b3a, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.407] GetFileType (hFile=0x164) returned 0x1
	[0204.407] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1b3a, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=6970) returned 1
	[0204.408] GetFileType (hFile=0x164) returned 0x1
	[0204.408] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=6970) returned 1
	[0204.408] WriteFile (in: hFile=0x164, lpBuffer=0xc0000ae700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0000ae700*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x230, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.408] GetFileType (hFile=0x164) returned 0x1
	[0204.408] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1b3a, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=6970) returned 1
	[0204.408] CloseHandle (hObject=0x164) returned 1
	[0204.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid.egmwv")) returned 0x20
	[0204.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0204.411] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.426] SetEvent (hEvent=0xc8) returned 1
	[0204.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf")) returned 0x20
	[0204.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x20) returned 1
	[0204.431] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.463] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0204.463] ReadFile (in: hFile=0x168, lpBuffer=0xc000218000, nNumberOfBytesToRead=0xb96, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc000423cec*=0xb96, lpOverlapped=0x0) returned 1
	[0204.470] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0204.470] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0204.471] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001eb902 | out: pbBuffer=0xc0001eb902) returned 1
	[0204.471] SetEvent (hEvent=0xc8) returned 1
	[0204.471] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0204.471] GetFileType (hFile=0x168) returned 0x1
	[0204.472] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2966) returned 1
	[0204.472] WriteFile (in: hFile=0x168, lpBuffer=0xc00023a000*, nNumberOfBytesToWrite=0xb96, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00023a000*, lpNumberOfBytesWritten=0xc000151ccc*=0xb96, lpOverlapped=0xc000151ce8) returned 1
	[0204.472] GetFileType (hFile=0x168) returned 0x1
	[0204.473] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb96, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2966) returned 1
	[0204.473] GetFileType (hFile=0x168) returned 0x1
	[0204.473] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2966) returned 1
	[0204.473] WriteFile (in: hFile=0x168, lpBuffer=0xc000226e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000226e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0204.474] GetFileType (hFile=0x168) returned 0x1
	[0204.474] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb96, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2966) returned 1
	[0204.474] CloseHandle (hObject=0x168) returned 1
	[0204.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf.egmwv")) returned 0x20
	[0204.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.483] SwitchToThread () returned 1
	[0204.485] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.491] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.527] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.550] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.558] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.580] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.608] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.629] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.644] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.660] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.687] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.706] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.716] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.730] SetEvent (hEvent=0xc8) returned 1
	[0204.730] SetEvent (hEvent=0x60) returned 1
	[0204.730] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0204.733] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.734] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0204.736] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.736] SetEvent (hEvent=0x15c) returned 1
	[0204.736] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0204.738] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.738] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.245] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.247] SetEvent (hEvent=0xc8) returned 1
	[0205.247] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.250] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.263] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.283] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.294] SetEvent (hEvent=0x90) returned 1
	[0205.294] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.298] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.311] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.337] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.355] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.374] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.383] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.426] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.446] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.454] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.474] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.502] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.527] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.537] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.555] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.584] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.605] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.615] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.637] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.667] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.682] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.691] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.708] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.740] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.767] SetEvent (hEvent=0xc8) returned 1
	[0205.767] SetEvent (hEvent=0x60) returned 1
	[0205.767] SetEvent (hEvent=0xe4) returned 1
	[0205.767] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0205.773] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.774] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x0
	[0205.776] SetEvent (hEvent=0xc8) returned 1
	[0205.776] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0205.811] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.811] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.195] SetEvent (hEvent=0x150) returned 1
	[0206.195] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.214] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.405] SetEvent (hEvent=0x150) returned 1
	[0206.405] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.278] SetEvent (hEvent=0xc8) returned 1
	[0207.278] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.282] SetEvent (hEvent=0xc8) returned 1
	[0207.282] SetEvent (hEvent=0x60) returned 1
	[0207.282] SwitchToThread () returned 1
	[0207.284] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.290] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.312] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.333] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.351] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.366] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.379] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.409] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.439] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.453] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.465] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.494] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.512] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.529] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.541] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.572] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.604] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.614] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.636] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.653] SetEvent (hEvent=0x60) returned 1
	[0207.653] SetEvent (hEvent=0xc8) returned 1
	[0207.653] SetEvent (hEvent=0xe4) returned 1
	[0207.654] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x0
	[0207.656] SetEvent (hEvent=0xe4) returned 1
	[0207.656] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x0
	[0207.658] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.001] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.004] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.283] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x20
	[0208.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x20) returned 1
	[0208.288] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0208.306] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0208.307] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003b0000, nNumberOfBytesToRead=0xa38, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b0000*, lpNumberOfBytesRead=0xc000423cec*=0xa38, lpOverlapped=0x0) returned 1
	[0208.337] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6760 | out: pbBuffer=0xc0002b6760) returned 1
	[0208.337] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b677a | out: pbBuffer=0xc0002b677a) returned 1
	[0208.337] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000248202 | out: pbBuffer=0xc000248202) returned 1
	[0208.338] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67b0 | out: pbBuffer=0xc0002b67b0) returned 1
	[0208.338] GetFileType (hFile=0x17c) returned 0x1
	[0208.338] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=2616) returned 1
	[0208.338] WriteFile (in: hFile=0x17c, lpBuffer=0xc000250000*, nNumberOfBytesToWrite=0xa38, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000250000*, lpNumberOfBytesWritten=0xc000459ccc*=0xa38, lpOverlapped=0xc000459ce8) returned 1
	[0208.338] GetFileType (hFile=0x17c) returned 0x1
	[0208.338] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xa38, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=2616) returned 1
	[0208.339] GetFileType (hFile=0x17c) returned 0x1
	[0208.339] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=2616) returned 1
	[0208.339] WriteFile (in: hFile=0x17c, lpBuffer=0xc000375880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000375880*, lpNumberOfBytesWritten=0xc000459ccc*=0x227, lpOverlapped=0xc000459ce8) returned 1
	[0208.339] GetFileType (hFile=0x17c) returned 0x1
	[0208.339] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xa38, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=2616) returned 1
	[0208.339] CloseHandle (hObject=0x17c) returned 1
	[0208.360] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.374] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.481] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x20
	[0208.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x20) returned 1
	[0208.498] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.539] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0208.539] ReadFile (in: hFile=0x170, lpBuffer=0xc000432000, nNumberOfBytesToRead=0x6b76, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000432000*, lpNumberOfBytesRead=0xc000387cec*=0x6b76, lpOverlapped=0x0) returned 1
	[0208.546] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0208.546] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b644a | out: pbBuffer=0xc0002b644a) returned 1
	[0208.546] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000249402 | out: pbBuffer=0xc000249402) returned 1
	[0208.547] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000249494 | out: pbBuffer=0xc000249494) returned 1
	[0208.547] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0208.548] GetFileType (hFile=0x170) returned 0x1
	[0208.548] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=27510) returned 1
	[0208.548] WriteFile (in: hFile=0x170, lpBuffer=0xc000110000*, nNumberOfBytesToWrite=0x6b76, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000110000*, lpNumberOfBytesWritten=0xc000455ccc*=0x6b76, lpOverlapped=0xc000455ce8) returned 1
	[0208.549] GetFileType (hFile=0x170) returned 0x1
	[0208.549] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6b76, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=27510) returned 1
	[0208.549] GetFileType (hFile=0x170) returned 0x1
	[0208.549] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=27510) returned 1
	[0208.549] WriteFile (in: hFile=0x170, lpBuffer=0xc000442a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000442a80*, lpNumberOfBytesWritten=0xc000455ccc*=0x236, lpOverlapped=0xc000455ce8) returned 1
	[0208.564] GetFileType (hFile=0x170) returned 0x1
	[0208.564] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6b76, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=27510) returned 1
	[0208.564] CloseHandle (hObject=0x170) returned 1
	[0208.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf.egmwv")) returned 0x20
	[0208.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.568] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.572] SetEvent (hEvent=0x90) returned 1
	[0208.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf")) returned 0x20
	[0208.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x20) returned 1
	[0208.573] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.598] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0208.598] ReadFile (in: hFile=0x178, lpBuffer=0xc0001daa80, nNumberOfBytesToRead=0x318, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001daa80*, lpNumberOfBytesRead=0xc000387cec*=0x318, lpOverlapped=0x0) returned 1
	[0208.605] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414590 | out: pbBuffer=0xc000414590) returned 1
	[0208.605] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000123402 | out: pbBuffer=0xc000123402) returned 1
	[0208.606] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145d0 | out: pbBuffer=0xc0004145d0) returned 1
	[0208.606] GetFileType (hFile=0x178) returned 0x1
	[0208.606] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=792) returned 1
	[0208.606] WriteFile (in: hFile=0x178, lpBuffer=0xc0001e7000*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0001e7000*, lpNumberOfBytesWritten=0xc000377ccc*=0x318, lpOverlapped=0xc000377ce8) returned 1
	[0208.606] GetFileType (hFile=0x178) returned 0x1
	[0208.607] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x318, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=792) returned 1
	[0208.607] GetFileType (hFile=0x178) returned 0x1
	[0208.607] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=792) returned 1
	[0208.607] WriteFile (in: hFile=0x178, lpBuffer=0xc0001ee380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0001ee380*, lpNumberOfBytesWritten=0xc000377ccc*=0x224, lpOverlapped=0xc000377ce8) returned 1
	[0208.607] GetFileType (hFile=0x178) returned 0x1
	[0208.607] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x318, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=792) returned 1
	[0208.607] CloseHandle (hObject=0x178) returned 1
	[0208.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf.egmwv")) returned 0x20
	[0208.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.611] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.616] SetEvent (hEvent=0x5c) returned 1
	[0208.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf")) returned 0x20
	[0208.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x20) returned 1
	[0208.618] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.656] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0208.656] ReadFile (in: hFile=0x178, lpBuffer=0xc000141000, nNumberOfBytesToRead=0x2bb6, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000141000*, lpNumberOfBytesRead=0xc000423cec*=0x2bb6, lpOverlapped=0x0) returned 1
	[0208.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b68f0 | out: pbBuffer=0xc0002b68f0) returned 1
	[0208.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b690a | out: pbBuffer=0xc0002b690a) returned 1
	[0208.662] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000133702 | out: pbBuffer=0xc000133702) returned 1
	[0208.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6930 | out: pbBuffer=0xc0002b6930) returned 1
	[0208.662] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0208.664] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.664] SetEvent (hEvent=0x70) returned 1
	[0208.664] SetEvent (hEvent=0x15c) returned 1
	[0208.665] SetEvent (hEvent=0x5c) returned 1
	[0208.665] GetFileType (hFile=0x178) returned 0x1
	[0208.665] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=11190) returned 1
	[0208.665] WriteFile (in: hFile=0x178, lpBuffer=0xc0004ba000*, nNumberOfBytesToWrite=0x2bb6, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0004ba000*, lpNumberOfBytesWritten=0xc000455ccc*=0x2bb6, lpOverlapped=0xc000455ce8) returned 1
	[0208.666] GetFileType (hFile=0x178) returned 0x1
	[0208.666] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2bb6, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=11190) returned 1
	[0208.666] GetFileType (hFile=0x178) returned 0x1
	[0208.666] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=11190) returned 1
	[0208.666] WriteFile (in: hFile=0x178, lpBuffer=0xc000263500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000263500*, lpNumberOfBytesWritten=0xc000455ccc*=0x233, lpOverlapped=0xc000455ce8) returned 1
	[0208.667] GetFileType (hFile=0x178) returned 0x1
	[0208.667] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2bb6, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=11190) returned 1
	[0208.667] CloseHandle (hObject=0x178) returned 1
	[0208.669] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf.egmwv")) returned 0x20
	[0208.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.698] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.983] SetEvent (hEvent=0x150) returned 1
	[0208.983] SetEvent (hEvent=0x5c) returned 1
	[0208.984] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.349] SetEvent (hEvent=0x5c) returned 1
	[0209.349] SetEvent (hEvent=0x150) returned 1
	[0209.349] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.378] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.826] SetEvent (hEvent=0x150) returned 1
	[0209.826] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.835] SetEvent (hEvent=0x150) returned 1
	[0209.836] SwitchToThread () returned 1
	[0209.839] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.858] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.886] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.901] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.913] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.943] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.961] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.977] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.996] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.019] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.037] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.052] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.057] SetEvent (hEvent=0x150) returned 1
	[0210.058] SetEvent (hEvent=0x5c) returned 1
	[0210.058] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x0
	[0210.062] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0210.064] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.065] SetEvent (hEvent=0x15c) returned 1
	[0210.065] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x102
	[0210.068] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.068] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.218] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.221] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.222] SetEvent (hEvent=0x150) returned 1
	[0210.222] SetEvent (hEvent=0x148) returned 1
	[0210.223] SwitchToThread () returned 1
	[0210.224] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.226] SetEvent (hEvent=0x148) returned 1
	[0210.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf")) returned 0x20
	[0210.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x20) returned 1
	[0210.228] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.265] SetEvent (hEvent=0x70) returned 1
	[0210.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.266] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0210.266] ReadFile (in: hFile=0x170, lpBuffer=0xc00040a000, nNumberOfBytesToRead=0x1846, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesRead=0xc00038dcec*=0x1846, lpOverlapped=0x0) returned 1
	[0210.272] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0210.272] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0210.272] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002b0b02 | out: pbBuffer=0xc0002b0b02) returned 1
	[0210.272] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0210.273] GetFileType (hFile=0x170) returned 0x1
	[0210.273] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=6214) returned 1
	[0210.273] WriteFile (in: hFile=0x170, lpBuffer=0xc00006e000*, nNumberOfBytesToWrite=0x1846, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00006e000*, lpNumberOfBytesWritten=0xc00019dccc*=0x1846, lpOverlapped=0xc00019dce8) returned 1
	[0210.273] GetFileType (hFile=0x170) returned 0x1
	[0210.274] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1846, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=6214) returned 1
	[0210.274] GetFileType (hFile=0x170) returned 0x1
	[0210.274] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=6214) returned 1
	[0210.274] WriteFile (in: hFile=0x170, lpBuffer=0xc000397500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000397500*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0210.274] GetFileType (hFile=0x170) returned 0x1
	[0210.274] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1846, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=6214) returned 1
	[0210.275] CloseHandle (hObject=0x170) returned 1
	[0210.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf.egmwv")) returned 0x20
	[0210.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.278] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf")) returned 0x20
	[0210.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x20) returned 1
	[0210.292] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.321] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0210.321] ReadFile (in: hFile=0xe0, lpBuffer=0xc00023a000, nNumberOfBytesToRead=0x150a, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00023a000*, lpNumberOfBytesRead=0xc000423cec*=0x150a, lpOverlapped=0x0) returned 1
	[0210.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62c0 | out: pbBuffer=0xc0002b62c0) returned 1
	[0210.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62da | out: pbBuffer=0xc0002b62da) returned 1
	[0210.326] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000113702 | out: pbBuffer=0xc000113702) returned 1
	[0210.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6300 | out: pbBuffer=0xc0002b6300) returned 1
	[0210.326] GetFileType (hFile=0xe0) returned 0x1
	[0210.326] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=5386) returned 1
	[0210.326] WriteFile (in: hFile=0xe0, lpBuffer=0xc000360000*, nNumberOfBytesToWrite=0x150a, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000360000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x150a, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.327] GetFileType (hFile=0xe0) returned 0x1
	[0210.327] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x150a, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=5386) returned 1
	[0210.327] GetFileType (hFile=0xe0) returned 0x1
	[0210.327] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=5386) returned 1
	[0210.327] WriteFile (in: hFile=0xe0, lpBuffer=0xc00034ae00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00034ae00*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x227, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.328] GetFileType (hFile=0xe0) returned 0x1
	[0210.328] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x150a, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=5386) returned 1
	[0210.328] CloseHandle (hObject=0xe0) returned 1
	[0210.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf.egmwv")) returned 0x20
	[0210.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.330] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.342] SetEvent (hEvent=0x148) returned 1
	[0210.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf")) returned 0x20
	[0210.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x20) returned 1
	[0210.343] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.390] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0210.390] ReadFile (in: hFile=0xe0, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0xd42, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc00016bcec*=0xd42, lpOverlapped=0x0) returned 1
	[0210.397] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0210.397] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b645a | out: pbBuffer=0xc0002b645a) returned 1
	[0210.397] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000432402 | out: pbBuffer=0xc000432402) returned 1
	[0210.397] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0210.398] GetFileType (hFile=0xe0) returned 0x1
	[0210.398] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3394) returned 1
	[0210.398] WriteFile (in: hFile=0xe0, lpBuffer=0xc000454000*, nNumberOfBytesToWrite=0xd42, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000454000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0xd42, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.398] GetFileType (hFile=0xe0) returned 0x1
	[0210.399] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xd42, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3394) returned 1
	[0210.399] GetFileType (hFile=0xe0) returned 0x1
	[0210.399] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3394) returned 1
	[0210.399] WriteFile (in: hFile=0xe0, lpBuffer=0xc00043c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00043c700*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x227, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.399] GetFileType (hFile=0xe0) returned 0x1
	[0210.400] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xd42, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3394) returned 1
	[0210.400] CloseHandle (hObject=0xe0) returned 1
	[0210.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf.egmwv")) returned 0x20
	[0210.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.402] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.408] SetEvent (hEvent=0x148) returned 1
	[0210.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf")) returned 0x20
	[0210.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x20) returned 1
	[0210.409] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.456] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0210.456] ReadFile (in: hFile=0x178, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1352, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc00016bcec*=0x1352, lpOverlapped=0x0) returned 1
	[0210.461] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414750 | out: pbBuffer=0xc000414750) returned 1
	[0210.461] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041476a | out: pbBuffer=0xc00041476a) returned 1
	[0210.462] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1f02 | out: pbBuffer=0xc0002c1f02) returned 1
	[0210.462] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1f56 | out: pbBuffer=0xc0002c1f56) returned 1
	[0210.462] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1f67 | out: pbBuffer=0xc0002c1f67) returned 1
	[0210.462] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414790 | out: pbBuffer=0xc000414790) returned 1
	[0210.462] GetFileType (hFile=0x178) returned 0x1
	[0210.462] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4946) returned 1
	[0210.462] WriteFile (in: hFile=0x178, lpBuffer=0xc000122000*, nNumberOfBytesToWrite=0x1352, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000122000*, lpNumberOfBytesWritten=0xc00019dccc*=0x1352, lpOverlapped=0xc00019dce8) returned 1
	[0210.463] GetFileType (hFile=0x178) returned 0x1
	[0210.463] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1352, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4946) returned 1
	[0210.463] GetFileType (hFile=0x178) returned 0x1
	[0210.463] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4946) returned 1
	[0210.463] WriteFile (in: hFile=0x178, lpBuffer=0xc0001f7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0001f7880*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0210.464] GetFileType (hFile=0x178) returned 0x1
	[0210.464] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1352, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4946) returned 1
	[0210.464] CloseHandle (hObject=0x178) returned 1
	[0210.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf.egmwv")) returned 0x20
	[0210.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.469] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg")) returned 0x20
	[0210.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x20) returned 1
	[0210.476] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.509] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0210.509] ReadFile (in: hFile=0x170, lpBuffer=0xc000314000, nNumberOfBytesToRead=0x4162, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesRead=0xc00016bcec*=0x4162, lpOverlapped=0x0) returned 1
	[0210.514] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x0
	[0210.516] SetEvent (hEvent=0x15c) returned 1
	[0210.517] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0210.517] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001a02 | out: pbBuffer=0xc000001a02) returned 1
	[0210.517] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001a7d | out: pbBuffer=0xc000001a7d) returned 1
	[0210.517] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0210.518] GetFileType (hFile=0x170) returned 0x1
	[0210.518] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=16738) returned 1
	[0210.518] WriteFile (in: hFile=0x170, lpBuffer=0xc0004d8000*, nNumberOfBytesToWrite=0x4162, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc0004d8000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x4162, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.518] GetFileType (hFile=0x170) returned 0x1
	[0210.519] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4162, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=16738) returned 1
	[0210.519] GetFileType (hFile=0x170) returned 0x1
	[0210.519] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=16738) returned 1
	[0210.519] WriteFile (in: hFile=0x170, lpBuffer=0xc0004bf500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc0004bf500*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x227, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.519] GetFileType (hFile=0x170) returned 0x1
	[0210.519] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4162, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=16738) returned 1
	[0210.519] CloseHandle (hObject=0x170) returned 1
	[0210.523] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.egmwv")) returned 0x20
	[0210.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.539] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.700] SetEvent (hEvent=0xe4) returned 1
	[0210.700] SetEvent (hEvent=0x148) returned 1
	[0210.701] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.715] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.720] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.735] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.758] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.775] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.835] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.851] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.874] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.894] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.902] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.919] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.950] SetEvent (hEvent=0x5c) returned 1
	[0210.950] SetEvent (hEvent=0xe4) returned 1
	[0210.950] SetEvent (hEvent=0x150) returned 1
	[0210.950] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x0
	[0210.952] SetEvent (hEvent=0x150) returned 1
	[0210.952] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0x1) returned 0x0
	[0210.954] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0211.087] SetEvent (hEvent=0xe4) returned 1
	[0211.087] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.190] SetEvent (hEvent=0x15c) returned 1
	[0212.190] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf")) returned 0x20
	[0212.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF", dwFileAttributes=0x20) returned 1
	[0212.565] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0212.718] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0212.718] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x16b4, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc000425cec*=0x16b4, lpOverlapped=0x0) returned 1
	[0212.725] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145f0 | out: pbBuffer=0xc0004145f0) returned 1
	[0212.725] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004bdd02 | out: pbBuffer=0xc0004bdd02) returned 1
	[0212.725] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004bdda8 | out: pbBuffer=0xc0004bdda8) returned 1
	[0212.725] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414630 | out: pbBuffer=0xc000414630) returned 1
	[0212.725] GetFileType (hFile=0x17c) returned 0x1
	[0212.726] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=5812) returned 1
	[0212.726] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003bc000*, nNumberOfBytesToWrite=0x16b4, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesWritten=0xc00017fccc*=0x16b4, lpOverlapped=0xc00017fce8) returned 1
	[0212.726] GetFileType (hFile=0x17c) returned 0x1
	[0212.726] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x16b4, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=5812) returned 1
	[0212.726] GetFileType (hFile=0x17c) returned 0x1
	[0212.727] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=5812) returned 1
	[0212.727] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001bc700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0001bc700*, lpNumberOfBytesWritten=0xc00017fccc*=0x22d, lpOverlapped=0xc00017fce8) returned 1
	[0212.727] GetFileType (hFile=0x17c) returned 0x1
	[0212.727] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x16b4, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=5812) returned 1
	[0212.727] CloseHandle (hObject=0x17c) returned 1
	[0212.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf.egmwv")) returned 0x20
	[0212.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.742] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.749] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.791] SetEvent (hEvent=0x14c) returned 1
	[0212.791] SetEvent (hEvent=0x60) returned 1
	[0212.791] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.800] SetEvent (hEvent=0x104) returned 1
	[0212.800] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) 

Thread:
	id = 31
	os_tid = 0x91c

	[0065.624] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x436feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x436feb0*=0xb8) returned 1
	[0065.624] VirtualQuery (in: lpAddress=0x436fed0, lpBuffer=0x436fed0, dwLength=0x30 | out: lpBuffer=0x436fed0*(BaseAddress=0x436f000, AllocationBase=0x4170000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0065.624] SetEvent (hEvent=0xb0) returned 1
	[0065.624] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xc4
	[0065.624] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.665] SetEvent (hEvent=0x5c) returned 1
	[0069.729] SetEvent (hEvent=0xc8) returned 1
	[0069.730] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002da380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0
	[0071.999] CloseHandle (hObject=0xe0) returned 1
	[0072.741] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi")) returned 0x2020
	[0072.743] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.egmwv"), dwFlags=0x1) returned 1
	[0075.329] SetEvent (hEvent=0x90) returned 1
	[0075.329] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.059] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.631] SetEvent (hEvent=0x90) returned 1
	[0083.641] GetFileType (hFile=0xdc) returned 0x1
	[0083.642] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc00036fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036fca0*=200596) returned 1
	[0083.643] WriteFile (in: hFile=0xdc, lpBuffer=0xc0006c0000*, nNumberOfBytesToWrite=0x30f94, lpNumberOfBytesWritten=0xc00036fccc, lpOverlapped=0xc00036fce8 | out: lpBuffer=0xc0006c0000*, lpNumberOfBytesWritten=0xc00036fccc*=0x30f94, lpOverlapped=0xc00036fce8) returned 1
	[0083.650] GetFileType (hFile=0xdc) returned 0x1
	[0083.651] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x30f94, lpNewFilePointer=0xc00036fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036fca0*=200596) returned 1
	[0083.661] SetEvent (hEvent=0x68) returned 1
	[0083.661] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0084.023] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.023] GetFileType (hFile=0xdc) returned 0x1
	[0084.023] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000161ca0*=200596) returned 1
	[0084.024] WriteFile (in: hFile=0xdc, lpBuffer=0xc000098c00*, nNumberOfBytesToWrite=0x251, lpNumberOfBytesWritten=0xc000161ccc, lpOverlapped=0xc000161ce8 | out: lpBuffer=0xc000098c00*, lpNumberOfBytesWritten=0xc000161ccc*=0x251, lpOverlapped=0xc000161ce8) returned 1
	[0085.623] GetFileType (hFile=0xdc) returned 0x1
	[0085.623] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x30f94, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000161ca0*=200596) returned 1
	[0085.623] CloseHandle (hObject=0xdc) returned 1
	[0086.196] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.851] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0101.818] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab")) returned 0x2020
	[0101.818] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", dwFileAttributes=0x2020) returned 1
	[0101.819] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.egmwv"), dwFlags=0x1) returned 1
	[0101.846] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc
	[0101.846] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0101.846] VirtualAlloc (lpAddress=0xc001200000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001200000
	[0101.901] VirtualFree (lpAddress=0xc00094e000, dwSize=0x32000, dwFreeType=0x4000) returned 1
	[0101.905] VirtualFree (lpAddress=0xc000b18000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0101.906] VirtualFree (lpAddress=0xc000b04000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0101.907] VirtualFree (lpAddress=0xc000a86000, dwSize=0x8a000, dwFreeType=0x4000) returned 1
	[0101.909] ReadFile (in: hFile=0xdc, lpBuffer=0xc001200000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc001200000*, lpNumberOfBytesRead=0xc000429cec*=0x100000, lpOverlapped=0x0) returned 1
	[0102.688] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0103.075] SwitchToThread () returned 1
	[0103.205] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0108.885] SwitchToThread () returned 1
	[0110.326] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 0x2020
	[0110.335] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", dwFileAttributes=0x2020) returned 1
	[0110.338] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.egmwv"), dwFlags=0x1) returned 1
	[0110.346] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84
	[0110.347] GetConsoleMode (in: hConsoleHandle=0x84, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0110.347] ReadFile (in: hFile=0x84, lpBuffer=0xc000176000, nNumberOfBytesToRead=0x5b1, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000176000*, lpNumberOfBytesRead=0xc000199cec*=0x5b1, lpOverlapped=0x0) returned 1
	[0110.743] VirtualAlloc (lpAddress=0xc000966000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000966000
	[0111.238] VirtualAlloc (lpAddress=0xc00096a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00096a000
	[0111.240] VirtualAlloc (lpAddress=0xc00096e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00096e000
	[0111.241] VirtualAlloc (lpAddress=0xc000972000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000972000
	[0111.243] VirtualAlloc (lpAddress=0xc000976000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000976000
	[0111.245] VirtualAlloc (lpAddress=0xc00097a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00097a000
	[0111.264] VirtualAlloc (lpAddress=0xc0000f0000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f0000
	[0111.438] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0111.941] SetEvent (hEvent=0xe4) returned 1
	[0111.941] SetEvent (hEvent=0xac) returned 1
	[0111.942] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0117.720] SwitchToThread () returned 1
	[0117.790] SwitchToThread () returned 1
	[0117.836] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0117.932] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.174] SwitchToThread () returned 1
	[0118.213] SwitchToThread () returned 1
	[0118.249] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.431] VirtualAlloc (lpAddress=0xc001800000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc001800000
	[0118.431] VirtualAlloc (lpAddress=0xc001800000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001800000
	[0118.476] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x4830000
	[0118.480] SetEvent (hEvent=0xac) returned 1
	[0118.480] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.502] VirtualAlloc (lpAddress=0xc0003a2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a2000
	[0118.502] VirtualFree (lpAddress=0xc001a00000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0118.600] SwitchToThread () returned 1
	[0118.639] SwitchToThread () returned 1
	[0118.674] SwitchToThread () returned 1
	[0118.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002f180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4
	[0118.758] CloseHandle (hObject=0xf4) returned 1
	[0118.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002f500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4
	[0118.766] CloseHandle (hObject=0xf4) returned 1
	[0118.767] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0118.768] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.769] SetEvent (hEvent=0x104) returned 1
	[0118.769] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0118.773] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.773] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0118.774] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0118.775] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0118.775] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
	[0118.775] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0118.775] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0118.775] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0118.779] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1
	[0118.783] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1
	[0118.784] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1
	[0118.784] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0118.785] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0121.033] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000425a14 | out: lpMode=0xc000425a14) returned 0
	[0121.034] VirtualAlloc (lpAddress=0xc00012e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012e000
	[0121.035] VirtualFree (lpAddress=0xc000438000, dwSize=0x204000, dwFreeType=0x4000) returned 1
	[0121.243] VirtualFree (lpAddress=0xc000438000, dwSize=0x206000, dwFreeType=0x4000) returned 1
	[0121.244] WriteFile (in: hFile=0x118, lpBuffer=0xc0000a6780*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004259b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6780*, lpNumberOfBytesWritten=0xc0004259b4*=0x25d, lpOverlapped=0x0) returned 1
	[0121.247] CloseHandle (hObject=0x118) returned 1
	[0121.619] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000425990 | out: lpFileInformation=0xc000425990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa94adcc0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xa94adcc0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0127.292] SetEvent (hEvent=0x70) returned 1
	[0127.293] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0127.294] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000425708 | out: lpFindFileData=0xc000425708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0128.021] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.021] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
	[0128.021] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
	[0128.021] VirtualAlloc (lpAddress=0xc0003e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e2000
	[0128.022] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0128.022] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0128.023] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.023] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0128.025] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1
	[0128.028] SetEvent (hEvent=0x104) returned 1
	[0128.028] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00)) returned 1
	[0128.029] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1
	[0128.029] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c)) returned 1
	[0128.030] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0128.031] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000425a14 | out: lpMode=0xc000425a14) returned 0
	[0128.031] WriteFile (in: hFile=0x130, lpBuffer=0xc000354000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004259b4, lpOverlapped=0x0 | out: lpBuffer=0xc000354000*, lpNumberOfBytesWritten=0xc0004259b4*=0x25d, lpOverlapped=0x0) returned 1
	[0128.035] CloseHandle (hObject=0x130) returned 1
	[0128.036] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000425990 | out: lpFileInformation=0xc000425990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xac729230, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xac729230, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0128.036] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0128.036] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000425708 | out: lpFindFileData=0xc000425708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x884900
	[0128.037] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.037] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0128.037] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
	[0128.037] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
	[0128.037] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1
	[0128.037] FindNextFileW (in: hFindFile=0x884900, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.037] FindClose (in: hFindFile=0x884900 | out: hFindFile=0x884900) returned 1
	[0128.038] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861)) returned 1
	[0132.078] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd)) returned 1
	[0132.079] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000)) returned 1
	[0132.079] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1
	[0132.080] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0135.855] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000425a14 | out: lpMode=0xc000425a14) returned 0
	[0135.856] WriteFile (in: hFile=0x164, lpBuffer=0xc000354000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004259b4, lpOverlapped=0x0 | out: lpBuffer=0xc000354000*, lpNumberOfBytesWritten=0xc0004259b4*=0x25d, lpOverlapped=0x0) returned 1
	[0135.859] CloseHandle (hObject=0x164) returned 1
	[0135.860] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000425990 | out: lpFileInformation=0xc000425990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb06f1430, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xb06f1430, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0138.064] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0138.066] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000425708 | out: lpFindFileData=0xc000425708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0141.379] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.182] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0142.239] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
	[0142.239] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0142.239] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
	[0142.239] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0142.239] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0142.239] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0142.246] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0142.253] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646)) returned 1
	[0142.263] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8)) returned 1
	[0145.049] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0149.783] SetEvent (hEvent=0x54) returned 1
	[0149.783] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0149.966] SetEvent (hEvent=0x54) returned 1
	[0149.966] SetEvent (hEvent=0x148) returned 1
	[0149.966] SetEvent (hEvent=0x144) returned 1
	[0149.966] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0150.222] SwitchToThread () returned 1
	[0150.282] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0150.342] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0150.343] SetEvent (hEvent=0x144) returned 1
	[0150.345] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1
	[0150.346] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0150.347] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000425a14 | out: lpMode=0xc000425a14) returned 0
	[0150.452] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002f6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004259b4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f6000*, lpNumberOfBytesWritten=0xc0004259b4*=0x25d, lpOverlapped=0x0) returned 1
	[0150.455] CloseHandle (hObject=0xd8) returned 1
	[0150.456] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000425990 | out: lpFileInformation=0xc000425990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8b68650, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xb8b68650, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0150.457] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0150.458] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000425708 | out: lpFindFileData=0xc000425708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0150.490] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0150.496] SetEvent (hEvent=0x144) returned 1
	[0150.496] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0150.497] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
	[0150.497] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0150.497] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
	[0150.497] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0150.497] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0150.498] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0150.504] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd)) returned 1
	[0153.688] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400)) returned 1
	[0154.003] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0154.005] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1
	[0154.307] SwitchToThread () returned 1
	[0155.465] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.966] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.013] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.958] SetEvent (hEvent=0x120) returned 1
	[0156.958] SetEvent (hEvent=0x108) returned 1
	[0156.958] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.070] SetEvent (hEvent=0x148) returned 1
	[0159.071] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 0x2020
	[0159.071] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", dwFileAttributes=0x2020) returned 1
	[0160.758] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.egmwv"), dwFlags=0x1) returned 1
	[0169.750] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0169.835] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0169.836] ReadFile (in: hFile=0xa8, lpBuffer=0xc000210c00, nNumberOfBytesToRead=0x5ac, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc000210c00*, lpNumberOfBytesRead=0xc000161cec*=0x5ac, lpOverlapped=0x0) returned 1
	[0170.598] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0170.716] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0170.859] SetEvent (hEvent=0xc8) returned 1
	[0170.860] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052230 | out: pbBuffer=0xc000052230) returned 1
	[0170.860] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0170.861] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d67 | out: pbBuffer=0xc000214d67) returned 1
	[0170.861] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214dca | out: pbBuffer=0xc000214dca) returned 1
	[0170.861] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052270 | out: pbBuffer=0xc000052270) returned 1
	[0170.861] GetFileType (hFile=0x118) returned 0x1
	[0170.861] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00032bca0*=913) returned 1
	[0170.861] WriteFile (in: hFile=0x118, lpBuffer=0xc000190000*, nNumberOfBytesToWrite=0x391, lpNumberOfBytesWritten=0xc00032bccc, lpOverlapped=0xc00032bce8 | out: lpBuffer=0xc000190000*, lpNumberOfBytesWritten=0xc00032bccc*=0x391, lpOverlapped=0xc00032bce8) returned 1
	[0170.862] GetFileType (hFile=0x118) returned 0x1
	[0170.862] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x391, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00032bca0*=913) returned 1
	[0170.862] GetFileType (hFile=0x118) returned 0x1
	[0170.862] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00032bca0*=913) returned 1
	[0170.862] WriteFile (in: hFile=0x118, lpBuffer=0xc000178380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00032bccc, lpOverlapped=0xc00032bce8 | out: lpBuffer=0xc000178380*, lpNumberOfBytesWritten=0xc00032bccc*=0x227, lpOverlapped=0xc00032bce8) returned 1
	[0170.863] GetFileType (hFile=0x118) returned 0x1
	[0170.863] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x391, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00032bca0*=913) returned 1
	[0170.863] CloseHandle (hObject=0x118) returned 1
	[0170.863] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.egmwv")) returned 0x2020
	[0170.863] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0170.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000523b0 | out: pbBuffer=0xc0000523b0) returned 1
	[0170.865] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215802 | out: pbBuffer=0xc000215802) returned 1
	[0170.865] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002158b9 | out: pbBuffer=0xc0002158b9) returned 1
	[0170.865] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000523f0 | out: pbBuffer=0xc0000523f0) returned 1
	[0170.865] GetFileType (hFile=0xa8) returned 0x1
	[0170.865] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00032bca0*=1452) returned 1
	[0170.865] WriteFile (in: hFile=0xa8, lpBuffer=0xc000384000*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0xc00032bccc, lpOverlapped=0xc00032bce8 | out: lpBuffer=0xc000384000*, lpNumberOfBytesWritten=0xc00032bccc*=0x5ac, lpOverlapped=0xc00032bce8) returned 1
	[0170.866] GetFileType (hFile=0xa8) returned 0x1
	[0170.866] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5ac, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00032bca0*=1452) returned 1
	[0170.866] GetFileType (hFile=0xa8) returned 0x1
	[0170.866] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00032bca0*=1452) returned 1
	[0170.867] WriteFile (in: hFile=0xa8, lpBuffer=0xc000179c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00032bccc, lpOverlapped=0xc00032bce8 | out: lpBuffer=0xc000179c00*, lpNumberOfBytesWritten=0xc00032bccc*=0x22a, lpOverlapped=0xc00032bce8) returned 1
	[0170.867] GetFileType (hFile=0xa8) returned 0x1
	[0170.867] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5ac, lpNewFilePointer=0xc00032bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00032bca0*=1452) returned 1
	[0170.868] CloseHandle (hObject=0xa8) returned 1
	[0170.868] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.egmwv")) returned 0x2020
	[0170.868] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0170.868] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab")) returned 0x2020
	[0170.869] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", dwFileAttributes=0x2020) returned 1
	[0170.869] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.egmwv"), dwFlags=0x1) returned 1
	[0170.870] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0170.871] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0170.871] VirtualAlloc (lpAddress=0xc0016f2000, dwSize=0x46000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0016f2000
	[0170.890] ReadFile (in: hFile=0xa8, lpBuffer=0xc0016f2000, nNumberOfBytesToRead=0x45fde, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc0016f2000*, lpNumberOfBytesRead=0xc000173cec*=0x45fde, lpOverlapped=0x0) returned 1
	[0171.029] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052540 | out: pbBuffer=0xc000052540) returned 1
	[0171.029] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000312b02 | out: pbBuffer=0xc000312b02) returned 1
	[0171.029] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000312be0 | out: pbBuffer=0xc000312be0) returned 1
	[0171.029] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000312be3 | out: pbBuffer=0xc000312be3) returned 1
	[0171.030] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052580 | out: pbBuffer=0xc000052580) returned 1
	[0171.030] VirtualAlloc (lpAddress=0xc0017aa000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0017aa000
	[0171.034] VirtualAlloc (lpAddress=0xc0017bc000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0017bc000
	[0171.040] VirtualAlloc (lpAddress=0xc0017ca000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0017ca000
	[0171.042] VirtualAlloc (lpAddress=0xc0017ce000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0017ce000
	[0171.043] VirtualAlloc (lpAddress=0xc0017d2000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.043] VirtualAlloc (lpAddress=0xc0017d2000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.043] VirtualAlloc (lpAddress=0xc0017d2000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.043] VirtualAlloc (lpAddress=0xc0017d2000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0017d2000
	[0171.045] VirtualAlloc (lpAddress=0xc0017f2000, dwSize=0x60000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.045] VirtualAlloc (lpAddress=0xc0017f2000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.045] VirtualAlloc (lpAddress=0xc0017f2000, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.045] VirtualAlloc (lpAddress=0xc0017f2000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0017f2000
	[0171.046] VirtualAlloc (lpAddress=0xc0017fe000, dwSize=0x54000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.046] VirtualAlloc (lpAddress=0xc0017fe000, dwSize=0x2a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.046] VirtualAlloc (lpAddress=0xc0017fe000, dwSize=0x15000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.047] VirtualAlloc (lpAddress=0xc0017fe000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.047] VirtualAlloc (lpAddress=0xc0017fe000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0171.047] VirtualAlloc (lpAddress=0xc0017fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0017fe000
	[0171.047] VirtualAlloc (lpAddress=0xc001800000, dwSize=0x52000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001800000
	[0171.144] SetEvent (hEvent=0xac) returned 1
	[0171.145] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0171.332] SetEvent (hEvent=0xc8) returned 1
	[0171.345] SwitchToThread () returned 1
	[0171.410] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0171.450] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0171.451] SetEvent (hEvent=0xac) returned 1
	[0171.451] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0171.490] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0171.490] VirtualAlloc (lpAddress=0xc00195e000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00195e000
	[0171.495] VirtualAlloc (lpAddress=0xc00196e000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00196e000
	[0171.501] VirtualAlloc (lpAddress=0xc00198e000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00198e000
	[0171.514] GetFileType (hFile=0xa8) returned 0x1
	[0171.514] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000389ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000389ca0*=286686) returned 1
	[0171.514] WriteFile (in: hFile=0xa8, lpBuffer=0xc0010a0000*, nNumberOfBytesToWrite=0x45fde, lpNumberOfBytesWritten=0xc000389ccc, lpOverlapped=0xc000389ce8 | out: lpBuffer=0xc0010a0000*, lpNumberOfBytesWritten=0xc000389ccc*=0x45fde, lpOverlapped=0xc000389ce8) returned 1
	[0175.087] GetFileType (hFile=0xa8) returned 0x1
	[0175.087] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x45fde, lpNewFilePointer=0xc000389ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000389ca0*=286686) returned 1
	[0175.087] GetFileType (hFile=0xa8) returned 0x1
	[0175.087] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000389ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000389ca0*=286686) returned 1
	[0175.088] WriteFile (in: hFile=0xa8, lpBuffer=0xc000098800*, nNumberOfBytesToWrite=0x26c, lpNumberOfBytesWritten=0xc000389ccc, lpOverlapped=0xc000389ce8 | out: lpBuffer=0xc000098800*, lpNumberOfBytesWritten=0xc000389ccc*=0x26c, lpOverlapped=0xc000389ce8) returned 1
	[0175.480] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0175.656] GetFileType (hFile=0xa8) returned 0x1
	[0175.656] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x45fde, lpNewFilePointer=0xc000389ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000389ca0*=286686) returned 1
	[0175.656] CloseHandle (hObject=0xa8) returned 1
	[0175.657] SetEvent (hEvent=0xac) returned 1
	[0175.657] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0179.802] SwitchToThread () returned 1
	[0179.839] SwitchToThread () returned 1
	[0179.843] SetEvent (hEvent=0x100) returned 1
	[0179.843] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0181.077] SetEvent (hEvent=0x100) returned 1
	[0181.077] SetEvent (hEvent=0x148) returned 1
	[0181.080] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.080] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0181.081] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0181.081] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0181.081] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0181.081] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004257a8 | out: lpFindFileData=0xc0004257a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0181.081] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0181.625] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0181.628] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0xc0004255f8 | out: lpFindFileData=0xc0004255f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0182.096] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0182.096] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0182.101] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1770 | out: lpFileInformation=0xc0001a1770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94)) returned 1
	[0182.125] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1770 | out: lpFileInformation=0xc0001a1770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00)) returned 1
	[0182.131] SetEvent (hEvent=0x54) returned 1
	[0182.131] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1770 | out: lpFileInformation=0xc0001a1770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1
	[0182.140] SetEvent (hEvent=0x124) returned 1
	[0182.140] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1770 | out: lpFileInformation=0xc0001a1770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0182.159] SetEvent (hEvent=0x100) returned 1
	[0182.159] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0182.198] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0001a1904 | out: lpMode=0xc0001a1904) returned 0
	[0182.198] WriteFile (in: hFile=0x164, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0001a18a4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0001a18a4*=0x25d, lpOverlapped=0x0) returned 1
	[0182.201] CloseHandle (hObject=0x164) returned 1
	[0182.202] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xcb2a7e40, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xcb2a7e40, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0182.209] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0182.210] SetEvent (hEvent=0xc8) returned 1
	[0182.210] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0182.211] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1
	[0182.211] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0182.212] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0001a1a14 | out: lpMode=0xc0001a1a14) returned 0
	[0182.212] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0001a19b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0001a19b4*=0x25d, lpOverlapped=0x0) returned 1
	[0182.215] CloseHandle (hObject=0xe8) returned 1
	[0182.215] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1990 | out: lpFileInformation=0xc0001a1990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xcb2d3d60, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xcb2d3d60, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0182.215] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0182.215] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc0001a1708 | out: lpFindFileData=0xc0001a1708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1
	[0184.325] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0184.326] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1
	[0184.326] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1
	[0184.326] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0184.326] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0184.326] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0001a17a8 | out: lpFindFileData=0xc0001a17a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0184.326] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0184.329] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0184.394] SetEvent (hEvent=0xc8) returned 1
	[0184.394] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0184.457] SetEvent (hEvent=0xc8) returned 1
	[0184.458] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0184.503] SetEvent (hEvent=0x124) returned 1
	[0184.503] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0187.567] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00)) returned 1
	[0187.661] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1
	[0187.661] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb)) returned 1
	[0187.668] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31)) returned 1
	[0187.679] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.755] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976)) returned 1
	[0187.756] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0191.013] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0191.048] SetEvent (hEvent=0x54) returned 1
	[0191.048] SetEvent (hEvent=0x148) returned 1
	[0191.048] VirtualAlloc (lpAddress=0xc000842000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000842000
	[0191.070] VirtualFree (lpAddress=0xc000f60000, dwSize=0x10a0000, dwFreeType=0x4000) returned 0
	[0191.070] VirtualFree (lpAddress=0xc000f60000, dwSize=0x10a0000, dwFreeType=0x4000) returned 0
	[0191.070] VirtualFree (lpAddress=0xc000f60000, dwSize=0x850000, dwFreeType=0x4000) returned 0
	[0191.071] VirtualFree (lpAddress=0xc000f60000, dwSize=0x428000, dwFreeType=0x4000) returned 0
	[0191.071] VirtualFree (lpAddress=0xc000f60000, dwSize=0x214000, dwFreeType=0x4000) returned 0
	[0191.071] VirtualFree (lpAddress=0xc000f60000, dwSize=0x10a000, dwFreeType=0x4000) returned 0
	[0191.071] VirtualFree (lpAddress=0xc000f60000, dwSize=0x85000, dwFreeType=0x4000) returned 1
	[0191.080] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x101b000, dwFreeType=0x4000) returned 0
	[0191.080] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x80d000, dwFreeType=0x4000) returned 0
	[0191.081] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x406000, dwFreeType=0x4000) returned 0
	[0191.081] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x203000, dwFreeType=0x4000) returned 0
	[0191.081] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x101000, dwFreeType=0x4000) returned 0
	[0191.081] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0191.081] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0191.081] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0191.081] VirtualFree (lpAddress=0xc000fe5000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0191.125] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x100b000, dwFreeType=0x4000) returned 0
	[0191.125] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x805000, dwFreeType=0x4000) returned 0
	[0191.125] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x402000, dwFreeType=0x4000) returned 0
	[0191.125] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x201000, dwFreeType=0x4000) returned 0
	[0191.125] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0191.125] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0191.126] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0191.126] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0191.126] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0191.126] VirtualFree (lpAddress=0xc000ff5000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0191.127] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x1003000, dwFreeType=0x4000) returned 0
	[0191.127] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x801000, dwFreeType=0x4000) returned 0
	[0191.127] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x400000, dwFreeType=0x4000) returned 0
	[0191.127] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0191.127] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0191.128] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0191.128] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0191.128] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0191.128] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0191.128] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0191.128] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0191.128] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0191.129] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1001000, dwFreeType=0x4000) returned 0
	[0191.129] VirtualFree (lpAddress=0xc000fff000, dwSize=0x800000, dwFreeType=0x4000) returned 0
	[0191.129] VirtualFree (lpAddress=0xc000fff000, dwSize=0x400000, dwFreeType=0x4000) returned 0
	[0191.129] VirtualFree (lpAddress=0xc000fff000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0191.129] VirtualFree (lpAddress=0xc000fff000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0191.130] VirtualFree (lpAddress=0xc000fff000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0191.130] VirtualFree (lpAddress=0xc000fff000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0191.130] VirtualFree (lpAddress=0xc000fff000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0191.130] VirtualFree (lpAddress=0xc000fff000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0191.130] VirtualFree (lpAddress=0xc000fff000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0191.130] VirtualFree (lpAddress=0xc000fff000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0191.130] VirtualFree (lpAddress=0xc000fff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0191.131] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0191.131] VirtualFree (lpAddress=0xc001000000, dwSize=0x1000000, dwFreeType=0x4000) returned 0
	[0191.131] VirtualFree (lpAddress=0xc001000000, dwSize=0x800000, dwFreeType=0x4000) returned 0
	[0191.131] VirtualFree (lpAddress=0xc001000000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0191.215] VirtualFree (lpAddress=0xc001400000, dwSize=0xc00000, dwFreeType=0x4000) returned 0
	[0191.215] VirtualFree (lpAddress=0xc001400000, dwSize=0x600000, dwFreeType=0x4000) returned 0
	[0191.215] VirtualFree (lpAddress=0xc001400000, dwSize=0x300000, dwFreeType=0x4000) returned 1
	[0192.457] VirtualFree (lpAddress=0xc001700000, dwSize=0x900000, dwFreeType=0x4000) returned 0
	[0192.457] VirtualFree (lpAddress=0xc001700000, dwSize=0x480000, dwFreeType=0x4000) returned 0
	[0192.457] VirtualFree (lpAddress=0xc001700000, dwSize=0x240000, dwFreeType=0x4000) returned 0
	[0192.458] VirtualFree (lpAddress=0xc001700000, dwSize=0x120000, dwFreeType=0x4000) returned 0
	[0192.458] VirtualFree (lpAddress=0xc001700000, dwSize=0x90000, dwFreeType=0x4000) returned 1
	[0192.469] VirtualFree (lpAddress=0xc001790000, dwSize=0x870000, dwFreeType=0x4000) returned 0
	[0192.469] VirtualFree (lpAddress=0xc001790000, dwSize=0x438000, dwFreeType=0x4000) returned 0
	[0192.469] VirtualFree (lpAddress=0xc001790000, dwSize=0x21c000, dwFreeType=0x4000) returned 0
	[0192.469] VirtualFree (lpAddress=0xc001790000, dwSize=0x10e000, dwFreeType=0x4000) returned 0
	[0192.469] VirtualFree (lpAddress=0xc001790000, dwSize=0x87000, dwFreeType=0x4000) returned 0
	[0192.469] VirtualFree (lpAddress=0xc001790000, dwSize=0x43000, dwFreeType=0x4000) returned 1
	[0192.475] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x82d000, dwFreeType=0x4000) returned 0
	[0192.475] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x416000, dwFreeType=0x4000) returned 0
	[0192.475] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x20b000, dwFreeType=0x4000) returned 0
	[0192.476] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x105000, dwFreeType=0x4000) returned 0
	[0192.476] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x82000, dwFreeType=0x4000) returned 0
	[0192.476] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x41000, dwFreeType=0x4000) returned 0
	[0192.476] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x20000, dwFreeType=0x4000) returned 1
	[0192.479] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x80d000, dwFreeType=0x4000) returned 0
	[0192.479] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x406000, dwFreeType=0x4000) returned 0
	[0192.480] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x203000, dwFreeType=0x4000) returned 0
	[0192.480] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x101000, dwFreeType=0x4000) returned 0
	[0192.480] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0192.480] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0192.480] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0192.481] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0192.481] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0192.482] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x805000, dwFreeType=0x4000) returned 0
	[0192.482] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x402000, dwFreeType=0x4000) returned 0
	[0192.482] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x201000, dwFreeType=0x4000) returned 0
	[0192.482] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0192.482] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0192.482] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0192.482] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0192.483] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0192.483] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0192.483] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0192.484] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x801000, dwFreeType=0x4000) returned 0
	[0192.484] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x400000, dwFreeType=0x4000) returned 0
	[0192.484] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0192.484] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0192.484] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0192.485] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0192.485] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0192.485] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0192.485] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0192.485] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0192.485] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0192.486] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0192.486] VirtualFree (lpAddress=0xc001800000, dwSize=0x800000, dwFreeType=0x4000) returned 0
	[0192.486] VirtualFree (lpAddress=0xc001800000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0193.400] VirtualFree (lpAddress=0xc001c00000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0193.484] VirtualFree (lpAddress=0xc000a42000, dwSize=0x15be000, dwFreeType=0x4000) returned 0
	[0193.484] VirtualFree (lpAddress=0xc000a42000, dwSize=0x15be000, dwFreeType=0x4000) returned 0
	[0193.484] VirtualFree (lpAddress=0xc000a42000, dwSize=0xadf000, dwFreeType=0x4000) returned 0
	[0193.484] VirtualFree (lpAddress=0xc000a42000, dwSize=0x56f000, dwFreeType=0x4000) returned 0
	[0193.485] VirtualFree (lpAddress=0xc000a42000, dwSize=0x2b7000, dwFreeType=0x4000) returned 0
	[0193.485] VirtualFree (lpAddress=0xc000a42000, dwSize=0x15b000, dwFreeType=0x4000) returned 1
	[0193.485] VirtualFree (lpAddress=0xc000b9d000, dwSize=0x1463000, dwFreeType=0x4000) returned 0
	[0193.485] VirtualFree (lpAddress=0xc000b9d000, dwSize=0xa31000, dwFreeType=0x4000) returned 0
	[0193.485] VirtualFree (lpAddress=0xc000b9d000, dwSize=0x518000, dwFreeType=0x4000) returned 0
	[0193.485] VirtualFree (lpAddress=0xc000b9d000, dwSize=0x28c000, dwFreeType=0x4000) returned 0
	[0193.486] VirtualFree (lpAddress=0xc000b9d000, dwSize=0x146000, dwFreeType=0x4000) returned 0
	[0193.486] VirtualFree (lpAddress=0xc000b9d000, dwSize=0xa3000, dwFreeType=0x4000) returned 0
	[0193.486] VirtualFree (lpAddress=0xc000b9d000, dwSize=0x51000, dwFreeType=0x4000) returned 1
	[0193.486] VirtualFree (lpAddress=0xc000bee000, dwSize=0x1412000, dwFreeType=0x4000) returned 0
	[0193.486] VirtualFree (lpAddress=0xc000bee000, dwSize=0xa09000, dwFreeType=0x4000) returned 0
	[0193.486] VirtualFree (lpAddress=0xc000bee000, dwSize=0x504000, dwFreeType=0x4000) returned 0
	[0193.487] VirtualFree (lpAddress=0xc000bee000, dwSize=0x282000, dwFreeType=0x4000) returned 0
	[0193.487] VirtualFree (lpAddress=0xc000bee000, dwSize=0x141000, dwFreeType=0x4000) returned 0
	[0193.487] VirtualFree (lpAddress=0xc000bee000, dwSize=0xa0000, dwFreeType=0x4000) returned 0
	[0193.487] VirtualFree (lpAddress=0xc000bee000, dwSize=0x50000, dwFreeType=0x4000) returned 0
	[0193.487] VirtualFree (lpAddress=0xc000bee000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0193.487] VirtualFree (lpAddress=0xc000bee000, dwSize=0x14000, dwFreeType=0x4000) returned 0
	[0193.488] VirtualFree (lpAddress=0xc000bee000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0193.488] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x1408000, dwFreeType=0x4000) returned 0
	[0193.488] VirtualFree (lpAddress=0xc000bf8000, dwSize=0xa04000, dwFreeType=0x4000) returned 0
	[0193.488] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x502000, dwFreeType=0x4000) returned 0
	[0193.488] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x281000, dwFreeType=0x4000) returned 0
	[0193.488] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x140000, dwFreeType=0x4000) returned 0
	[0193.489] VirtualFree (lpAddress=0xc000bf8000, dwSize=0xa0000, dwFreeType=0x4000) returned 0
	[0193.489] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x50000, dwFreeType=0x4000) returned 0
	[0193.489] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0193.489] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x14000, dwFreeType=0x4000) returned 0
	[0193.489] VirtualFree (lpAddress=0xc000bf8000, dwSize=0xa000, dwFreeType=0x4000) returned 0
	[0193.489] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x5000, dwFreeType=0x4000) returned 1
	[0193.490] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x1403000, dwFreeType=0x4000) returned 0
	[0193.490] VirtualFree (lpAddress=0xc000bfd000, dwSize=0xa01000, dwFreeType=0x4000) returned 0
	[0193.490] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x500000, dwFreeType=0x4000) returned 0
	[0193.490] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x280000, dwFreeType=0x4000) returned 0
	[0193.490] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x140000, dwFreeType=0x4000) returned 0
	[0193.490] VirtualFree (lpAddress=0xc000bfd000, dwSize=0xa0000, dwFreeType=0x4000) returned 0
	[0193.490] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x50000, dwFreeType=0x4000) returned 0
	[0193.491] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0193.492] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x14000, dwFreeType=0x4000) returned 0
	[0193.492] VirtualFree (lpAddress=0xc000bfd000, dwSize=0xa000, dwFreeType=0x4000) returned 0
	[0193.492] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x5000, dwFreeType=0x4000) returned 0
	[0193.492] VirtualFree (lpAddress=0xc000bfd000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0193.492] VirtualFree (lpAddress=0xc000bff000, dwSize=0x1401000, dwFreeType=0x4000) returned 0
	[0194.044] VirtualFree (lpAddress=0xc000bff000, dwSize=0xa00000, dwFreeType=0x4000) returned 0
	[0194.044] VirtualFree (lpAddress=0xc000bff000, dwSize=0x500000, dwFreeType=0x4000) returned 0
	[0194.050] VirtualFree (lpAddress=0xc000bff000, dwSize=0x280000, dwFreeType=0x4000) returned 0
	[0194.050] VirtualFree (lpAddress=0xc000bff000, dwSize=0x140000, dwFreeType=0x4000) returned 0
	[0194.050] VirtualFree (lpAddress=0xc000bff000, dwSize=0xa0000, dwFreeType=0x4000) returned 0
	[0194.050] VirtualFree (lpAddress=0xc000bff000, dwSize=0x50000, dwFreeType=0x4000) returned 0
	[0194.051] VirtualFree (lpAddress=0xc000bff000, dwSize=0x28000, dwFreeType=0x4000) returned 0
	[0194.051] VirtualFree (lpAddress=0xc000bff000, dwSize=0x14000, dwFreeType=0x4000) returned 0
	[0194.051] VirtualFree (lpAddress=0xc000bff000, dwSize=0xa000, dwFreeType=0x4000) returned 0
	[0194.051] VirtualFree (lpAddress=0xc000bff000, dwSize=0x5000, dwFreeType=0x4000) returned 0
	[0194.051] VirtualFree (lpAddress=0xc000bff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0194.051] VirtualFree (lpAddress=0xc000bff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0194.052] VirtualFree (lpAddress=0xc000c00000, dwSize=0x1400000, dwFreeType=0x4000) returned 0
	[0194.052] VirtualFree (lpAddress=0xc000c00000, dwSize=0xa00000, dwFreeType=0x4000) returned 0
	[0194.052] VirtualFree (lpAddress=0xc000c00000, dwSize=0x500000, dwFreeType=0x4000) returned 0
	[0194.052] VirtualFree (lpAddress=0xc000c00000, dwSize=0x280000, dwFreeType=0x4000) returned 1
	[0194.052] VirtualFree (lpAddress=0xc000e80000, dwSize=0x1180000, dwFreeType=0x4000) returned 0
	[0194.053] VirtualFree (lpAddress=0xc000e80000, dwSize=0x8c0000, dwFreeType=0x4000) returned 0
	[0194.053] VirtualFree (lpAddress=0xc000e80000, dwSize=0x460000, dwFreeType=0x4000) returned 0
	[0194.053] VirtualFree (lpAddress=0xc000e80000, dwSize=0x230000, dwFreeType=0x4000) returned 0
	[0194.053] VirtualFree (lpAddress=0xc000e80000, dwSize=0x118000, dwFreeType=0x4000) returned 1
	[0194.053] VirtualFree (lpAddress=0xc000f98000, dwSize=0x1068000, dwFreeType=0x4000) returned 0
	[0194.054] VirtualFree (lpAddress=0xc000f98000, dwSize=0x834000, dwFreeType=0x4000) returned 0
	[0194.054] VirtualFree (lpAddress=0xc000f98000, dwSize=0x41a000, dwFreeType=0x4000) returned 0
	[0194.054] VirtualFree (lpAddress=0xc000f98000, dwSize=0x20d000, dwFreeType=0x4000) returned 0
	[0194.054] VirtualFree (lpAddress=0xc000f98000, dwSize=0x106000, dwFreeType=0x4000) returned 0
	[0194.054] VirtualFree (lpAddress=0xc000f98000, dwSize=0x83000, dwFreeType=0x4000) returned 0
	[0194.054] VirtualFree (lpAddress=0xc000f98000, dwSize=0x41000, dwFreeType=0x4000) returned 1
	[0194.054] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x1027000, dwFreeType=0x4000) returned 0
	[0194.055] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x813000, dwFreeType=0x4000) returned 0
	[0194.055] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x409000, dwFreeType=0x4000) returned 0
	[0194.055] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x204000, dwFreeType=0x4000) returned 0
	[0194.055] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x102000, dwFreeType=0x4000) returned 0
	[0194.055] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x81000, dwFreeType=0x4000) returned 0
	[0194.055] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0194.056] VirtualFree (lpAddress=0xc000fd9000, dwSize=0x20000, dwFreeType=0x4000) returned 1
	[0194.056] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x1007000, dwFreeType=0x4000) returned 0
	[0194.056] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x803000, dwFreeType=0x4000) returned 0
	[0194.056] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x401000, dwFreeType=0x4000) returned 0
	[0194.057] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0194.057] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0194.057] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0194.057] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0194.057] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0194.057] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0194.058] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0194.058] VirtualFree (lpAddress=0xc000ff9000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0194.058] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x1003000, dwFreeType=0x4000) returned 0
	[0194.058] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x801000, dwFreeType=0x4000) returned 0
	[0194.058] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x400000, dwFreeType=0x4000) returned 0
	[0194.058] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0194.059] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0194.059] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0194.059] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0194.059] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0194.059] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0194.060] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0194.060] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0194.060] VirtualFree (lpAddress=0xc000ffd000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0194.060] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1001000, dwFreeType=0x4000) returned 0
	[0194.061] VirtualFree (lpAddress=0xc000fff000, dwSize=0x800000, dwFreeType=0x4000) returned 0
	[0194.062] VirtualFree (lpAddress=0xc000fff000, dwSize=0x400000, dwFreeType=0x4000) returned 0
	[0194.062] VirtualFree (lpAddress=0xc000fff000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0194.062] VirtualFree (lpAddress=0xc000fff000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0194.062] VirtualFree (lpAddress=0xc000fff000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0194.062] VirtualFree (lpAddress=0xc000fff000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0194.062] VirtualFree (lpAddress=0xc000fff000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0194.063] VirtualFree (lpAddress=0xc000fff000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0194.063] VirtualFree (lpAddress=0xc000fff000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0194.063] VirtualFree (lpAddress=0xc000fff000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0194.063] VirtualFree (lpAddress=0xc000fff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0194.063] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0194.063] VirtualFree (lpAddress=0xc001000000, dwSize=0x1000000, dwFreeType=0x4000) returned 0
	[0194.063] VirtualFree (lpAddress=0xc001000000, dwSize=0x800000, dwFreeType=0x4000) returned 0
	[0194.064] VirtualFree (lpAddress=0xc001000000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0194.064] VirtualFree (lpAddress=0xc001400000, dwSize=0xc00000, dwFreeType=0x4000) returned 0
	[0194.064] VirtualFree (lpAddress=0xc001400000, dwSize=0x600000, dwFreeType=0x4000) returned 0
	[0194.064] VirtualFree (lpAddress=0xc001400000, dwSize=0x300000, dwFreeType=0x4000) returned 1
	[0194.065] VirtualFree (lpAddress=0xc001700000, dwSize=0x900000, dwFreeType=0x4000) returned 0
	[0194.065] VirtualFree (lpAddress=0xc001700000, dwSize=0x480000, dwFreeType=0x4000) returned 0
	[0194.065] VirtualFree (lpAddress=0xc001700000, dwSize=0x240000, dwFreeType=0x4000) returned 0
	[0194.065] VirtualFree (lpAddress=0xc001700000, dwSize=0x120000, dwFreeType=0x4000) returned 0
	[0194.065] VirtualFree (lpAddress=0xc001700000, dwSize=0x90000, dwFreeType=0x4000) returned 1
	[0194.066] VirtualFree (lpAddress=0xc001790000, dwSize=0x870000, dwFreeType=0x4000) returned 0
	[0194.066] VirtualFree (lpAddress=0xc001790000, dwSize=0x438000, dwFreeType=0x4000) returned 0
	[0194.066] VirtualFree (lpAddress=0xc001790000, dwSize=0x21c000, dwFreeType=0x4000) returned 0
	[0194.066] VirtualFree (lpAddress=0xc001790000, dwSize=0x10e000, dwFreeType=0x4000) returned 0
	[0194.066] VirtualFree (lpAddress=0xc001790000, dwSize=0x87000, dwFreeType=0x4000) returned 0
	[0194.066] VirtualFree (lpAddress=0xc001790000, dwSize=0x43000, dwFreeType=0x4000) returned 1
	[0194.067] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x82d000, dwFreeType=0x4000) returned 0
	[0194.067] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x416000, dwFreeType=0x4000) returned 0
	[0194.067] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x20b000, dwFreeType=0x4000) returned 0
	[0194.067] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x105000, dwFreeType=0x4000) returned 0
	[0194.067] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x82000, dwFreeType=0x4000) returned 0
	[0194.067] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x41000, dwFreeType=0x4000) returned 0
	[0194.068] VirtualFree (lpAddress=0xc0017d3000, dwSize=0x20000, dwFreeType=0x4000) returned 1
	[0194.081] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x80d000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x406000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x203000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x101000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0194.082] VirtualFree (lpAddress=0xc0017f3000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0194.083] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x805000, dwFreeType=0x4000) returned 0
	[0194.083] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x402000, dwFreeType=0x4000) returned 0
	[0194.083] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x201000, dwFreeType=0x4000) returned 0
	[0194.083] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0194.083] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0194.083] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0194.083] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0194.084] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0194.084] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0194.084] VirtualFree (lpAddress=0xc0017fb000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0194.085] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x801000, dwFreeType=0x4000) returned 0
	[0194.085] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x400000, dwFreeType=0x4000) returned 0
	[0194.085] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0194.085] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0194.085] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0194.085] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0194.086] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0194.086] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0194.086] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0194.086] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x4000, dwFreeType=0x4000) returned 0
	[0194.086] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x2000, dwFreeType=0x4000) returned 0
	[0194.086] VirtualFree (lpAddress=0xc0017ff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0194.087] VirtualFree (lpAddress=0xc001800000, dwSize=0x800000, dwFreeType=0x4000) returned 0
	[0194.087] VirtualFree (lpAddress=0xc001800000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0194.088] VirtualFree (lpAddress=0xc001c00000, dwSize=0x400000, dwFreeType=0x4000) returned 1
	[0194.088] SetEvent (hEvent=0x120) returned 1
	[0194.198] SetEvent (hEvent=0x120) returned 1
	[0194.198] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0194.223] SetEvent (hEvent=0x54) returned 1
	[0194.224] SetEvent (hEvent=0x108) returned 1
	[0194.224] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0194.259] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0194.259] SetEvent (hEvent=0x108) returned 1
	[0194.259] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0194.316] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0194.316] SetEvent (hEvent=0x108) returned 1
	[0194.316] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0194.402] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0194.402] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0201.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20
	[0201.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x20) returned 1
	[0201.531] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0201.532] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0201.706] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0201.706] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001f0000, nNumberOfBytesToRead=0x1f20, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f0000*, lpNumberOfBytesRead=0xc000429cec*=0x1f20, lpOverlapped=0x0) returned 1
	[0201.711] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b68f0 | out: pbBuffer=0xc0002b68f0) returned 1
	[0201.712] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001e8c02 | out: pbBuffer=0xc0001e8c02) returned 1
	[0201.712] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001e8c40 | out: pbBuffer=0xc0001e8c40) returned 1
	[0201.712] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001e8cab | out: pbBuffer=0xc0001e8cab) returned 1
	[0201.712] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6930 | out: pbBuffer=0xc0002b6930) returned 1
	[0201.712] GetFileType (hFile=0xcc) returned 0x1
	[0201.712] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=7968) returned 1
	[0201.712] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002f4000*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0002f4000*, lpNumberOfBytesWritten=0xc000357ccc*=0x1f20, lpOverlapped=0xc000357ce8) returned 1
	[0201.713] GetFileType (hFile=0xcc) returned 0x1
	[0201.713] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1f20, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=7968) returned 1
	[0201.713] GetFileType (hFile=0xcc) returned 0x1
	[0201.713] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=7968) returned 1
	[0201.714] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001f9180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0001f9180*, lpNumberOfBytesWritten=0xc000357ccc*=0x22a, lpOverlapped=0xc000357ce8) returned 1
	[0201.715] GetFileType (hFile=0xcc) returned 0x1
	[0201.715] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1f20, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=7968) returned 1
	[0201.715] CloseHandle (hObject=0xcc) returned 1
	[0201.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.egmwv")) returned 0x20
	[0201.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.730] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0201.732] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0201.733] SetEvent (hEvent=0x120) returned 1
	[0201.733] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0201.739] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0201.740] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf")) returned 0x20
	[0212.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF", dwFileAttributes=0x20) returned 1
	[0212.600] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0212.886] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00050fcc4 | out: lpMode=0xc00050fcc4) returned 0
	[0212.886] ReadFile (in: hFile=0xe8, lpBuffer=0xc000124000, nNumberOfBytesToRead=0xbd04, lpNumberOfBytesRead=0xc00050fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000124000*, lpNumberOfBytesRead=0xc00050fcec*=0xbd04, lpOverlapped=0x0) returned 1
	[0212.892] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053020 | out: pbBuffer=0xc000053020) returned 1
	[0212.892] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0602 | out: pbBuffer=0xc0002c0602) returned 1
	[0212.892] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053060 | out: pbBuffer=0xc000053060) returned 1
	[0212.893] GetFileType (hFile=0xe8) returned 0x1
	[0212.893] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=48388) returned 1
	[0212.893] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004fa000*, nNumberOfBytesToWrite=0xbd04, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc0004fa000*, lpNumberOfBytesWritten=0xc000183ccc*=0xbd04, lpOverlapped=0xc000183ce8) returned 1
	[0212.894] GetFileType (hFile=0xe8) returned 0x1
	[0212.894] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbd04, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=48388) returned 1
	[0212.894] GetFileType (hFile=0xe8) returned 0x1
	[0212.894] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=48388) returned 1
	[0212.894] WriteFile (in: hFile=0xe8, lpBuffer=0xc00037e700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc00037e700*, lpNumberOfBytesWritten=0xc000183ccc*=0x230, lpOverlapped=0xc000183ce8) returned 1
	[0212.894] GetFileType (hFile=0xe8) returned 0x1
	[0212.894] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbd04, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=48388) returned 1
	[0212.895] CloseHandle (hObject=0xe8) returned 1
	[0212.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf.egmwv")) returned 0x20
	[0212.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.926] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.977] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.979] SetEvent (hEvent=0x144) returned 1
	[0212.980] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.984] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.998] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.022] SetEvent (hEvent=0xac) returned 1
	[0213.022] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.026] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.040] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.082] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.100] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.110] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.134] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.150] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.167] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.180] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.211] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.226] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.236] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.262] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.270] SetEvent (hEvent=0x144) returned 1
	[0213.272] SetEvent (hEvent=0x120) returned 1
	[0213.273] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0213.351] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.351] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0213.353] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.353] SetEvent (hEvent=0xe4) returned 1
	[0213.353] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0213.355] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.355] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.404] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf")) returned 0x20
	[0213.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF", dwFileAttributes=0x20) returned 1
	[0213.425] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.481] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0213.481] ReadFile (in: hFile=0x164, lpBuffer=0xc000160000, nNumberOfBytesToRead=0x1338, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000160000*, lpNumberOfBytesRead=0xc00016bcec*=0x1338, lpOverlapped=0x0) returned 1
	[0213.619] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206440 | out: pbBuffer=0xc000206440) returned 1
	[0213.619] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020645a | out: pbBuffer=0xc00020645a) returned 1
	[0213.619] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000136602 | out: pbBuffer=0xc000136602) returned 1
	[0213.619] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206480 | out: pbBuffer=0xc000206480) returned 1
	[0213.620] GetFileType (hFile=0x164) returned 0x1
	[0213.620] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=4920) returned 1
	[0213.620] WriteFile (in: hFile=0x164, lpBuffer=0xc00030a000*, nNumberOfBytesToWrite=0x1338, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc00030a000*, lpNumberOfBytesWritten=0xc00022dccc*=0x1338, lpOverlapped=0xc00022dce8) returned 1
	[0213.620] GetFileType (hFile=0x164) returned 0x1
	[0213.620] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1338, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=4920) returned 1
	[0213.621] GetFileType (hFile=0x164) returned 0x1
	[0213.621] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=4920) returned 1
	[0213.622] WriteFile (in: hFile=0x164, lpBuffer=0xc000140700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000140700*, lpNumberOfBytesWritten=0xc00022dccc*=0x22a, lpOverlapped=0xc00022dce8) returned 1
	[0213.622] GetFileType (hFile=0x164) returned 0x1
	[0213.623] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1338, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=4920) returned 1
	[0213.623] CloseHandle (hObject=0x164) returned 1
	[0213.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf.egmwv")) returned 0x20
	[0213.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.650] SetEvent (hEvent=0x108) returned 1
	[0213.650] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.659] SetEvent (hEvent=0xac) returned 1
	[0213.659] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.508] SetEvent (hEvent=0x84) returned 1
	[0214.508] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.717] SetEvent (hEvent=0xac) returned 1
	[0214.717] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.722] SetEvent (hEvent=0xac) returned 1
	[0214.722] SetEvent (hEvent=0xf8) returned 1
	[0214.722] SwitchToThread () returned 1
	[0214.737] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.738] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.751] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.786] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.805] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.812] SetEvent (hEvent=0x120) returned 1
	[0214.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf")) returned 0x20
	[0214.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF", dwFileAttributes=0x20) returned 1
	[0214.815] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.858] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0214.858] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002f2000, nNumberOfBytesToRead=0x3418, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesRead=0xc000387cec*=0x3418, lpOverlapped=0x0) returned 1
	[0214.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0214.864] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000c7502 | out: pbBuffer=0xc0000c7502) returned 1
	[0214.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000c7524 | out: pbBuffer=0xc0000c7524) returned 1
	[0214.865] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0214.865] GetFileType (hFile=0xcc) returned 0x1
	[0214.865] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=13336) returned 1
	[0214.865] WriteFile (in: hFile=0xcc, lpBuffer=0xc000330000*, nNumberOfBytesToWrite=0x3418, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000330000*, lpNumberOfBytesWritten=0xc000411ccc*=0x3418, lpOverlapped=0xc000411ce8) returned 1
	[0214.866] GetFileType (hFile=0xcc) returned 0x1
	[0214.866] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x3418, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=13336) returned 1
	[0214.866] GetFileType (hFile=0xcc) returned 0x1
	[0214.866] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=13336) returned 1
	[0214.866] WriteFile (in: hFile=0xcc, lpBuffer=0xc000401c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000401c00*, lpNumberOfBytesWritten=0xc000411ccc*=0x227, lpOverlapped=0xc000411ce8) returned 1
	[0214.866] GetFileType (hFile=0xcc) returned 0x1
	[0214.867] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x3418, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=13336) returned 1
	[0214.867] CloseHandle (hObject=0xcc) returned 1
	[0214.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf.egmwv")) returned 0x20
	[0214.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.870] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf")) returned 0x20
	[0214.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x20) returned 1
	[0214.888] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.921] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0214.921] ReadFile (in: hFile=0x118, lpBuffer=0xc00044a000, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00044a000*, lpNumberOfBytesRead=0xc000387cec*=0x3734, lpOverlapped=0x0) returned 1
	[0214.927] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0214.927] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0214.927] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0214.927] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0214.927] GetFileType (hFile=0x118) returned 0x1
	[0214.927] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=14132) returned 1
	[0214.928] WriteFile (in: hFile=0x118, lpBuffer=0xc000208000*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000208000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3734, lpOverlapped=0xc000155ce8) returned 1
	[0214.928] GetFileType (hFile=0x118) returned 0x1
	[0214.928] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3734, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=14132) returned 1
	[0214.928] GetFileType (hFile=0x118) returned 0x1
	[0214.929] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=14132) returned 1
	[0214.929] WriteFile (in: hFile=0x118, lpBuffer=0xc00023ae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00023ae00*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0214.929] GetFileType (hFile=0x118) returned 0x1
	[0214.929] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3734, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=14132) returned 1
	[0214.929] CloseHandle (hObject=0x118) returned 1
	[0214.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf.egmwv")) returned 0x20
	[0214.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.931] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.943] SetEvent (hEvent=0x120) returned 1
	[0214.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf")) returned 0x20
	[0214.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF", dwFileAttributes=0x20) returned 1
	[0214.945] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.973] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.977] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0214.977] ReadFile (in: hFile=0x118, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x4030, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc000389cec*=0x4030, lpOverlapped=0x0) returned 1
	[0214.983] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0214.983] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0214.983] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0214.983] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0214.983] GetFileType (hFile=0x118) returned 0x1
	[0214.983] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16432) returned 1
	[0214.983] WriteFile (in: hFile=0x118, lpBuffer=0xc0002c6000*, nNumberOfBytesToWrite=0x4030, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002c6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4030, lpOverlapped=0xc000155ce8) returned 1
	[0214.984] GetFileType (hFile=0x118) returned 0x1
	[0214.984] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x4030, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16432) returned 1
	[0214.984] GetFileType (hFile=0x118) returned 0x1
	[0214.984] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16432) returned 1
	[0214.984] WriteFile (in: hFile=0x118, lpBuffer=0xc0002a2700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002a2700*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0214.985] GetFileType (hFile=0x118) returned 0x1
	[0214.985] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x4030, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16432) returned 1
	[0214.985] CloseHandle (hObject=0x118) returned 1
	[0214.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf.egmwv")) returned 0x20
	[0214.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.987] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.992] SetEvent (hEvent=0x120) returned 1
	[0214.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf")) returned 0x20
	[0214.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF", dwFileAttributes=0x20) returned 1
	[0214.993] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.020] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.020] ReadFile (in: hFile=0xcc, lpBuffer=0xc00034c000, nNumberOfBytesToRead=0xe70, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034c000*, lpNumberOfBytesRead=0xc000389cec*=0xe70, lpOverlapped=0x0) returned 1
	[0215.027] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8420 | out: pbBuffer=0xc0001b8420) returned 1
	[0215.027] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000224a02 | out: pbBuffer=0xc000224a02) returned 1
	[0215.028] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8460 | out: pbBuffer=0xc0001b8460) returned 1
	[0215.028] GetFileType (hFile=0xcc) returned 0x1
	[0215.028] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005cfca0*=3696) returned 1
	[0215.028] WriteFile (in: hFile=0xcc, lpBuffer=0xc000360000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0xc0005cfccc, lpOverlapped=0xc0005cfce8 | out: lpBuffer=0xc000360000*, lpNumberOfBytesWritten=0xc0005cfccc*=0xe70, lpOverlapped=0xc0005cfce8) returned 1
	[0215.029] GetFileType (hFile=0xcc) returned 0x1
	[0215.029] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xe70, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005cfca0*=3696) returned 1
	[0215.029] GetFileType (hFile=0xcc) returned 0x1
	[0215.029] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005cfca0*=3696) returned 1
	[0215.029] WriteFile (in: hFile=0xcc, lpBuffer=0xc00035c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0005cfccc, lpOverlapped=0xc0005cfce8 | out: lpBuffer=0xc00035c700*, lpNumberOfBytesWritten=0xc0005cfccc*=0x22a, lpOverlapped=0xc0005cfce8) returned 1
	[0215.030] GetFileType (hFile=0xcc) returned 0x1
	[0215.030] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xe70, lpNewFilePointer=0xc0005cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005cfca0*=3696) returned 1
	[0215.030] CloseHandle (hObject=0xcc) returned 1
	[0215.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf.egmwv")) returned 0x20
	[0215.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.034] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf")) returned 0x20
	[0215.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF", dwFileAttributes=0x20) returned 1
	[0215.042] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.084] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0215.084] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003fe000, nNumberOfBytesToRead=0x18c4, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003fe000*, lpNumberOfBytesRead=0xc000169cec*=0x18c4, lpOverlapped=0x0) returned 1
	[0215.089] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0215.089] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020643a | out: pbBuffer=0xc00020643a) returned 1
	[0215.090] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f4c02 | out: pbBuffer=0xc0001f4c02) returned 1
	[0215.090] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f4c39 | out: pbBuffer=0xc0001f4c39) returned 1
	[0215.090] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0215.090] GetFileType (hFile=0xa8) returned 0x1
	[0215.090] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=6340) returned 1
	[0215.090] WriteFile (in: hFile=0xa8, lpBuffer=0xc000418000*, nNumberOfBytesToWrite=0x18c4, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc000418000*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x18c4, lpOverlapped=0xc0005d3ce8) returned 1
	[0215.091] GetFileType (hFile=0xa8) returned 0x1
	[0215.091] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18c4, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=6340) returned 1
	[0215.091] GetFileType (hFile=0xa8) returned 0x1
	[0215.091] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=6340) returned 1
	[0215.091] WriteFile (in: hFile=0xa8, lpBuffer=0xc000412700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc000412700*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x227, lpOverlapped=0xc0005d3ce8) returned 1
	[0215.092] GetFileType (hFile=0xa8) returned 0x1
	[0215.092] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18c4, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=6340) returned 1
	[0215.092] CloseHandle (hObject=0xa8) returned 1
	[0215.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf.egmwv")) returned 0x20
	[0215.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.098] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf")) returned 0x20
	[0215.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF", dwFileAttributes=0x20) returned 1
	[0215.116] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.137] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.143] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0215.143] ReadFile (in: hFile=0xe8, lpBuffer=0xc0001d7000, nNumberOfBytesToRead=0x40f8, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001d7000*, lpNumberOfBytesRead=0xc00016dcec*=0x40f8, lpOverlapped=0x0) returned 1
	[0215.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0215.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b644a | out: pbBuffer=0xc0002b644a) returned 1
	[0215.153] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1202 | out: pbBuffer=0xc0002c1202) returned 1
	[0215.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1292 | out: pbBuffer=0xc0002c1292) returned 1
	[0215.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c12e5 | out: pbBuffer=0xc0002c12e5) returned 1
	[0215.153] SetEvent (hEvent=0xe4) returned 1
	[0215.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0215.154] GetFileType (hFile=0xe8) returned 0x1
	[0215.154] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16632) returned 1
	[0215.154] WriteFile (in: hFile=0xe8, lpBuffer=0xc000336000*, nNumberOfBytesToWrite=0x40f8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000336000*, lpNumberOfBytesWritten=0xc000155ccc*=0x40f8, lpOverlapped=0xc000155ce8) returned 1
	[0215.154] GetFileType (hFile=0xe8) returned 0x1
	[0215.155] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x40f8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16632) returned 1
	[0215.155] GetFileType (hFile=0xe8) returned 0x1
	[0215.155] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16632) returned 1
	[0215.155] WriteFile (in: hFile=0xe8, lpBuffer=0xc00033e000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00033e000*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0215.155] GetFileType (hFile=0xe8) returned 0x1
	[0215.155] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x40f8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16632) returned 1
	[0215.156] CloseHandle (hObject=0xe8) returned 1
	[0215.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf.egmwv")) returned 0x20
	[0215.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.165] SwitchToThread () returned 1
	[0215.167] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.183] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.192] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.211] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.239] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.268] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.293] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.324] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.413] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.428] SetEvent (hEvent=0x120) returned 1
	[0215.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf")) returned 0x20
	[0215.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF", dwFileAttributes=0x20) returned 1
	[0215.430] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.459] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0215.459] ReadFile (in: hFile=0xe8, lpBuffer=0xc00013c000, nNumberOfBytesToRead=0x4b8, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00013c000*, lpNumberOfBytesRead=0xc0002d5cec*=0x4b8, lpOverlapped=0x0) returned 1
	[0215.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065b0 | out: pbBuffer=0xc0002065b0) returned 1
	[0215.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065ca | out: pbBuffer=0xc0002065ca) returned 1
	[0215.481] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1a02 | out: pbBuffer=0xc0002c1a02) returned 1
	[0215.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1a10 | out: pbBuffer=0xc0002c1a10) returned 1
	[0215.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1a66 | out: pbBuffer=0xc0002c1a66) returned 1
	[0215.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1ab5 | out: pbBuffer=0xc0002c1ab5) returned 1
	[0215.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065f0 | out: pbBuffer=0xc0002065f0) returned 1
	[0215.482] GetFileType (hFile=0xe8) returned 0x1
	[0215.482] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=1208) returned 1
	[0215.482] WriteFile (in: hFile=0xe8, lpBuffer=0xc000218000*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc000218000*, lpNumberOfBytesWritten=0xc000343ccc*=0x4b8, lpOverlapped=0xc000343ce8) returned 1
	[0215.482] GetFileType (hFile=0xe8) returned 0x1
	[0215.482] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4b8, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=1208) returned 1
	[0215.483] GetFileType (hFile=0xe8) returned 0x1
	[0215.483] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=1208) returned 1
	[0215.483] WriteFile (in: hFile=0xe8, lpBuffer=0xc00014a380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc00014a380*, lpNumberOfBytesWritten=0xc000343ccc*=0x227, lpOverlapped=0xc000343ce8) returned 1
	[0215.483] GetFileType (hFile=0xe8) returned 0x1
	[0215.483] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4b8, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=1208) returned 1
	[0215.483] CloseHandle (hObject=0xe8) returned 1
	[0215.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf.egmwv")) returned 0x20
	[0215.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.486] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.491] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.502] SetEvent (hEvent=0x120) returned 1
	[0215.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf")) returned 0x20
	[0215.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF", dwFileAttributes=0x20) returned 1
	[0215.505] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.539] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.539] ReadFile (in: hFile=0xe8, lpBuffer=0xc00024c000, nNumberOfBytesToRead=0x11e4, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesRead=0xc000389cec*=0x11e4, lpOverlapped=0x0) returned 1
	[0215.587] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b64c0 | out: pbBuffer=0xc0002b64c0) returned 1
	[0215.587] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00012d302 | out: pbBuffer=0xc00012d302) returned 1
	[0215.587] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6500 | out: pbBuffer=0xc0002b6500) returned 1
	[0215.588] SetEvent (hEvent=0x120) returned 1
	[0215.588] GetFileType (hFile=0xe8) returned 0x1
	[0215.588] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=4580) returned 1
	[0215.588] WriteFile (in: hFile=0xe8, lpBuffer=0xc000278000*, nNumberOfBytesToWrite=0x11e4, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc000278000*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x11e4, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.589] GetFileType (hFile=0xe8) returned 0x1
	[0215.589] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x11e4, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=4580) returned 1
	[0215.589] GetFileType (hFile=0xe8) returned 0x1
	[0215.589] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=4580) returned 1
	[0215.589] WriteFile (in: hFile=0xe8, lpBuffer=0xc000260700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc000260700*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x22a, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.590] GetFileType (hFile=0xe8) returned 0x1
	[0215.590] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x11e4, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=4580) returned 1
	[0215.590] CloseHandle (hObject=0xe8) returned 1
	[0215.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf.egmwv")) returned 0x20
	[0215.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.596] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.598] SetEvent (hEvent=0x120) returned 1
	[0215.598] SetEvent (hEvent=0xe4) returned 1
	[0215.598] SwitchToThread () returned 1
	[0215.600] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.604] SetEvent (hEvent=0xe4) returned 1
	[0215.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf")) returned 0x20
	[0215.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF", dwFileAttributes=0x20) returned 1
	[0215.605] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.636] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0215.636] ReadFile (in: hFile=0xa8, lpBuffer=0xc000270000, nNumberOfBytesToRead=0x3a28, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000270000*, lpNumberOfBytesRead=0xc00016dcec*=0x3a28, lpOverlapped=0x0) returned 1
	[0215.642] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0215.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b812a | out: pbBuffer=0xc0001b812a) returned 1
	[0215.643] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0215.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214fc9 | out: pbBuffer=0xc000214fc9) returned 1
	[0215.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0215.643] GetFileType (hFile=0xa8) returned 0x1
	[0215.643] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=14888) returned 1
	[0215.644] WriteFile (in: hFile=0xa8, lpBuffer=0xc000476000*, nNumberOfBytesToWrite=0x3a28, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000476000*, lpNumberOfBytesWritten=0xc000183ccc*=0x3a28, lpOverlapped=0xc000183ce8) returned 1
	[0215.645] GetFileType (hFile=0xa8) returned 0x1
	[0215.645] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3a28, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=14888) returned 1
	[0215.645] GetFileType (hFile=0xa8) returned 0x1
	[0215.645] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=14888) returned 1
	[0215.645] WriteFile (in: hFile=0xa8, lpBuffer=0xc000265500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000265500*, lpNumberOfBytesWritten=0xc000183ccc*=0x22a, lpOverlapped=0xc000183ce8) returned 1
	[0215.646] GetFileType (hFile=0xa8) returned 0x1
	[0215.646] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3a28, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=14888) returned 1
	[0215.646] CloseHandle (hObject=0xa8) returned 1
	[0215.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf.egmwv")) returned 0x20
	[0215.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.655] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf")) returned 0x20
	[0215.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF", dwFileAttributes=0x20) returned 1
	[0215.662] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.698] SetEvent (hEvent=0x70) returned 1
	[0215.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.699] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0215.700] ReadFile (in: hFile=0xcc, lpBuffer=0xc000160000, nNumberOfBytesToRead=0x794, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000160000*, lpNumberOfBytesRead=0xc00016bcec*=0x794, lpOverlapped=0x0) returned 1
	[0215.706] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0215.706] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001402 | out: pbBuffer=0xc000001402) returned 1
	[0215.706] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001434 | out: pbBuffer=0xc000001434) returned 1
	[0215.706] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000147f | out: pbBuffer=0xc00000147f) returned 1
	[0215.707] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0215.707] GetFileType (hFile=0xcc) returned 0x1
	[0215.707] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002f5ca0*=1940) returned 1
	[0215.707] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003d3000*, nNumberOfBytesToWrite=0x794, lpNumberOfBytesWritten=0xc0002f5ccc, lpOverlapped=0xc0002f5ce8 | out: lpBuffer=0xc0003d3000*, lpNumberOfBytesWritten=0xc0002f5ccc*=0x794, lpOverlapped=0xc0002f5ce8) returned 1
	[0215.708] GetFileType (hFile=0xcc) returned 0x1
	[0215.708] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x794, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002f5ca0*=1940) returned 1
	[0215.708] GetFileType (hFile=0xcc) returned 0x1
	[0215.708] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002f5ca0*=1940) returned 1
	[0215.708] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003c3500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0002f5ccc, lpOverlapped=0xc0002f5ce8 | out: lpBuffer=0xc0003c3500*, lpNumberOfBytesWritten=0xc0002f5ccc*=0x22a, lpOverlapped=0xc0002f5ce8) returned 1
	[0215.709] GetFileType (hFile=0xcc) returned 0x1
	[0215.709] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x794, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002f5ca0*=1940) returned 1
	[0215.709] CloseHandle (hObject=0xcc) returned 1
	[0215.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf.egmwv")) returned 0x20
	[0215.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.714] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.730] SetEvent (hEvent=0xe4) returned 1
	[0215.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf")) returned 0x20
	[0215.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF", dwFileAttributes=0x20) returned 1
	[0215.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.761] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.761] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000ea000, nNumberOfBytesToRead=0x1190, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ea000*, lpNumberOfBytesRead=0xc000389cec*=0x1190, lpOverlapped=0x0) returned 1
	[0215.767] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0215.767] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000402f02 | out: pbBuffer=0xc000402f02) returned 1
	[0215.767] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0215.767] GetFileType (hFile=0xe8) returned 0x1
	[0215.767] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=4496) returned 1
	[0215.767] WriteFile (in: hFile=0xe8, lpBuffer=0xc000104000*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc000104000*, lpNumberOfBytesWritten=0xc00017fccc*=0x1190, lpOverlapped=0xc00017fce8) returned 1
	[0215.768] GetFileType (hFile=0xe8) returned 0x1
	[0215.768] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1190, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=4496) returned 1
	[0215.768] GetFileType (hFile=0xe8) returned 0x1
	[0215.768] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=4496) returned 1
	[0215.768] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000fe700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0000fe700*, lpNumberOfBytesWritten=0xc00017fccc*=0x224, lpOverlapped=0xc00017fce8) returned 1
	[0215.769] GetFileType (hFile=0xe8) returned 0x1
	[0215.769] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1190, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=4496) returned 1
	[0215.769] CloseHandle (hObject=0xe8) returned 1
	[0215.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf.egmwv")) returned 0x20
	[0215.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.772] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.787] SetEvent (hEvent=0xe4) returned 1
	[0215.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf")) returned 0x20
	[0215.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF", dwFileAttributes=0x20) returned 1
	[0215.790] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.816] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.816] ReadFile (in: hFile=0xe8, lpBuffer=0xc0001e2000, nNumberOfBytesToRead=0x1ea8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesRead=0xc000389cec*=0x1ea8, lpOverlapped=0x0) returned 1
	[0215.821] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82a0 | out: pbBuffer=0xc0001b82a0) returned 1
	[0215.821] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215b02 | out: pbBuffer=0xc000215b02) returned 1
	[0215.822] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215b9e | out: pbBuffer=0xc000215b9e) returned 1
	[0215.822] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82e0 | out: pbBuffer=0xc0001b82e0) returned 1
	[0215.822] GetFileType (hFile=0xe8) returned 0x1
	[0215.822] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=7848) returned 1
	[0215.822] WriteFile (in: hFile=0xe8, lpBuffer=0xc000110000*, nNumberOfBytesToWrite=0x1ea8, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000110000*, lpNumberOfBytesWritten=0xc000183ccc*=0x1ea8, lpOverlapped=0xc000183ce8) returned 1
	[0215.823] GetFileType (hFile=0xe8) returned 0x1
	[0215.823] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1ea8, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=7848) returned 1
	[0215.823] GetFileType (hFile=0xe8) returned 0x1
	[0215.823] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=7848) returned 1
	[0215.824] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001eee00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc0001eee00*, lpNumberOfBytesWritten=0xc000183ccc*=0x22d, lpOverlapped=0xc000183ce8) returned 1
	[0215.824] GetFileType (hFile=0xe8) returned 0x1
	[0215.824] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1ea8, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=7848) returned 1
	[0215.824] CloseHandle (hObject=0xe8) returned 1
	[0215.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf.egmwv")) returned 0x20
	[0215.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.828] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf")) returned 0x20
	[0215.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF", dwFileAttributes=0x20) returned 1
	[0215.834] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.868] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.868] ReadFile (in: hFile=0xa8, lpBuffer=0xc000447000, nNumberOfBytesToRead=0xe78, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000447000*, lpNumberOfBytesRead=0xc000389cec*=0xe78, lpOverlapped=0x0) returned 1
	[0215.874] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6770 | out: pbBuffer=0xc0002b6770) returned 1
	[0215.874] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000114c02 | out: pbBuffer=0xc000114c02) returned 1
	[0215.874] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000114ccc | out: pbBuffer=0xc000114ccc) returned 1
	[0215.874] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67b0 | out: pbBuffer=0xc0002b67b0) returned 1
	[0215.875] GetFileType (hFile=0xa8) returned 0x1
	[0215.875] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=3704) returned 1
	[0215.875] WriteFile (in: hFile=0xa8, lpBuffer=0xc000224000*, nNumberOfBytesToWrite=0xe78, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc000224000*, lpNumberOfBytesWritten=0xc00017fccc*=0xe78, lpOverlapped=0xc00017fce8) returned 1
	[0215.875] GetFileType (hFile=0xa8) returned 0x1
	[0215.876] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe78, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=3704) returned 1
	[0215.876] GetFileType (hFile=0xa8) returned 0x1
	[0215.876] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=3704) returned 1
	[0215.876] WriteFile (in: hFile=0xa8, lpBuffer=0xc000457880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc000457880*, lpNumberOfBytesWritten=0xc00017fccc*=0x22d, lpOverlapped=0xc00017fce8) returned 1
	[0215.877] GetFileType (hFile=0xa8) returned 0x1
	[0215.877] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe78, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=3704) returned 1
	[0215.877] CloseHandle (hObject=0xa8) returned 1
	[0215.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf.egmwv")) returned 0x20
	[0215.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.881] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf")) returned 0x20
	[0215.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF", dwFileAttributes=0x20) returned 1
	[0215.890] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.935] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.935] ReadFile (in: hFile=0xcc, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x8f0c, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc000389cec*=0x8f0c, lpOverlapped=0x0) returned 1
	[0215.941] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0215.942] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0215.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394a5 | out: pbBuffer=0xc0000394a5) returned 1
	[0215.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0215.942] GetFileType (hFile=0xcc) returned 0x1
	[0215.943] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=36620) returned 1
	[0215.943] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002c2000*, nNumberOfBytesToWrite=0x8f0c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x8f0c, lpOverlapped=0xc000155ce8) returned 1
	[0215.944] GetFileType (hFile=0xcc) returned 0x1
	[0215.944] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x8f0c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=36620) returned 1
	[0215.944] GetFileType (hFile=0xcc) returned 0x1
	[0215.944] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=36620) returned 1
	[0215.945] WriteFile (in: hFile=0xcc, lpBuffer=0xc00023d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00023d500*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0215.945] GetFileType (hFile=0xcc) returned 0x1
	[0215.945] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x8f0c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=36620) returned 1
	[0215.945] CloseHandle (hObject=0xcc) returned 1
	[0215.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf.egmwv")) returned 0x20
	[0215.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.950] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf")) returned 0x20
	[0215.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF", dwFileAttributes=0x20) returned 1
	[0215.966] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.994] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0215.995] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x3c58, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc00016bcec*=0x3c58, lpOverlapped=0x0) returned 1
	[0216.000] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0216.000] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0216.000] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0216.000] GetFileType (hFile=0xa8) returned 0x1
	[0216.000] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=15448) returned 1
	[0216.000] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0x3c58, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc0004afccc*=0x3c58, lpOverlapped=0xc0004afce8) returned 1
	[0216.001] GetFileType (hFile=0xa8) returned 0x1
	[0216.001] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3c58, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=15448) returned 1
	[0216.001] GetFileType (hFile=0xa8) returned 0x1
	[0216.001] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=15448) returned 1
	[0216.001] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003ab500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0003ab500*, lpNumberOfBytesWritten=0xc0004afccc*=0x22d, lpOverlapped=0xc0004afce8) returned 1
	[0216.001] GetFileType (hFile=0xa8) returned 0x1
	[0216.002] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3c58, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=15448) returned 1
	[0216.002] CloseHandle (hObject=0xa8) returned 1
	[0216.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf.egmwv")) returned 0x20
	[0216.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.004] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.017] SetEvent (hEvent=0x144) returned 1
	[0216.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf")) returned 0x20
	[0216.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF", dwFileAttributes=0x20) returned 1
	[0216.020] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.046] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0216.046] ReadFile (in: hFile=0xcc, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x85d0, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc000429cec*=0x85d0, lpOverlapped=0x0) returned 1
	[0216.052] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82b0 | out: pbBuffer=0xc0001b82b0) returned 1
	[0216.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b82ca | out: pbBuffer=0xc0001b82ca) returned 1
	[0216.053] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1902 | out: pbBuffer=0xc0002c1902) returned 1
	[0216.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1914 | out: pbBuffer=0xc0002c1914) returned 1
	[0216.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c198b | out: pbBuffer=0xc0002c198b) returned 1
	[0216.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82f0 | out: pbBuffer=0xc0001b82f0) returned 1
	[0216.053] GetFileType (hFile=0xcc) returned 0x1
	[0216.054] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=34256) returned 1
	[0216.054] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x85d0, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc0004afccc*=0x85d0, lpOverlapped=0xc0004afce8) returned 1
	[0216.054] GetFileType (hFile=0xcc) returned 0x1
	[0216.055] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x85d0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=34256) returned 1
	[0216.055] GetFileType (hFile=0xcc) returned 0x1
	[0216.055] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=34256) returned 1
	[0216.055] WriteFile (in: hFile=0xcc, lpBuffer=0xc000110e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc000110e00*, lpNumberOfBytesWritten=0xc0004afccc*=0x22d, lpOverlapped=0xc0004afce8) returned 1
	[0216.055] GetFileType (hFile=0xcc) returned 0x1
	[0216.056] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x85d0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=34256) returned 1
	[0216.056] CloseHandle (hObject=0xcc) returned 1
	[0216.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf.egmwv")) returned 0x20
	[0216.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.058] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.062] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.065] SetEvent (hEvent=0x144) returned 1
	[0216.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf")) returned 0x20
	[0216.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF", dwFileAttributes=0x20) returned 1
	[0216.066] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.111] SetEvent (hEvent=0x70) returned 1
	[0216.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.113] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0216.113] ReadFile (in: hFile=0xa8, lpBuffer=0xc00038e000, nNumberOfBytesToRead=0x30f0, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00038e000*, lpNumberOfBytesRead=0xc00016dcec*=0x30f0, lpOverlapped=0x0) returned 1
	[0216.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8100 | out: pbBuffer=0xc0001b8100) returned 1
	[0216.120] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0216.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8140 | out: pbBuffer=0xc0001b8140) returned 1
	[0216.120] GetFileType (hFile=0xa8) returned 0x1
	[0216.120] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=12528) returned 1
	[0216.120] WriteFile (in: hFile=0xa8, lpBuffer=0xc000188000*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000188000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x30f0, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.121] GetFileType (hFile=0xa8) returned 0x1
	[0216.121] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30f0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=12528) returned 1
	[0216.121] GetFileType (hFile=0xa8) returned 0x1
	[0216.121] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=12528) returned 1
	[0216.121] WriteFile (in: hFile=0xa8, lpBuffer=0xc00045ea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00045ea80*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22a, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.122] GetFileType (hFile=0xa8) returned 0x1
	[0216.122] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30f0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=12528) returned 1
	[0216.122] CloseHandle (hObject=0xa8) returned 1
	[0216.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf.egmwv")) returned 0x20
	[0216.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.126] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf")) returned 0x20
	[0216.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF", dwFileAttributes=0x20) returned 1
	[0216.131] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.168] SetEvent (hEvent=0x70) returned 1
	[0216.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.170] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0216.170] ReadFile (in: hFile=0xe8, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x54d4, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc00016bcec*=0x54d4, lpOverlapped=0x0) returned 1
	[0216.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0216.176] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039602 | out: pbBuffer=0xc000039602) returned 1
	[0216.176] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0216.176] GetFileType (hFile=0xe8) returned 0x1
	[0216.177] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21716) returned 1
	[0216.177] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003ac000*, nNumberOfBytesToWrite=0x54d4, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003ac000*, lpNumberOfBytesWritten=0xc000155ccc*=0x54d4, lpOverlapped=0xc000155ce8) returned 1
	[0216.177] GetFileType (hFile=0xe8) returned 0x1
	[0216.178] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x54d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21716) returned 1
	[0216.178] GetFileType (hFile=0xe8) returned 0x1
	[0216.178] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21716) returned 1
	[0216.178] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002d1500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002d1500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0216.178] GetFileType (hFile=0xe8) returned 0x1
	[0216.178] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x54d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21716) returned 1
	[0216.179] CloseHandle (hObject=0xe8) returned 1
	[0216.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf.egmwv")) returned 0x20
	[0216.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.183] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf")) returned 0x20
	[0216.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF", dwFileAttributes=0x20) returned 1
	[0216.200] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.235] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0216.235] ReadFile (in: hFile=0xa8, lpBuffer=0xc00043a000, nNumberOfBytesToRead=0x48dc, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc00043a000*, lpNumberOfBytesRead=0xc000167cec*=0x48dc, lpOverlapped=0x0) returned 1
	[0216.241] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206440 | out: pbBuffer=0xc000206440) returned 1
	[0216.241] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000454e02 | out: pbBuffer=0xc000454e02) returned 1
	[0216.242] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206480 | out: pbBuffer=0xc000206480) returned 1
	[0216.242] GetFileType (hFile=0xa8) returned 0x1
	[0216.242] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=18652) returned 1
	[0216.242] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000fc000*, nNumberOfBytesToWrite=0x48dc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000fc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x48dc, lpOverlapped=0xc000155ce8) returned 1
	[0216.243] GetFileType (hFile=0xa8) returned 0x1
	[0216.243] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48dc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=18652) returned 1
	[0216.243] GetFileType (hFile=0xa8) returned 0x1
	[0216.243] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=18652) returned 1
	[0216.244] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000e2700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000e2700*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0216.244] GetFileType (hFile=0xa8) returned 0x1
	[0216.244] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48dc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=18652) returned 1
	[0216.244] CloseHandle (hObject=0xa8) returned 1
	[0216.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf.egmwv")) returned 0x20
	[0216.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.247] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.251] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.264] SetEvent (hEvent=0x124) returned 1
	[0216.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg")) returned 0x20
	[0216.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG", dwFileAttributes=0x20) returned 1
	[0216.267] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.296] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0216.296] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001f8000, nNumberOfBytesToRead=0xb594, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f8000*, lpNumberOfBytesRead=0xc000167cec*=0xb594, lpOverlapped=0x0) returned 1
	[0216.303] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0216.303] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d1a | out: pbBuffer=0xc000052d1a) returned 1
	[0216.303] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215f02 | out: pbBuffer=0xc000215f02) returned 1
	[0216.303] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0216.304] GetFileType (hFile=0xa8) returned 0x1
	[0216.304] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000251ca0*=46484) returned 1
	[0216.304] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002ee000*, nNumberOfBytesToWrite=0xb594, lpNumberOfBytesWritten=0xc000251ccc, lpOverlapped=0xc000251ce8 | out: lpBuffer=0xc0002ee000*, lpNumberOfBytesWritten=0xc000251ccc*=0xb594, lpOverlapped=0xc000251ce8) returned 1
	[0216.305] GetFileType (hFile=0xa8) returned 0x1
	[0216.305] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb594, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000251ca0*=46484) returned 1
	[0216.305] GetFileType (hFile=0xa8) returned 0x1
	[0216.305] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000251ca0*=46484) returned 1
	[0216.306] WriteFile (in: hFile=0xa8, lpBuffer=0xc00011ae00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000251ccc, lpOverlapped=0xc000251ce8 | out: lpBuffer=0xc00011ae00*, lpNumberOfBytesWritten=0xc000251ccc*=0x233, lpOverlapped=0xc000251ce8) returned 1
	[0216.306] GetFileType (hFile=0xa8) returned 0x1
	[0216.306] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb594, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000251ca0*=46484) returned 1
	[0216.306] CloseHandle (hObject=0xa8) returned 1
	[0216.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.egmwv")) returned 0x20
	[0216.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.308] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.312] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.315] SetEvent (hEvent=0x124) returned 1
	[0216.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf")) returned 0x20
	[0216.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x20) returned 1
	[0216.317] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.354] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0216.354] ReadFile (in: hFile=0xcc, lpBuffer=0xc00016e000, nNumberOfBytesToRead=0x1ae8, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesRead=0xc000169cec*=0x1ae8, lpOverlapped=0x0) returned 1
	[0216.360] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0216.360] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0216.360] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214802 | out: pbBuffer=0xc000214802) returned 1
	[0216.361] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021482d | out: pbBuffer=0xc00021482d) returned 1
	[0216.361] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0216.361] GetFileType (hFile=0xcc) returned 0x1
	[0216.361] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=6888) returned 1
	[0216.361] WriteFile (in: hFile=0xcc, lpBuffer=0xc00017e000*, nNumberOfBytesToWrite=0x1ae8, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00017e000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x1ae8, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.362] GetFileType (hFile=0xcc) returned 0x1
	[0216.362] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1ae8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=6888) returned 1
	[0216.362] GetFileType (hFile=0xcc) returned 0x1
	[0216.362] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=6888) returned 1
	[0216.363] WriteFile (in: hFile=0xcc, lpBuffer=0xc000316700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000316700*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22d, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.363] GetFileType (hFile=0xcc) returned 0x1
	[0216.363] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1ae8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=6888) returned 1
	[0216.363] CloseHandle (hObject=0xcc) returned 1
	[0216.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf.egmwv")) returned 0x20
	[0216.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.369] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf")) returned 0x20
	[0216.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x20) returned 1
	[0216.375] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.416] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0216.416] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003a6000, nNumberOfBytesToRead=0x3198, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a6000*, lpNumberOfBytesRead=0xc000169cec*=0x3198, lpOverlapped=0x0) returned 1
	[0216.422] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8440 | out: pbBuffer=0xc0001b8440) returned 1
	[0216.422] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1802 | out: pbBuffer=0xc0002c1802) returned 1
	[0216.422] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8480 | out: pbBuffer=0xc0001b8480) returned 1
	[0216.422] GetFileType (hFile=0xa8) returned 0x1
	[0216.422] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12696) returned 1
	[0216.423] WriteFile (in: hFile=0xa8, lpBuffer=0xc00035a000*, nNumberOfBytesToWrite=0x3198, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00035a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3198, lpOverlapped=0xc000155ce8) returned 1
	[0216.423] GetFileType (hFile=0xa8) returned 0x1
	[0216.423] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3198, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12696) returned 1
	[0216.423] GetFileType (hFile=0xa8) returned 0x1
	[0216.423] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12696) returned 1
	[0216.424] WriteFile (in: hFile=0xa8, lpBuffer=0xc000354e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000354e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0216.424] GetFileType (hFile=0xa8) returned 0x1
	[0216.424] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3198, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12696) returned 1
	[0216.424] CloseHandle (hObject=0xa8) returned 1
	[0216.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf.egmwv")) returned 0x20
	[0216.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.427] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf")) returned 0x20
	[0216.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x20) returned 1
	[0216.442] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.493] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0216.493] ReadFile (in: hFile=0xa8, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x13ec, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000169cec*=0x13ec, lpOverlapped=0x0) returned 1
	[0216.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6420 | out: pbBuffer=0xc0002b6420) returned 1
	[0216.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b643a | out: pbBuffer=0xc0002b643a) returned 1
	[0216.500] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a4d02 | out: pbBuffer=0xc0002a4d02) returned 1
	[0216.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a4d40 | out: pbBuffer=0xc0002a4d40) returned 1
	[0216.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a4d54 | out: pbBuffer=0xc0002a4d54) returned 1
	[0216.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6460 | out: pbBuffer=0xc0002b6460) returned 1
	[0216.500] GetFileType (hFile=0xa8) returned 0x1
	[0216.500] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=5100) returned 1
	[0216.501] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000c6000*, nNumberOfBytesToWrite=0x13ec, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0000c6000*, lpNumberOfBytesWritten=0xc0004afccc*=0x13ec, lpOverlapped=0xc0004afce8) returned 1
	[0216.501] GetFileType (hFile=0xa8) returned 0x1
	[0216.501] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x13ec, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=5100) returned 1
	[0216.501] GetFileType (hFile=0xa8) returned 0x1
	[0216.501] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=5100) returned 1
	[0216.502] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000c0700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0000c0700*, lpNumberOfBytesWritten=0xc0004afccc*=0x230, lpOverlapped=0xc0004afce8) returned 1
	[0216.502] GetFileType (hFile=0xa8) returned 0x1
	[0216.502] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x13ec, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=5100) returned 1
	[0216.502] CloseHandle (hObject=0xa8) returned 1
	[0216.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf.egmwv")) returned 0x20
	[0216.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.504] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.522] SetEvent (hEvent=0x90) returned 1
	[0216.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg")) returned 0x20
	[0216.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x20) returned 1
	[0216.523] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.550] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0216.550] ReadFile (in: hFile=0xa8, lpBuffer=0xc000454000, nNumberOfBytesToRead=0x38d8, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000454000*, lpNumberOfBytesRead=0xc000169cec*=0x38d8, lpOverlapped=0x0) returned 1
	[0216.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068f0 | out: pbBuffer=0xc0002068f0) returned 1
	[0216.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020690a | out: pbBuffer=0xc00020690a) returned 1
	[0216.557] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002ffa02 | out: pbBuffer=0xc0002ffa02) returned 1
	[0216.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002ffa5d | out: pbBuffer=0xc0002ffa5d) returned 1
	[0216.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002ffa6c | out: pbBuffer=0xc0002ffa6c) returned 1
	[0216.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206930 | out: pbBuffer=0xc000206930) returned 1
	[0216.557] GetFileType (hFile=0xa8) returned 0x1
	[0216.558] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=14552) returned 1
	[0216.558] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001ea000*, nNumberOfBytesToWrite=0x38d8, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0001ea000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x38d8, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.558] GetFileType (hFile=0xa8) returned 0x1
	[0216.558] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38d8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=14552) returned 1
	[0216.559] GetFileType (hFile=0xa8) returned 0x1
	[0216.559] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=14552) returned 1
	[0216.559] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001daa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0001daa80*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22d, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.559] GetFileType (hFile=0xa8) returned 0x1
	[0216.559] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38d8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=14552) returned 1
	[0216.560] CloseHandle (hObject=0xa8) returned 1
	[0216.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.egmwv")) returned 0x20
	[0216.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.564] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.588] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.592] SetEvent (hEvent=0x90) returned 1
	[0216.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg")) returned 0x20
	[0216.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x20) returned 1
	[0216.594] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.629] SetEvent (hEvent=0x70) returned 1
	[0216.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.631] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0216.631] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x907d, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc0002d3cec*=0x907d, lpOverlapped=0x0) returned 1
	[0216.636] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8100 | out: pbBuffer=0xc0001b8100) returned 1
	[0216.636] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b811a | out: pbBuffer=0xc0001b811a) returned 1
	[0216.636] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0216.636] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d68 | out: pbBuffer=0xc000214d68) returned 1
	[0216.636] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8140 | out: pbBuffer=0xc0001b8140) returned 1
	[0216.637] GetFileType (hFile=0xe8) returned 0x1
	[0216.637] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=36989) returned 1
	[0216.637] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x907d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc000155ccc*=0x907d, lpOverlapped=0xc000155ce8) returned 1
	[0216.638] GetFileType (hFile=0xe8) returned 0x1
	[0216.638] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x907d, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=36989) returned 1
	[0216.638] GetFileType (hFile=0xe8) returned 0x1
	[0216.638] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=36989) returned 1
	[0216.638] WriteFile (in: hFile=0xe8, lpBuffer=0xc000284e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000284e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0216.638] GetFileType (hFile=0xe8) returned 0x1
	[0216.639] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x907d, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=36989) returned 1
	[0216.639] CloseHandle (hObject=0xe8) returned 1
	[0216.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.egmwv")) returned 0x20
	[0216.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.642] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.655] SetEvent (hEvent=0x104) returned 1
	[0216.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg")) returned 0x20
	[0216.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x20) returned 1
	[0216.656] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.686] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0216.686] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003e6000, nNumberOfBytesToRead=0x5de2, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesRead=0xc000389cec*=0x5de2, lpOverlapped=0x0) returned 1
	[0216.691] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82a0 | out: pbBuffer=0xc0001b82a0) returned 1
	[0216.691] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0216.691] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82e0 | out: pbBuffer=0xc0001b82e0) returned 1
	[0216.692] GetFileType (hFile=0xa8) returned 0x1
	[0216.692] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24034) returned 1
	[0216.692] WriteFile (in: hFile=0xa8, lpBuffer=0xc000408000*, nNumberOfBytesToWrite=0x5de2, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000408000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5de2, lpOverlapped=0xc000155ce8) returned 1
	[0216.693] GetFileType (hFile=0xa8) returned 0x1
	[0216.693] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5de2, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24034) returned 1
	[0216.693] GetFileType (hFile=0xa8) returned 0x1
	[0216.693] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24034) returned 1
	[0216.693] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001b0700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001b0700*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0216.694] GetFileType (hFile=0xa8) returned 0x1
	[0216.694] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5de2, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24034) returned 1
	[0216.694] CloseHandle (hObject=0xa8) returned 1
	[0216.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.egmwv")) returned 0x20
	[0216.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.695] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.707] SetEvent (hEvent=0x104) returned 1
	[0216.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg")) returned 0x20
	[0216.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x20) returned 1
	[0216.710] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.739] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0216.739] ReadFile (in: hFile=0xa8, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0x8a0c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc0002d7cec*=0x8a0c, lpOverlapped=0x0) returned 1
	[0216.745] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8420 | out: pbBuffer=0xc0001b8420) returned 1
	[0216.745] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ee602 | out: pbBuffer=0xc0000ee602) returned 1
	[0216.745] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000ee60d | out: pbBuffer=0xc0000ee60d) returned 1
	[0216.745] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8460 | out: pbBuffer=0xc0001b8460) returned 1
	[0216.746] GetFileType (hFile=0xa8) returned 0x1
	[0216.746] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=35340) returned 1
	[0216.746] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004da000*, nNumberOfBytesToWrite=0x8a0c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004da000*, lpNumberOfBytesWritten=0xc000155ccc*=0x8a0c, lpOverlapped=0xc000155ce8) returned 1
	[0216.747] GetFileType (hFile=0xa8) returned 0x1
	[0216.747] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8a0c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=35340) returned 1
	[0216.747] GetFileType (hFile=0xa8) returned 0x1
	[0216.747] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=35340) returned 1
	[0216.747] WriteFile (in: hFile=0xa8, lpBuffer=0xc00010a000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00010a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0216.748] GetFileType (hFile=0xa8) returned 0x1
	[0216.748] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8a0c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=35340) returned 1
	[0216.748] CloseHandle (hObject=0xa8) returned 1
	[0216.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.egmwv")) returned 0x20
	[0216.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.750] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.753] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.756] SetEvent (hEvent=0x104) returned 1
	[0216.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf")) returned 0x20
	[0216.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x20) returned 1
	[0216.757] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.793] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0216.793] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001fe000, nNumberOfBytesToRead=0x5f48, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001fe000*, lpNumberOfBytesRead=0xc0002d5cec*=0x5f48, lpOverlapped=0x0) returned 1
	[0216.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ce0 | out: pbBuffer=0xc000052ce0) returned 1
	[0216.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052cfa | out: pbBuffer=0xc000052cfa) returned 1
	[0216.799] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039c02 | out: pbBuffer=0xc000039c02) returned 1
	[0216.800] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039c71 | out: pbBuffer=0xc000039c71) returned 1
	[0216.800] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0216.800] GetFileType (hFile=0xcc) returned 0x1
	[0216.800] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24392) returned 1
	[0216.801] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x5f48, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5f48, lpOverlapped=0xc000155ce8) returned 1
	[0216.801] GetFileType (hFile=0xcc) returned 0x1
	[0216.801] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5f48, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24392) returned 1
	[0216.801] GetFileType (hFile=0xcc) returned 0x1
	[0216.801] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24392) returned 1
	[0216.802] WriteFile (in: hFile=0xcc, lpBuffer=0xc000455180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000455180*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0216.802] GetFileType (hFile=0xcc) returned 0x1
	[0216.802] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5f48, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24392) returned 1
	[0216.802] CloseHandle (hObject=0xcc) returned 1
	[0216.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf.egmwv")) returned 0x20
	[0216.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.807] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf")) returned 0x20
	[0216.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x20) returned 1
	[0216.812] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.847] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0216.847] ReadFile (in: hFile=0xe8, lpBuffer=0xc00036e000, nNumberOfBytesToRead=0x3ed2, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00036e000*, lpNumberOfBytesRead=0xc00038dcec*=0x3ed2, lpOverlapped=0x0) returned 1
	[0216.853] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e70 | out: pbBuffer=0xc000052e70) returned 1
	[0216.853] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000468b02 | out: pbBuffer=0xc000468b02) returned 1
	[0216.853] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0216.853] GetFileType (hFile=0xe8) returned 0x1
	[0216.853] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16082) returned 1
	[0216.854] WriteFile (in: hFile=0xe8, lpBuffer=0xc000440000*, nNumberOfBytesToWrite=0x3ed2, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000440000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3ed2, lpOverlapped=0xc000155ce8) returned 1
	[0216.854] GetFileType (hFile=0xe8) returned 0x1
	[0216.854] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3ed2, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16082) returned 1
	[0216.854] GetFileType (hFile=0xe8) returned 0x1
	[0216.854] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16082) returned 1
	[0216.854] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003a6a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003a6a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0216.855] GetFileType (hFile=0xe8) returned 0x1
	[0216.855] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3ed2, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16082) returned 1
	[0216.855] CloseHandle (hObject=0xe8) returned 1
	[0216.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf.egmwv")) returned 0x20
	[0216.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.858] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf")) returned 0x20
	[0216.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x20) returned 1
	[0216.875] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.901] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00038bcc4 | out: lpMode=0xc00038bcc4) returned 0
	[0216.901] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000fa000, nNumberOfBytesToRead=0x5f6e, lpNumberOfBytesRead=0xc00038bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000fa000*, lpNumberOfBytesRead=0xc00038bcec*=0x5f6e, lpOverlapped=0x0) returned 1
	[0216.919] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8120 | out: pbBuffer=0xc0001b8120) returned 1
	[0216.919] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001502 | out: pbBuffer=0xc000001502) returned 1
	[0216.919] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000153f | out: pbBuffer=0xc00000153f) returned 1
	[0216.919] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000015e4 | out: pbBuffer=0xc0000015e4) returned 1
	[0216.919] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8160 | out: pbBuffer=0xc0001b8160) returned 1
	[0216.919] GetFileType (hFile=0xcc) returned 0x1
	[0216.920] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001efca0*=24430) returned 1
	[0216.920] WriteFile (in: hFile=0xcc, lpBuffer=0xc000144000*, nNumberOfBytesToWrite=0x5f6e, lpNumberOfBytesWritten=0xc0001efccc, lpOverlapped=0xc0001efce8 | out: lpBuffer=0xc000144000*, lpNumberOfBytesWritten=0xc0001efccc*=0x5f6e, lpOverlapped=0xc0001efce8) returned 1
	[0216.921] GetFileType (hFile=0xcc) returned 0x1
	[0216.921] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5f6e, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001efca0*=24430) returned 1
	[0216.921] GetFileType (hFile=0xcc) returned 0x1
	[0216.921] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001efca0*=24430) returned 1
	[0216.921] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001f7500*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc0001efccc, lpOverlapped=0xc0001efce8 | out: lpBuffer=0xc0001f7500*, lpNumberOfBytesWritten=0xc0001efccc*=0x239, lpOverlapped=0xc0001efce8) returned 1
	[0216.922] GetFileType (hFile=0xcc) returned 0x1
	[0216.922] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5f6e, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001efca0*=24430) returned 1
	[0216.922] CloseHandle (hObject=0xcc) returned 1
	[0216.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf.egmwv")) returned 0x20
	[0216.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.931] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.948] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.971] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.982] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.994] SetEvent (hEvent=0x104) returned 1
	[0216.994] SetEvent (hEvent=0x144) returned 1
	[0216.994] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0216.996] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.997] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0216.998] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.999] SetEvent (hEvent=0x120) returned 1
	[0216.999] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0217.001] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.002] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.177] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.181] SetEvent (hEvent=0x104) returned 1
	[0217.181] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.185] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.197] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.211] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.229] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.242] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.263] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.281] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.298] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.310] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.337] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.356] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.370] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.495] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.507] SetEvent (hEvent=0x104) returned 1
	[0217.507] SetEvent (hEvent=0x144) returned 1
	[0217.507] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x0
	[0217.510] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x0
	[0217.511] SetEvent (hEvent=0x120) returned 1
	[0217.511] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0x1) returned 0x102
	[0217.515] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.515] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.967] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.968] SetEvent (hEvent=0x104) returned 1
	[0217.969] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.970] SetEvent (hEvent=0x104) returned 1
	[0217.970] SwitchToThread () returned 1
	[0217.972] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0217.984] SetEvent (hEvent=0x104) returned 1
	[0217.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf")) returned 0x20
	[0217.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x20) returned 1
	[0217.986] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.015] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0218.015] ReadFile (in: hFile=0xcc, lpBuffer=0xc0004ac000, nNumberOfBytesToRead=0x73a2, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesRead=0xc0002d5cec*=0x73a2, lpOverlapped=0x0) returned 1
	[0218.022] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6120 | out: pbBuffer=0xc0002b6120) returned 1
	[0218.022] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b613a | out: pbBuffer=0xc0002b613a) returned 1
	[0218.022] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0218.022] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039433 | out: pbBuffer=0xc000039433) returned 1
	[0218.022] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6160 | out: pbBuffer=0xc0002b6160) returned 1
	[0218.023] GetFileType (hFile=0xcc) returned 0x1
	[0218.023] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=29602) returned 1
	[0218.023] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000d4000*, nNumberOfBytesToWrite=0x73a2, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesWritten=0xc000469ccc*=0x73a2, lpOverlapped=0xc000469ce8) returned 1
	[0218.024] GetFileType (hFile=0xcc) returned 0x1
	[0218.024] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x73a2, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=29602) returned 1
	[0218.024] GetFileType (hFile=0xcc) returned 0x1
	[0218.024] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=29602) returned 1
	[0218.025] WriteFile (in: hFile=0xcc, lpBuffer=0xc00026f500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc00026f500*, lpNumberOfBytesWritten=0xc000469ccc*=0x230, lpOverlapped=0xc000469ce8) returned 1
	[0218.025] GetFileType (hFile=0xcc) returned 0x1
	[0218.025] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x73a2, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=29602) returned 1
	[0218.025] CloseHandle (hObject=0xcc) returned 1
	[0218.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf.egmwv")) returned 0x20
	[0218.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.027] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.031] SetEvent (hEvent=0x104) returned 1
	[0218.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf")) returned 0x20
	[0218.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x20) returned 1
	[0218.034] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0218.074] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0218.074] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001e2000, nNumberOfBytesToRead=0x11b6, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesRead=0xc0002d5cec*=0x11b6, lpOverlapped=0x0) returned 1
	[0218.082] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8450 | out: pbBuffer=0xc0001d8450) returned 1
	[0218.082] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d846a | out: pbBuffer=0xc0001d846a) returned 1
	[0218.082] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000000d02 | out: pbBuffer=0xc000000d02) returned 1
	[0218.082] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000000dce | out: pbBuffer=0xc000000dce) returned 1
	[0218.083] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8490 | out: pbBuffer=0xc0001d8490) returned 1
	[0218.083] GetFileType (hFile=0xa8) returned 0x1
	[0218.083] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4534) returned 1
	[0218.083] WriteFile (in: hFile=0xa8, lpBuffer=0xc000360000*, nNumberOfBytesToWrite=0x11b6, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000360000*, lpNumberOfBytesWritten=0xc000155ccc*=0x11b6, lpOverlapped=0xc000155ce8) returned 1
	[0218.084] GetFileType (hFile=0xa8) returned 0x1
	[0218.084] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x11b6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4534) returned 1
	[0218.084] GetFileType (hFile=0xa8) returned 0x1
	[0218.084] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4534) returned 1
	[0218.085] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001f2000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0218.085] GetFileType (hFile=0xa8) returned 0x1
	[0218.085] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x11b6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4534) returned 1
	[0218.085] CloseHandle (hObject=0xa8) returned 1
	[0218.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf.egmwv")) returned 0x20
	[0218.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.089] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf")) returned 0x20
	[0218.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x20) returned 1
	[0218.095] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.129] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0218.129] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x5350, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc0002d5cec*=0x5350, lpOverlapped=0x0) returned 1
	[0218.136] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b85c0 | out: pbBuffer=0xc0001b85c0) returned 1
	[0218.136] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b85da | out: pbBuffer=0xc0001b85da) returned 1
	[0218.136] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000bb202 | out: pbBuffer=0xc0000bb202) returned 1
	[0218.136] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bb2a6 | out: pbBuffer=0xc0000bb2a6) returned 1
	[0218.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8600 | out: pbBuffer=0xc0001b8600) returned 1
	[0218.137] GetFileType (hFile=0xe8) returned 0x1
	[0218.138] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=21328) returned 1
	[0218.138] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003ca000*, nNumberOfBytesToWrite=0x5350, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0003ca000*, lpNumberOfBytesWritten=0xc000465ccc*=0x5350, lpOverlapped=0xc000465ce8) returned 1
	[0218.138] GetFileType (hFile=0xe8) returned 0x1
	[0218.138] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5350, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=21328) returned 1
	[0218.139] GetFileType (hFile=0xe8) returned 0x1
	[0218.139] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=21328) returned 1
	[0218.139] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003d2000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0003d2000*, lpNumberOfBytesWritten=0xc000465ccc*=0x22a, lpOverlapped=0xc000465ce8) returned 1
	[0218.139] GetFileType (hFile=0xe8) returned 0x1
	[0218.139] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5350, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=21328) returned 1
	[0218.139] CloseHandle (hObject=0xe8) returned 1
	[0218.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf.egmwv")) returned 0x20
	[0218.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.144] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.157] SetEvent (hEvent=0x104) returned 1
	[0218.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf")) returned 0x20
	[0218.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x20) returned 1
	[0218.159] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.186] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0000f5cc4 | out: lpMode=0xc0000f5cc4) returned 0
	[0218.186] ReadFile (in: hFile=0xe8, lpBuffer=0xc000116000, nNumberOfBytesToRead=0xbbc, lpNumberOfBytesRead=0xc0000f5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000116000*, lpNumberOfBytesRead=0xc0000f5cec*=0xbbc, lpOverlapped=0x0) returned 1
	[0218.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8750 | out: pbBuffer=0xc0001b8750) returned 1
	[0218.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b876a | out: pbBuffer=0xc0001b876a) returned 1
	[0218.193] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000bbf02 | out: pbBuffer=0xc0000bbf02) returned 1
	[0218.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bbfdb | out: pbBuffer=0xc0000bbfdb) returned 1
	[0218.194] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8790 | out: pbBuffer=0xc0001b8790) returned 1
	[0218.194] SetEvent (hEvent=0x104) returned 1
	[0218.194] GetFileType (hFile=0xe8) returned 0x1
	[0218.194] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=3004) returned 1
	[0218.194] WriteFile (in: hFile=0xe8, lpBuffer=0xc000134000*, nNumberOfBytesToWrite=0xbbc, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc000134000*, lpNumberOfBytesWritten=0xc000465ccc*=0xbbc, lpOverlapped=0xc000465ce8) returned 1
	[0218.195] GetFileType (hFile=0xe8) returned 0x1
	[0218.195] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbbc, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=3004) returned 1
	[0218.195] GetFileType (hFile=0xe8) returned 0x1
	[0218.195] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=3004) returned 1
	[0218.195] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003d3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0003d3880*, lpNumberOfBytesWritten=0xc000465ccc*=0x230, lpOverlapped=0xc000465ce8) returned 1
	[0218.196] GetFileType (hFile=0xe8) returned 0x1
	[0218.196] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbbc, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=3004) returned 1
	[0218.196] CloseHandle (hObject=0xe8) returned 1
	[0218.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf.egmwv")) returned 0x20
	[0218.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.202] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.204] SetEvent (hEvent=0x104) returned 1
	[0218.204] SetEvent (hEvent=0x120) returned 1
	[0218.204] SwitchToThread () returned 1
	[0218.205] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.218] SetEvent (hEvent=0x120) returned 1
	[0218.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf")) returned 0x20
	[0218.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x20) returned 1
	[0218.220] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.244] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0218.244] ReadFile (in: hFile=0xe8, lpBuffer=0xc000074000, nNumberOfBytesToRead=0xef2, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000074000*, lpNumberOfBytesRead=0xc000423cec*=0xef2, lpOverlapped=0x0) returned 1
	[0218.250] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0218.250] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039502 | out: pbBuffer=0xc000039502) returned 1
	[0218.250] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039578 | out: pbBuffer=0xc000039578) returned 1
	[0218.250] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000395c9 | out: pbBuffer=0xc0000395c9) returned 1
	[0218.250] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0218.250] GetFileType (hFile=0xe8) returned 0x1
	[0218.250] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00012dca0*=3826) returned 1
	[0218.251] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0xef2, lpNumberOfBytesWritten=0xc00012dccc, lpOverlapped=0xc00012dce8 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc00012dccc*=0xef2, lpOverlapped=0xc00012dce8) returned 1
	[0218.251] GetFileType (hFile=0xe8) returned 0x1
	[0218.251] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xef2, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00012dca0*=3826) returned 1
	[0218.251] GetFileType (hFile=0xe8) returned 0x1
	[0218.251] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00012dca0*=3826) returned 1
	[0218.252] WriteFile (in: hFile=0xe8, lpBuffer=0xc00028b500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00012dccc, lpOverlapped=0xc00012dce8 | out: lpBuffer=0xc00028b500*, lpNumberOfBytesWritten=0xc00012dccc*=0x230, lpOverlapped=0xc00012dce8) returned 1
	[0218.252] GetFileType (hFile=0xe8) returned 0x1
	[0218.252] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xef2, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00012dca0*=3826) returned 1
	[0218.253] CloseHandle (hObject=0xe8) returned 1
	[0218.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf.egmwv")) returned 0x20
	[0218.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.259] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf")) returned 0x20
	[0218.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x20) returned 1
	[0218.265] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0218.310] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0218.310] ReadFile (in: hFile=0xa8, lpBuffer=0xc000308000, nNumberOfBytesToRead=0x164c, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000308000*, lpNumberOfBytesRead=0xc000423cec*=0x164c, lpOverlapped=0x0) returned 1
	[0218.315] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8410 | out: pbBuffer=0xc0001b8410) returned 1
	[0218.315] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b842a | out: pbBuffer=0xc0001b842a) returned 1
	[0218.315] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a6902 | out: pbBuffer=0xc0002a6902) returned 1
	[0218.315] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8450 | out: pbBuffer=0xc0001b8450) returned 1
	[0218.316] GetFileType (hFile=0xa8) returned 0x1
	[0218.316] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5708) returned 1
	[0218.316] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002e2000*, nNumberOfBytesToWrite=0x164c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002e2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x164c, lpOverlapped=0xc000155ce8) returned 1
	[0218.316] GetFileType (hFile=0xa8) returned 0x1
	[0218.316] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x164c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5708) returned 1
	[0218.317] GetFileType (hFile=0xa8) returned 0x1
	[0218.317] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5708) returned 1
	[0218.317] WriteFile (in: hFile=0xa8, lpBuffer=0xc000354a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000354a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0218.317] GetFileType (hFile=0xa8) returned 0x1
	[0218.317] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x164c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5708) returned 1
	[0218.317] CloseHandle (hObject=0xa8) returned 1
	[0218.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf.egmwv")) returned 0x20
	[0218.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.319] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf")) returned 0x20
	[0218.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x20) returned 1
	[0218.336] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.365] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002f3cc4 | out: lpMode=0xc0002f3cc4) returned 0
	[0218.365] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x849c, lpNumberOfBytesRead=0xc0002f3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc0002f3cec*=0x849c, lpOverlapped=0x0) returned 1
	[0218.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8290 | out: pbBuffer=0xc0001d8290) returned 1
	[0218.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d82aa | out: pbBuffer=0xc0001d82aa) returned 1
	[0218.372] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000129802 | out: pbBuffer=0xc000129802) returned 1
	[0218.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001298a4 | out: pbBuffer=0xc0001298a4) returned 1
	[0218.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82d0 | out: pbBuffer=0xc0001d82d0) returned 1
	[0218.372] GetFileType (hFile=0xcc) returned 0x1
	[0218.372] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001e1ca0*=33948) returned 1
	[0218.373] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003bc000*, nNumberOfBytesToWrite=0x849c, lpNumberOfBytesWritten=0xc0001e1ccc, lpOverlapped=0xc0001e1ce8 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesWritten=0xc0001e1ccc*=0x849c, lpOverlapped=0xc0001e1ce8) returned 1
	[0218.373] GetFileType (hFile=0xcc) returned 0x1
	[0218.373] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x849c, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001e1ca0*=33948) returned 1
	[0218.374] GetFileType (hFile=0xcc) returned 0x1
	[0218.374] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001e1ca0*=33948) returned 1
	[0218.374] WriteFile (in: hFile=0xcc, lpBuffer=0xc00026ce00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001e1ccc, lpOverlapped=0xc0001e1ce8 | out: lpBuffer=0xc00026ce00*, lpNumberOfBytesWritten=0xc0001e1ccc*=0x22d, lpOverlapped=0xc0001e1ce8) returned 1
	[0218.374] GetFileType (hFile=0xcc) returned 0x1
	[0218.374] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x849c, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001e1ca0*=33948) returned 1
	[0218.374] CloseHandle (hObject=0xcc) returned 1
	[0218.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf.egmwv")) returned 0x20
	[0218.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.377] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.387] SetEvent (hEvent=0x120) returned 1
	[0218.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf")) returned 0x20
	[0218.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x20) returned 1
	[0218.394] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0218.425] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002efcc4 | out: lpMode=0xc0002efcc4) returned 0
	[0218.425] ReadFile (in: hFile=0xa8, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x6624, lpNumberOfBytesRead=0xc0002efcec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc0002efcec*=0x6624, lpOverlapped=0x0) returned 1
	[0218.431] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0218.431] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a6802 | out: pbBuffer=0xc0002a6802) returned 1
	[0218.431] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a6863 | out: pbBuffer=0xc0002a6863) returned 1
	[0218.431] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0218.432] GetFileType (hFile=0xa8) returned 0x1
	[0218.432] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=26148) returned 1
	[0218.432] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004a0000*, nNumberOfBytesToWrite=0x6624, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004a0000*, lpNumberOfBytesWritten=0xc000155ccc*=0x6624, lpOverlapped=0xc000155ce8) returned 1
	[0218.433] GetFileType (hFile=0xa8) returned 0x1
	[0218.433] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x6624, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=26148) returned 1
	[0218.433] GetFileType (hFile=0xa8) returned 0x1
	[0218.433] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=26148) returned 1
	[0218.433] WriteFile (in: hFile=0xa8, lpBuffer=0xc000333880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000333880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0218.433] GetFileType (hFile=0xa8) returned 0x1
	[0218.433] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x6624, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=26148) returned 1
	[0218.433] CloseHandle (hObject=0xa8) returned 1
	[0218.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf.egmwv")) returned 0x20
	[0218.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.435] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.438] SetEvent (hEvent=0x90) returned 1
	[0218.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf")) returned 0x20
	[0218.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x20) returned 1
	[0218.439] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.971] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002f3cc4 | out: lpMode=0xc0002f3cc4) returned 0
	[0218.971] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0xa520, lpNumberOfBytesRead=0xc0002f3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc0002f3cec*=0xa520, lpOverlapped=0x0) returned 1
	[0218.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8290 | out: pbBuffer=0xc0001b8290) returned 1
	[0218.979] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a7702 | out: pbBuffer=0xc0002a7702) returned 1
	[0218.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a77e3 | out: pbBuffer=0xc0002a77e3) returned 1
	[0218.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82d0 | out: pbBuffer=0xc0001b82d0) returned 1
	[0218.980] GetFileType (hFile=0xe8) returned 0x1
	[0218.980] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=42272) returned 1
	[0218.980] WriteFile (in: hFile=0xe8, lpBuffer=0xc000352000*, nNumberOfBytesToWrite=0xa520, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000352000*, lpNumberOfBytesWritten=0xc0000dbccc*=0xa520, lpOverlapped=0xc0000dbce8) returned 1
	[0218.982] GetFileType (hFile=0xe8) returned 0x1
	[0218.982] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xa520, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=42272) returned 1
	[0218.982] GetFileType (hFile=0xe8) returned 0x1
	[0218.982] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=42272) returned 1
	[0218.982] WriteFile (in: hFile=0xe8, lpBuffer=0xc000191180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000191180*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22a, lpOverlapped=0xc0000dbce8) returned 1
	[0218.982] GetFileType (hFile=0xe8) returned 0x1
	[0218.982] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xa520, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=42272) returned 1
	[0218.983] CloseHandle (hObject=0xe8) returned 1
	[0218.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf.egmwv")) returned 0x20
	[0218.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.988] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.994] SetEvent (hEvent=0x90) returned 1
	[0218.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf")) returned 0x20
	[0218.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x20) returned 1
	[0218.995] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0219.041] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002f3cc4 | out: lpMode=0xc0002f3cc4) returned 0
	[0219.041] ReadFile (in: hFile=0xa8, lpBuffer=0xc00044c000, nNumberOfBytesToRead=0x6f9c, lpNumberOfBytesRead=0xc0002f3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00044c000*, lpNumberOfBytesRead=0xc0002f3cec*=0x6f9c, lpOverlapped=0x0) returned 1
	[0219.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b85c0 | out: pbBuffer=0xc0001b85c0) returned 1
	[0219.047] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1002 | out: pbBuffer=0xc0002c1002) returned 1
	[0219.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8600 | out: pbBuffer=0xc0001b8600) returned 1
	[0219.048] GetFileType (hFile=0xa8) returned 0x1
	[0219.048] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=28572) returned 1
	[0219.048] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002fa000*, nNumberOfBytesToWrite=0x6f9c, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0002fa000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x6f9c, lpOverlapped=0xc0000dbce8) returned 1
	[0219.048] GetFileType (hFile=0xa8) returned 0x1
	[0219.048] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x6f9c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=28572) returned 1
	[0219.049] GetFileType (hFile=0xa8) returned 0x1
	[0219.049] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=28572) returned 1
	[0219.049] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003ba380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0003ba380*, lpNumberOfBytesWritten=0xc0000dbccc*=0x236, lpOverlapped=0xc0000dbce8) returned 1
	[0219.052] GetFileType (hFile=0xa8) returned 0x1
	[0219.052] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x6f9c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=28572) returned 1
	[0219.052] CloseHandle (hObject=0xa8) returned 1
	[0219.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf.egmwv")) returned 0x20
	[0219.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.056] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.069] SetEvent (hEvent=0x124) returned 1
	[0219.069] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf")) returned 0x20
	[0219.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF", dwFileAttributes=0x20) returned 1
	[0219.078] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0219.112] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0219.112] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0xae08, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc000423cec*=0xae08, lpOverlapped=0x0) returned 1
	[0219.119] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8110 | out: pbBuffer=0xc0001d8110) returned 1
	[0219.119] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d812a | out: pbBuffer=0xc0001d812a) returned 1
	[0219.119] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0219.119] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d03 | out: pbBuffer=0xc0002c0d03) returned 1
	[0219.119] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0da3 | out: pbBuffer=0xc0002c0da3) returned 1
	[0219.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8150 | out: pbBuffer=0xc0001d8150) returned 1
	[0219.120] GetFileType (hFile=0xa8) returned 0x1
	[0219.120] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=44552) returned 1
	[0219.120] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002c2000*, nNumberOfBytesToWrite=0xae08, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesWritten=0xc000155ccc*=0xae08, lpOverlapped=0xc000155ce8) returned 1
	[0219.121] GetFileType (hFile=0xa8) returned 0x1
	[0219.121] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xae08, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=44552) returned 1
	[0219.122] GetFileType (hFile=0xa8) returned 0x1
	[0219.122] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=44552) returned 1
	[0219.122] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004a3500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004a3500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0219.122] GetFileType (hFile=0xa8) returned 0x1
	[0219.123] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xae08, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=44552) returned 1
	[0219.123] CloseHandle (hObject=0xa8) returned 1
	[0219.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf.egmwv")) returned 0x20
	[0219.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.125] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.128] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.135] SetEvent (hEvent=0xe4) returned 1
	[0219.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf")) returned 0x20
	[0219.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF", dwFileAttributes=0x20) returned 1
	[0219.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.168] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0219.168] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000ba000, nNumberOfBytesToRead=0x7c4e, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ba000*, lpNumberOfBytesRead=0xc000423cec*=0x7c4e, lpOverlapped=0x0) returned 1
	[0219.175] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8290 | out: pbBuffer=0xc0001b8290) returned 1
	[0219.175] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b82aa | out: pbBuffer=0xc0001b82aa) returned 1
	[0219.175] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0219.175] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f04 | out: pbBuffer=0xc000001f04) returned 1
	[0219.175] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f8a | out: pbBuffer=0xc000001f8a) returned 1
	[0219.175] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82d0 | out: pbBuffer=0xc0001b82d0) returned 1
	[0219.176] GetFileType (hFile=0xcc) returned 0x1
	[0219.176] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=31822) returned 1
	[0219.176] WriteFile (in: hFile=0xcc, lpBuffer=0xc000162000*, nNumberOfBytesToWrite=0x7c4e, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000162000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x7c4e, lpOverlapped=0xc0000dbce8) returned 1
	[0219.176] GetFileType (hFile=0xcc) returned 0x1
	[0219.177] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7c4e, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=31822) returned 1
	[0219.177] GetFileType (hFile=0xcc) returned 0x1
	[0219.177] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=31822) returned 1
	[0219.177] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000c9180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0000c9180*, lpNumberOfBytesWritten=0xc0000dbccc*=0x233, lpOverlapped=0xc0000dbce8) returned 1
	[0219.177] GetFileType (hFile=0xcc) returned 0x1
	[0219.177] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7c4e, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=31822) returned 1
	[0219.178] CloseHandle (hObject=0xcc) returned 1
	[0219.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf.egmwv")) returned 0x20
	[0219.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.180] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.183] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.186] SetEvent (hEvent=0xe4) returned 1
	[0219.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf")) returned 0x20
	[0219.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF", dwFileAttributes=0x20) returned 1
	[0219.187] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.220] SetEvent (hEvent=0x70) returned 1
	[0219.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0219.222] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002f1cc4 | out: lpMode=0xc0002f1cc4) returned 0
	[0219.222] ReadFile (in: hFile=0xe8, lpBuffer=0xc00022a000, nNumberOfBytesToRead=0x4124, lpNumberOfBytesRead=0xc0002f1cec, lpOverlapped=0x0 | out: lpBuffer=0xc00022a000*, lpNumberOfBytesRead=0xc0002f1cec*=0x4124, lpOverlapped=0x0) returned 1
	[0219.227] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8100 | out: pbBuffer=0xc0001b8100) returned 1
	[0219.227] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b811a | out: pbBuffer=0xc0001b811a) returned 1
	[0219.227] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0219.227] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8140 | out: pbBuffer=0xc0001b8140) returned 1
	[0219.227] GetFileType (hFile=0xe8) returned 0x1
	[0219.228] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16676) returned 1
	[0219.228] WriteFile (in: hFile=0xe8, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4124, lpOverlapped=0xc000155ce8) returned 1
	[0219.228] GetFileType (hFile=0xe8) returned 0x1
	[0219.228] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4124, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16676) returned 1
	[0219.228] GetFileType (hFile=0xe8) returned 0x1
	[0219.229] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16676) returned 1
	[0219.229] WriteFile (in: hFile=0xe8, lpBuffer=0xc000457880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000457880*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0219.229] GetFileType (hFile=0xe8) returned 0x1
	[0219.229] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4124, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16676) returned 1
	[0219.229] CloseHandle (hObject=0xe8) returned 1
	[0219.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf.egmwv")) returned 0x20
	[0219.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.233] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.235] SetEvent (hEvent=0x104) returned 1
	[0219.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf")) returned 0x20
	[0219.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF", dwFileAttributes=0x20) returned 1
	[0219.237] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0219.267] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0219.267] ReadFile (in: hFile=0xa8, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0x2a18, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc0002d3cec*=0x2a18, lpOverlapped=0x0) returned 1
	[0219.273] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0219.273] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0219.273] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0102 | out: pbBuffer=0xc0002c0102) returned 1
	[0219.274] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0138 | out: pbBuffer=0xc0002c0138) returned 1
	[0219.274] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c01d6 | out: pbBuffer=0xc0002c01d6) returned 1
	[0219.274] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0219.274] GetFileType (hFile=0xa8) returned 0x1
	[0219.274] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=10776) returned 1
	[0219.275] WriteFile (in: hFile=0xa8, lpBuffer=0xc000376000*, nNumberOfBytesToWrite=0x2a18, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc000376000*, lpNumberOfBytesWritten=0xc000465ccc*=0x2a18, lpOverlapped=0xc000465ce8) returned 1
	[0219.275] GetFileType (hFile=0xa8) returned 0x1
	[0219.275] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2a18, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=10776) returned 1
	[0219.275] GetFileType (hFile=0xa8) returned 0x1
	[0219.275] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=10776) returned 1
	[0219.276] WriteFile (in: hFile=0xa8, lpBuffer=0xc00036ae00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc00036ae00*, lpNumberOfBytesWritten=0xc000465ccc*=0x227, lpOverlapped=0xc000465ce8) returned 1
	[0219.276] GetFileType (hFile=0xa8) returned 0x1
	[0219.276] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2a18, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=10776) returned 1
	[0219.276] CloseHandle (hObject=0xa8) returned 1
	[0219.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf.egmwv")) returned 0x20
	[0219.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.281] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.294] SetEvent (hEvent=0x104) returned 1
	[0219.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf")) returned 0x20
	[0219.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF", dwFileAttributes=0x20) returned 1
	[0219.309] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.339] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002f3cc4 | out: lpMode=0xc0002f3cc4) returned 0
	[0219.339] ReadFile (in: hFile=0xcc, lpBuffer=0xc000246000, nNumberOfBytesToRead=0x302c, lpNumberOfBytesRead=0xc0002f3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000246000*, lpNumberOfBytesRead=0xc0002f3cec*=0x302c, lpOverlapped=0x0) returned 1
	[0219.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000172420 | out: pbBuffer=0xc000172420) returned 1
	[0219.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00017243a | out: pbBuffer=0xc00017243a) returned 1
	[0219.344] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000252802 | out: pbBuffer=0xc000252802) returned 1
	[0219.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000252815 | out: pbBuffer=0xc000252815) returned 1
	[0219.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000252829 | out: pbBuffer=0xc000252829) returned 1
	[0219.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000252832 | out: pbBuffer=0xc000252832) returned 1
	[0219.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000172460 | out: pbBuffer=0xc000172460) returned 1
	[0219.345] GetFileType (hFile=0xcc) returned 0x1
	[0219.345] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a1ca0*=12332) returned 1
	[0219.345] WriteFile (in: hFile=0xcc, lpBuffer=0xc00042c000*, nNumberOfBytesToWrite=0x302c, lpNumberOfBytesWritten=0xc0002a1ccc, lpOverlapped=0xc0002a1ce8 | out: lpBuffer=0xc00042c000*, lpNumberOfBytesWritten=0xc0002a1ccc*=0x302c, lpOverlapped=0xc0002a1ce8) returned 1
	[0219.345] GetFileType (hFile=0xcc) returned 0x1
	[0219.345] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x302c, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a1ca0*=12332) returned 1
	[0219.346] GetFileType (hFile=0xcc) returned 0x1
	[0219.346] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a1ca0*=12332) returned 1
	[0219.346] WriteFile (in: hFile=0xcc, lpBuffer=0xc00032c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002a1ccc, lpOverlapped=0xc0002a1ce8 | out: lpBuffer=0xc00032c700*, lpNumberOfBytesWritten=0xc0002a1ccc*=0x227, lpOverlapped=0xc0002a1ce8) returned 1
	[0219.346] GetFileType (hFile=0xcc) returned 0x1
	[0219.346] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x302c, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a1ca0*=12332) returned 1
	[0219.346] CloseHandle (hObject=0xcc) returned 1
	[0219.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf.egmwv")) returned 0x20
	[0219.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.348] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.359] SetEvent (hEvent=0x124) returned 1
	[0219.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf")) returned 0x20
	[0219.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF", dwFileAttributes=0x20) returned 1
	[0219.361] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.386] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0219.386] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000ee000, nNumberOfBytesToRead=0x14c0, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ee000*, lpNumberOfBytesRead=0xc000423cec*=0x14c0, lpOverlapped=0x0) returned 1
	[0219.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001725b0 | out: pbBuffer=0xc0001725b0) returned 1
	[0219.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001725ca | out: pbBuffer=0xc0001725ca) returned 1
	[0219.393] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000253502 | out: pbBuffer=0xc000253502) returned 1
	[0219.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000253579 | out: pbBuffer=0xc000253579) returned 1
	[0219.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002535d0 | out: pbBuffer=0xc0002535d0) returned 1
	[0219.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002535e5 | out: pbBuffer=0xc0002535e5) returned 1
	[0219.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001725f0 | out: pbBuffer=0xc0001725f0) returned 1
	[0219.394] GetFileType (hFile=0xcc) returned 0x1
	[0219.394] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a1ca0*=5312) returned 1
	[0219.394] WriteFile (in: hFile=0xcc, lpBuffer=0xc000100000*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0xc0002a1ccc, lpOverlapped=0xc0002a1ce8 | out: lpBuffer=0xc000100000*, lpNumberOfBytesWritten=0xc0002a1ccc*=0x14c0, lpOverlapped=0xc0002a1ce8) returned 1
	[0219.395] GetFileType (hFile=0xcc) returned 0x1
	[0219.395] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x14c0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a1ca0*=5312) returned 1
	[0219.395] GetFileType (hFile=0xcc) returned 0x1
	[0219.395] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a1ca0*=5312) returned 1
	[0219.395] WriteFile (in: hFile=0xcc, lpBuffer=0xc000102000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0002a1ccc, lpOverlapped=0xc0002a1ce8 | out: lpBuffer=0xc000102000*, lpNumberOfBytesWritten=0xc0002a1ccc*=0x224, lpOverlapped=0xc0002a1ce8) returned 1
	[0219.396] GetFileType (hFile=0xcc) returned 0x1
	[0219.396] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x14c0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a1ca0*=5312) returned 1
	[0219.396] CloseHandle (hObject=0xcc) returned 1
	[0219.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf.egmwv")) returned 0x20
	[0219.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.398] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf")) returned 0x20
	[0219.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x20) returned 1
	[0219.409] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf.egmwv"), dwFlags=0x1) returned 1
	[0220.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0220.502] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0220.502] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003bc000, nNumberOfBytesToRead=0x4c0a, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesRead=0xc000423cec*=0x4c0a, lpOverlapped=0x0) returned 1
	[0220.512] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d85c0 | out: pbBuffer=0xc0001d85c0) returned 1
	[0220.513] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000203102 | out: pbBuffer=0xc000203102) returned 1
	[0220.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020313e | out: pbBuffer=0xc00020313e) returned 1
	[0220.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8600 | out: pbBuffer=0xc0001d8600) returned 1
	[0220.513] SetEvent (hEvent=0x144) returned 1
	[0220.514] GetFileType (hFile=0xe8) returned 0x1
	[0220.514] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=19466) returned 1
	[0220.514] WriteFile (in: hFile=0xe8, lpBuffer=0xc000122000*, nNumberOfBytesToWrite=0x4c0a, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc000122000*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x4c0a, lpOverlapped=0xc0002a5ce8) returned 1
	[0220.514] GetFileType (hFile=0xe8) returned 0x1
	[0220.514] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4c0a, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=19466) returned 1
	[0220.515] GetFileType (hFile=0xe8) returned 0x1
	[0220.515] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=19466) returned 1
	[0220.515] WriteFile (in: hFile=0xe8, lpBuffer=0xc000132000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc000132000*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x227, lpOverlapped=0xc0002a5ce8) returned 1
	[0220.515] GetFileType (hFile=0xe8) returned 0x1
	[0220.515] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4c0a, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=19466) returned 1
	[0220.516] CloseHandle (hObject=0xe8) returned 1
	[0220.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf.egmwv")) returned 0x20
	[0220.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0220.633] SwitchToThread () returned 1
	[0220.741] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0222.404] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0223.362] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) 

Thread:
	id = 32
	os_tid = 0x92c

	[0065.626] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x456feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x456feb0*=0x9c) returned 1
	[0065.626] VirtualQuery (in: lpAddress=0x456fed0, lpBuffer=0x456fed0, dwLength=0x30 | out: lpBuffer=0x456fed0*(BaseAddress=0x456f000, AllocationBase=0x4370000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0065.626] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xc8
	[0065.626] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0065.727] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0066.871] SetEvent (hEvent=0x60) returned 1
	[0066.872] SetEvent (hEvent=0x5c) returned 1
	[0066.872] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0066.987] SetEvent (hEvent=0x90) returned 1
	[0067.354] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0067.822] SwitchToThread () returned 1
	[0067.901] SetEvent (hEvent=0xac) returned 1
	[0067.901] SetEvent (hEvent=0xb0) returned 1
	[0067.901] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0067.930] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0067.930] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0067.940] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0067.941] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x0
	[0067.946] SetEvent (hEvent=0x70) returned 1
	[0067.947] SetEvent (hEvent=0xb0) returned 1
	[0067.947] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x0
	[0067.958] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab")) returned 0x2020
	[0067.958] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", dwFileAttributes=0x2020) returned 1
	[0067.963] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.egmwv"), dwFlags=0x1) returned 1
	[0067.964] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0
	[0067.964] GetConsoleMode (in: hConsoleHandle=0xa0, lpMode=0xc000399cc4 | out: lpMode=0xc000399cc4) returned 0
	[0067.964] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000800000
	[0067.965] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000800000
	[0068.056] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x4570000
	[0068.057] VirtualFree (lpAddress=0xc000538000, dwSize=0x90000, dwFreeType=0x4000) returned 1
	[0068.067] VirtualFree (lpAddress=0xc0002e0000, dwSize=0x68000, dwFreeType=0x4000) returned 1
	[0068.074] VirtualFree (lpAddress=0xc0000e2000, dwSize=0x54000, dwFreeType=0x4000) returned 1
	[0068.216] VirtualFree (lpAddress=0xc0003a2000, dwSize=0x42000, dwFreeType=0x4000) returned 1
	[0068.243] VirtualFree (lpAddress=0xc0007ae000, dwSize=0x40000, dwFreeType=0x4000) returned 1
	[0068.351] VirtualFree (lpAddress=0xc000242000, dwSize=0x3e000, dwFreeType=0x4000) returned 1
	[0068.356] VirtualFree (lpAddress=0xc0001ce000, dwSize=0x36000, dwFreeType=0x4000) returned 1
	[0069.506] VirtualFree (lpAddress=0xc000138000, dwSize=0x26000, dwFreeType=0x4000) returned 1
	[0069.508] VirtualFree (lpAddress=0xc0006ca000, dwSize=0x24000, dwFreeType=0x4000) returned 1
	[0069.555] VirtualFree (lpAddress=0xc00021e000, dwSize=0x22000, dwFreeType=0x4000) returned 1
	[0069.558] VirtualFree (lpAddress=0xc0000aa000, dwSize=0x22000, dwFreeType=0x4000) returned 1
	[0069.560] VirtualFree (lpAddress=0xc0001ac000, dwSize=0x1a000, dwFreeType=0x4000) returned 1
	[0069.562] VirtualFree (lpAddress=0xc000364000, dwSize=0x16000, dwFreeType=0x4000) returned 1
	[0069.564] VirtualFree (lpAddress=0xc000352000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0069.565] VirtualFree (lpAddress=0xc00042a000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0069.566] VirtualFree (lpAddress=0xc0003e6000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0069.567] VirtualFree (lpAddress=0xc0002b8000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0069.568] VirtualFree (lpAddress=0xc0000d4000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0069.569] VirtualFree (lpAddress=0xc000068000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0069.570] VirtualFree (lpAddress=0xc0003f2000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0069.570] VirtualFree (lpAddress=0xc0002c4000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0069.571] VirtualFree (lpAddress=0xc00019a000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0069.572] VirtualFree (lpAddress=0xc000412000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0069.572] VirtualFree (lpAddress=0xc000380000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0069.573] VirtualFree (lpAddress=0xc00020e000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0069.574] VirtualFree (lpAddress=0xc000206000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0069.574] VirtualFree (lpAddress=0xc000180000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0069.575] VirtualFree (lpAddress=0xc00041c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.575] VirtualFree (lpAddress=0xc000408000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.576] VirtualFree (lpAddress=0xc000298000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.576] VirtualFree (lpAddress=0xc000288000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.577] VirtualFree (lpAddress=0xc000282000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.578] VirtualFree (lpAddress=0xc00018e000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.578] VirtualFree (lpAddress=0xc000188000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.578] VirtualFree (lpAddress=0xc000176000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.579] VirtualFree (lpAddress=0xc000074000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0069.580] VirtualFree (lpAddress=0xc00039e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.580] VirtualFree (lpAddress=0xc0002d0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.580] VirtualFree (lpAddress=0xc0002b2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.581] VirtualFree (lpAddress=0xc000294000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.581] VirtualFree (lpAddress=0xc00028e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.581] VirtualFree (lpAddress=0xc0001ca000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.582] VirtualFree (lpAddress=0xc00017c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.582] VirtualFree (lpAddress=0xc000080000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0069.583] SetEvent (hEvent=0x5c) returned 1
	[0069.586] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0069.605] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0069.605] SetEvent (hEvent=0x70) returned 1
	[0069.605] SetEvent (hEvent=0x5c) returned 1
	[0069.606] VirtualAlloc (lpAddress=0xc00019a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019a000
	[0069.606] VirtualFree (lpAddress=0xc000b00000, dwSize=0x100000, dwFreeType=0x4000) returned 1
	[0069.616] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 0x2020
	[0069.616] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", dwFileAttributes=0x2020) returned 1
	[0069.617] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.egmwv"), dwFlags=0x1) returned 1
	[0069.617] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0069.618] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0069.618] ReadFile (in: hFile=0xcc, lpBuffer=0xc0007f2c00, nNumberOfBytesToRead=0x5aa, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc0007f2c00*, lpNumberOfBytesRead=0xc000167cec*=0x5aa, lpOverlapped=0x0) returned 1
	[0069.701] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0069.772] VirtualAlloc (lpAddress=0xc000080000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000080000
	[0069.795] VirtualAlloc (lpAddress=0xc00017c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00017c000
	[0069.795] VirtualAlloc (lpAddress=0xc0001ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ca000
	[0069.796] VirtualAlloc (lpAddress=0xc00028e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028e000
	[0069.797] VirtualAlloc (lpAddress=0xc000294000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000294000
	[0069.798] VirtualAlloc (lpAddress=0xc0002b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b2000
	[0069.798] SetEvent (hEvent=0x5c) returned 1
	[0069.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052130 | out: pbBuffer=0xc000052130) returned 1
	[0069.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005214a | out: pbBuffer=0xc00005214a) returned 1
	[0069.799] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214802 | out: pbBuffer=0xc000214802) returned 1
	[0069.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021481c | out: pbBuffer=0xc00021481c) returned 1
	[0069.799] VirtualAlloc (lpAddress=0xc0002d0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002d0000
	[0069.800] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052170 | out: pbBuffer=0xc000052170) returned 1
	[0069.800] VirtualAlloc (lpAddress=0xc00039e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00039e000
	[0069.800] GetFileType (hFile=0xcc) returned 0x1
	[0069.801] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=1450) returned 1
	[0069.801] WriteFile (in: hFile=0xcc, lpBuffer=0xc00039e000*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc00039e000*, lpNumberOfBytesWritten=0xc00021dccc*=0x5aa, lpOverlapped=0xc00021dce8) returned 1
	[0069.801] GetFileType (hFile=0xcc) returned 0x1
	[0069.801] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5aa, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=1450) returned 1
	[0069.802] GetFileType (hFile=0xcc) returned 0x1
	[0069.802] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=1450) returned 1
	[0069.802] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002b2e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc0002b2e00*, lpNumberOfBytesWritten=0xc00021dccc*=0x22a, lpOverlapped=0xc00021dce8) returned 1
	[0069.802] GetFileType (hFile=0xcc) returned 0x1
	[0069.802] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5aa, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=1450) returned 1
	[0069.802] CloseHandle (hObject=0xcc) returned 1
	[0069.805] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.egmwv")) returned 0x2020
	[0069.805] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0069.805] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0069.871] SetEvent (hEvent=0x5c) returned 1
	[0069.871] SetEvent (hEvent=0x90) returned 1
	[0069.871] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0069.871] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0069.872] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0069.873] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0069.873] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0069.873] ReadFile (in: hFile=0xcc, lpBuffer=0xc000136000, nNumberOfBytesToRead=0x75e, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc000169cec*=0x75e, lpOverlapped=0x0) returned 1
	[0069.878] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0140 | out: pbBuffer=0xc0003a0140) returned 1
	[0069.878] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215402 | out: pbBuffer=0xc000215402) returned 1
	[0069.878] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002154da | out: pbBuffer=0xc0002154da) returned 1
	[0069.878] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0180 | out: pbBuffer=0xc0003a0180) returned 1
	[0069.878] GetFileType (hFile=0xcc) returned 0x1
	[0069.878] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=1886) returned 1
	[0069.879] WriteFile (in: hFile=0xcc, lpBuffer=0xc000402000*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc000402000*, lpNumberOfBytesWritten=0xc00021dccc*=0x75e, lpOverlapped=0xc00021dce8) returned 1
	[0069.879] GetFileType (hFile=0xcc) returned 0x1
	[0069.879] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x75e, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=1886) returned 1
	[0069.879] GetFileType (hFile=0xcc) returned 0x1
	[0069.879] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021dca0*=1886) returned 1
	[0069.879] WriteFile (in: hFile=0xcc, lpBuffer=0xc0007fe700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00021dccc, lpOverlapped=0xc00021dce8 | out: lpBuffer=0xc0007fe700*, lpNumberOfBytesWritten=0xc00021dccc*=0x230, lpOverlapped=0xc00021dce8) returned 1
	[0069.880] GetFileType (hFile=0xcc) returned 0x1
	[0069.880] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x75e, lpNewFilePointer=0xc00021dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021dca0*=1886) returned 1
	[0069.880] CloseHandle (hObject=0xcc) returned 1
	[0069.889] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0069.889] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0069.890] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.egmwv")) returned 0x2020
	[0069.890] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0069.890] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi")) returned 0x2020
	[0069.891] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", dwFileAttributes=0x2020) returned 1
	[0069.891] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.egmwv"), dwFlags=0x1) returned 1
	[0069.898] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0069.899] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0069.899] VirtualAlloc (lpAddress=0xc0001ce000, dwSize=0x2c000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ce000
	[0069.986] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x2af66, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc000429cec*=0x2af66, lpOverlapped=0x0) returned 1
	[0070.084] VirtualAlloc (lpAddress=0xc000188000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000188000
	[0070.086] VirtualAlloc (lpAddress=0xc00018a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018a000
	[0070.087] VirtualAlloc (lpAddress=0xc00018e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018e000
	[0070.088] VirtualAlloc (lpAddress=0xc000190000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000190000
	[0070.088] VirtualAlloc (lpAddress=0xc000282000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000282000
	[0070.098] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0460 | out: pbBuffer=0xc0003a0460) returned 1
	[0070.099] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000000f02 | out: pbBuffer=0xc000000f02) returned 1
	[0070.099] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000000f5d | out: pbBuffer=0xc000000f5d) returned 1
	[0070.099] VirtualAlloc (lpAddress=0xc000284000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000284000
	[0070.100] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a04a0 | out: pbBuffer=0xc0003a04a0) returned 1
	[0070.100] VirtualAlloc (lpAddress=0xc000288000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000288000
	[0070.101] VirtualAlloc (lpAddress=0xc0000aa000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000aa000
	[0070.106] VirtualAlloc (lpAddress=0xc000298000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000298000
	[0070.107] VirtualAlloc (lpAddress=0xc0000bc000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000bc000
	[0070.111] VirtualAlloc (lpAddress=0xc000206000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000206000
	[0070.112] VirtualAlloc (lpAddress=0xc000380000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000380000
	[0070.112] VirtualFree (lpAddress=0xc0006ee000, dwSize=0xc0000, dwFreeType=0x4000) returned 1
	[0072.115] VirtualFree (lpAddress=0xc0006ca000, dwSize=0x124000, dwFreeType=0x4000) returned 1
	[0072.116] VirtualAlloc (lpAddress=0xc00021e000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021e000
	[0072.125] VirtualAlloc (lpAddress=0xc0003a2000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a2000
	[0072.139] VirtualAlloc (lpAddress=0xc0002b8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b8000
	[0072.372] SetEvent (hEvent=0x90) returned 1
	[0072.373] SetEvent (hEvent=0xc0) returned 1
	[0072.373] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0118.671] GetFileType (hFile=0xe0) returned 0x1
	[0118.672] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00016bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016bca0*=1048576) returned 1
	[0118.672] WriteFile (in: hFile=0xe0, lpBuffer=0xc001800000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc00016bccc, lpOverlapped=0xc00016bce8 | out: lpBuffer=0xc001800000*, lpNumberOfBytesWritten=0xc00016bccc*=0x100000, lpOverlapped=0xc00016bce8) returned 1
	[0119.866] GetFileType (hFile=0xe0) returned 0x1
	[0119.866] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016bca0*=1048576) returned 1
	[0119.866] GetFileType (hFile=0xe0) returned 0x1
	[0119.866] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00016bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016bca0*=1048576) returned 1
	[0119.866] WriteFile (in: hFile=0xe0, lpBuffer=0xc000378000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc00016bccc, lpOverlapped=0xc00016bce8 | out: lpBuffer=0xc000378000*, lpNumberOfBytesWritten=0xc00016bccc*=0x2d8, lpOverlapped=0xc00016bce8) returned 1
	[0120.995] GetFileType (hFile=0xe0) returned 0x1
	[0120.995] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016bca0*=1048576) returned 1
	[0120.995] CloseHandle (hObject=0xe0) returned 1
	[0143.875] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0143.939] SetEvent (hEvent=0x54) returned 1
	[0143.939] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0143.959] SetEvent (hEvent=0x54) returned 1
	[0143.959] SetEvent (hEvent=0x144) returned 1
	[0143.959] SetEvent (hEvent=0xac) returned 1
	[0143.959] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0144.379] SwitchToThread () returned 1
	[0144.517] SwitchToThread () returned 1
	[0144.743] VirtualAlloc (lpAddress=0xc000438000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000438000
	[0144.980] SetEvent (hEvent=0x54) returned 1
	[0144.980] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0145.042] VirtualAlloc (lpAddress=0xc000638000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000638000
	[0145.045] VirtualAlloc (lpAddress=0xc00063a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00063a000
	[0145.090] SetEvent (hEvent=0x144) returned 1
	[0145.090] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0159.280] SetEvent (hEvent=0x84) returned 1
	[0159.281] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab")) returned 0x2020
	[0159.281] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", dwFileAttributes=0x2020) returned 1
	[0160.818] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.egmwv"), dwFlags=0x1) returned 1
	[0169.958] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0169.959] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038fcc4 | out: lpMode=0xc00038fcc4) returned 0
	[0169.959] VirtualAlloc (lpAddress=0xc001622000, dwSize=0x66000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001622000
	[0169.982] ReadFile (in: hFile=0xe8, lpBuffer=0xc001622000, nNumberOfBytesToRead=0x64e4a, lpNumberOfBytesRead=0xc00038fcec, lpOverlapped=0x0 | out: lpBuffer=0xc001622000*, lpNumberOfBytesRead=0xc00038fcec*=0x64e4a, lpOverlapped=0x0) returned 1
	[0170.612] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.716] SetEvent (hEvent=0x148) returned 1
	[0170.716] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.799] SetEvent (hEvent=0x148) returned 1
	[0170.800] SetEvent (hEvent=0xc4) returned 1
	[0170.800] SetEvent (hEvent=0xac) returned 1
	[0170.800] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.006] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.408] SetEvent (hEvent=0xac) returned 1
	[0171.408] VirtualAlloc (lpAddress=0xc00195a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00195a000
	[0171.410] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0175.226] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 0x2020
	[0175.226] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", dwFileAttributes=0x2020) returned 1
	[0175.227] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.egmwv"), dwFlags=0x1) returned 1
	[0175.228] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0175.228] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0175.229] ReadFile (in: hFile=0xcc, lpBuffer=0xc00041c000, nNumberOfBytesToRead=0x333, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00041c000*, lpNumberOfBytesRead=0xc00016dcec*=0x333, lpOverlapped=0x0) returned 1
	[0175.476] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0175.614] SetEvent (hEvent=0x148) returned 1
	[0175.615] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0182.196] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0182.224] SetEvent (hEvent=0x148) returned 1
	[0182.224] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 0x2020
	[0182.224] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", dwFileAttributes=0x2020) returned 1
	[0182.225] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.egmwv"), dwFlags=0x1) returned 1
	[0182.226] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0182.226] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0182.226] ReadFile (in: hFile=0x118, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x15366, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000175cec*=0x15366, lpOverlapped=0x0) returned 1
	[0182.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0110 | out: pbBuffer=0xc0003a0110) returned 1
	[0182.236] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0182.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d49 | out: pbBuffer=0xc000214d49) returned 1
	[0182.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d92 | out: pbBuffer=0xc000214d92) returned 1
	[0182.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214daa | out: pbBuffer=0xc000214daa) returned 1
	[0182.236] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0150 | out: pbBuffer=0xc0003a0150) returned 1
	[0182.237] GetFileType (hFile=0x118) returned 0x1
	[0182.237] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=86886) returned 1
	[0182.238] WriteFile (in: hFile=0x118, lpBuffer=0xc0000aa000*, nNumberOfBytesToWrite=0x15366, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesWritten=0xc00019dccc*=0x15366, lpOverlapped=0xc00019dce8) returned 1
	[0182.239] GetFileType (hFile=0x118) returned 0x1
	[0182.239] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x15366, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=86886) returned 1
	[0182.239] GetFileType (hFile=0x118) returned 0x1
	[0182.239] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=86886) returned 1
	[0182.239] WriteFile (in: hFile=0x118, lpBuffer=0xc0000d5500*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000d5500*, lpNumberOfBytesWritten=0xc00019dccc*=0x23c, lpOverlapped=0xc00019dce8) returned 1
	[0182.251] GetFileType (hFile=0x118) returned 0x1
	[0182.251] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x15366, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=86886) returned 1
	[0182.252] CloseHandle (hObject=0x118) returned 1
	[0182.252] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.egmwv")) returned 0x2020
	[0182.252] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0182.253] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0182.253] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0182.254] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0182.254] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0182.255] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0182.255] ReadFile (in: hFile=0x118, lpBuffer=0xc000382000, nNumberOfBytesToRead=0xa40, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000382000*, lpNumberOfBytesRead=0xc000423cec*=0xa40, lpOverlapped=0x0) returned 1
	[0184.346] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000103b0 | out: pbBuffer=0xc0000103b0) returned 1
	[0184.346] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000103ca | out: pbBuffer=0xc0000103ca) returned 1
	[0184.346] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039d02 | out: pbBuffer=0xc000039d02) returned 1
	[0184.346] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039d5a | out: pbBuffer=0xc000039d5a) returned 1
	[0184.346] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000103f0 | out: pbBuffer=0xc0000103f0) returned 1
	[0184.346] GetFileType (hFile=0x118) returned 0x1
	[0184.346] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2624) returned 1
	[0184.347] WriteFile (in: hFile=0x118, lpBuffer=0xc0002a5000*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0002a5000*, lpNumberOfBytesWritten=0xc00019dccc*=0xa40, lpOverlapped=0xc00019dce8) returned 1
	[0184.347] GetFileType (hFile=0x118) returned 0x1
	[0184.347] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xa40, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2624) returned 1
	[0184.347] GetFileType (hFile=0x118) returned 0x1
	[0184.347] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2624) returned 1
	[0184.348] WriteFile (in: hFile=0x118, lpBuffer=0xc0002a8e00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0002a8e00*, lpNumberOfBytesWritten=0xc00019dccc*=0x221, lpOverlapped=0xc00019dce8) returned 1
	[0184.348] GetFileType (hFile=0x118) returned 0x1
	[0184.348] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xa40, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2624) returned 1
	[0184.348] CloseHandle (hObject=0x118) returned 1
	[0184.349] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0184.349] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0184.349] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0184.402] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0184.491] SetEvent (hEvent=0x124) returned 1
	[0184.491] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0184.491] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", dwFileAttributes=0x2020) returned 1
	[0184.496] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv"), dwFlags=0x1) returned 1
	[0187.660] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0187.670] SetEvent (hEvent=0x124) returned 1
	[0187.670] SetEvent (hEvent=0x100) returned 1
	[0187.670] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0187.748] SetEvent (hEvent=0x100) returned 1
	[0187.748] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv"), dwFlags=0x1) returned 1
	[0187.750] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0187.750] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0187.750] ReadFile (in: hFile=0x118, lpBuffer=0xc000380000, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesRead=0xc000429cec*=0x10b2, lpOverlapped=0x0) returned 1
	[0187.829] VirtualAlloc (lpAddress=0xc0006ba000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0006ba000
	[0187.830] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0187.830] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0187.831] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0193.277] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0194.123] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0194.201] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0194.314] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0194.314] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0201.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf")) returned 0x20
	[0201.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x20) returned 1
	[0201.538] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0201.734] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000163cc4 | out: lpMode=0xc000163cc4) returned 0
	[0201.734] ReadFile (in: hFile=0xcc, lpBuffer=0xc000313000, nNumberOfBytesToRead=0xea2, lpNumberOfBytesRead=0xc000163cec, lpOverlapped=0x0 | out: lpBuffer=0xc000313000*, lpNumberOfBytesRead=0xc000163cec*=0xea2, lpOverlapped=0x0) returned 1
	[0201.741] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0201.741] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0201.741] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0201.741] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001098 | out: pbBuffer=0xc000001098) returned 1
	[0201.742] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0201.742] GetFileType (hFile=0xcc) returned 0x1
	[0201.742] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3746) returned 1
	[0201.742] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002b8000*, nNumberOfBytesToWrite=0xea2, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002b8000*, lpNumberOfBytesWritten=0xc000151ccc*=0xea2, lpOverlapped=0xc000151ce8) returned 1
	[0201.743] GetFileType (hFile=0xcc) returned 0x1
	[0201.743] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xea2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3746) returned 1
	[0201.743] GetFileType (hFile=0xcc) returned 0x1
	[0201.743] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3746) returned 1
	[0201.743] WriteFile (in: hFile=0xcc, lpBuffer=0xc00030ce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00030ce00*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0201.744] GetFileType (hFile=0xcc) returned 0x1
	[0201.744] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xea2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3746) returned 1
	[0201.744] CloseHandle (hObject=0xcc) returned 1
	[0201.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf.egmwv")) returned 0x20
	[0201.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.748] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0201.763] SetEvent (hEvent=0x108) returned 1
	[0201.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf")) returned 0x20
	[0201.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x20) returned 1
	[0201.765] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0201.950] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0201.950] ReadFile (in: hFile=0xe0, lpBuffer=0xc000218000, nNumberOfBytesToRead=0x10c8, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc000161cec*=0x10c8, lpOverlapped=0x0) returned 1
	[0201.956] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0201.956] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052e9a | out: pbBuffer=0xc000052e9a) returned 1
	[0201.956] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000340902 | out: pbBuffer=0xc000340902) returned 1
	[0201.956] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0201.956] GetFileType (hFile=0xe0) returned 0x1
	[0201.956] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=4296) returned 1
	[0201.957] WriteFile (in: hFile=0xe0, lpBuffer=0xc000230000*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc000230000*, lpNumberOfBytesWritten=0xc0003f5ccc*=0x10c8, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.957] GetFileType (hFile=0xe0) returned 0x1
	[0201.957] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x10c8, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=4296) returned 1
	[0201.957] GetFileType (hFile=0xe0) returned 0x1
	[0201.957] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=4296) returned 1
	[0201.958] WriteFile (in: hFile=0xe0, lpBuffer=0xc00022a700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc00022a700*, lpNumberOfBytesWritten=0xc0003f5ccc*=0x224, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.958] GetFileType (hFile=0xe0) returned 0x1
	[0201.958] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x10c8, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=4296) returned 1
	[0201.958] CloseHandle (hObject=0xe0) returned 1
	[0201.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf.egmwv")) returned 0x20
	[0201.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.961] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0201.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf")) returned 0x20
	[0201.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x20) returned 1
	[0201.977] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.015] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0202.015] ReadFile (in: hFile=0x17c, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1384, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc00016dcec*=0x1384, lpOverlapped=0x0) returned 1
	[0202.021] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0202.021] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62aa | out: pbBuffer=0xc0002b62aa) returned 1
	[0202.021] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0202.021] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003926b | out: pbBuffer=0xc00003926b) returned 1
	[0202.021] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0202.021] GetFileType (hFile=0x17c) returned 0x1
	[0202.021] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4996) returned 1
	[0202.021] WriteFile (in: hFile=0x17c, lpBuffer=0xc00018e000*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1384, lpOverlapped=0xc000151ce8) returned 1
	[0202.022] GetFileType (hFile=0x17c) returned 0x1
	[0202.022] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1384, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4996) returned 1
	[0202.022] GetFileType (hFile=0x17c) returned 0x1
	[0202.022] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4996) returned 1
	[0202.022] WriteFile (in: hFile=0x17c, lpBuffer=0xc00045ee00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00045ee00*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0202.023] GetFileType (hFile=0x17c) returned 0x1
	[0202.023] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1384, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4996) returned 1
	[0202.023] CloseHandle (hObject=0x17c) returned 1
	[0202.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf.egmwv")) returned 0x20
	[0202.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.025] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.037] SetEvent (hEvent=0x15c) returned 1
	[0202.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x20
	[0202.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x20) returned 1
	[0202.038] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.106] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000165cc4 | out: lpMode=0xc000165cc4) returned 0
	[0202.106] ReadFile (in: hFile=0x17c, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x1306, lpNumberOfBytesRead=0xc000165cec, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc000165cec*=0x1306, lpOverlapped=0x0) returned 1
	[0202.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0202.111] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215002 | out: pbBuffer=0xc000215002) returned 1
	[0202.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215099 | out: pbBuffer=0xc000215099) returned 1
	[0202.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0202.112] GetFileType (hFile=0x17c) returned 0x1
	[0202.112] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=4870) returned 1
	[0202.112] WriteFile (in: hFile=0x17c, lpBuffer=0xc00011a000*, nNumberOfBytesToWrite=0x1306, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc00011a000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x1306, lpOverlapped=0xc0000d7ce8) returned 1
	[0202.112] GetFileType (hFile=0x17c) returned 0x1
	[0202.113] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1306, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=4870) returned 1
	[0202.113] GetFileType (hFile=0x17c) returned 0x1
	[0202.113] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=4870) returned 1
	[0202.113] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003ef500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc0003ef500*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x227, lpOverlapped=0xc0000d7ce8) returned 1
	[0202.113] GetFileType (hFile=0x17c) returned 0x1
	[0202.113] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1306, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=4870) returned 1
	[0202.113] CloseHandle (hObject=0x17c) returned 1
	[0202.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf.egmwv")) returned 0x20
	[0202.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.116] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.119] SetEvent (hEvent=0x15c) returned 1
	[0202.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x20
	[0202.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x20) returned 1
	[0202.121] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.159] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00015fcc4 | out: lpMode=0xc00015fcc4) returned 0
	[0202.159] ReadFile (in: hFile=0x164, lpBuffer=0xc0001b2000, nNumberOfBytesToRead=0x2d74, lpNumberOfBytesRead=0xc00015fcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001b2000*, lpNumberOfBytesRead=0xc00015fcec*=0x2d74, lpOverlapped=0x0) returned 1
	[0202.167] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0202.167] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001b8802 | out: pbBuffer=0xc0001b8802) returned 1
	[0202.167] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b8869 | out: pbBuffer=0xc0001b8869) returned 1
	[0202.167] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0202.167] GetFileType (hFile=0x164) returned 0x1
	[0202.168] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=11636) returned 1
	[0202.168] WriteFile (in: hFile=0x164, lpBuffer=0xc0004b4000*, nNumberOfBytesToWrite=0x2d74, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc0004b4000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x2d74, lpOverlapped=0xc0000d7ce8) returned 1
	[0202.168] GetFileType (hFile=0x164) returned 0x1
	[0202.169] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2d74, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=11636) returned 1
	[0202.169] GetFileType (hFile=0x164) returned 0x1
	[0202.169] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=11636) returned 1
	[0202.169] WriteFile (in: hFile=0x164, lpBuffer=0xc0001c4700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc0001c4700*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x230, lpOverlapped=0xc0000d7ce8) returned 1
	[0202.170] GetFileType (hFile=0x164) returned 0x1
	[0202.170] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2d74, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=11636) returned 1
	[0202.170] CloseHandle (hObject=0x164) returned 1
	[0202.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf.egmwv")) returned 0x20
	[0202.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.175] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x20
	[0202.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x20) returned 1
	[0202.184] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.222] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00015fcc4 | out: lpMode=0xc00015fcc4) returned 0
	[0202.222] ReadFile (in: hFile=0xe0, lpBuffer=0xc00023c800, nNumberOfBytesToRead=0x4354, lpNumberOfBytesRead=0xc00015fcec, lpOverlapped=0x0 | out: lpBuffer=0xc00023c800*, lpNumberOfBytesRead=0xc00015fcec*=0x4354, lpOverlapped=0x0) returned 1
	[0202.227] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053040 | out: pbBuffer=0xc000053040) returned 1
	[0202.227] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005305a | out: pbBuffer=0xc00005305a) returned 1
	[0202.227] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003b6002 | out: pbBuffer=0xc0003b6002) returned 1
	[0202.227] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053080 | out: pbBuffer=0xc000053080) returned 1
	[0202.227] GetFileType (hFile=0xe0) returned 0x1
	[0202.227] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=17236) returned 1
	[0202.228] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x4354, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x4354, lpOverlapped=0xc0000dbce8) returned 1
	[0202.228] GetFileType (hFile=0xe0) returned 0x1
	[0202.228] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4354, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=17236) returned 1
	[0202.229] GetFileType (hFile=0xe0) returned 0x1
	[0202.229] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=17236) returned 1
	[0202.229] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003ce000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0003ce000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22a, lpOverlapped=0xc0000dbce8) returned 1
	[0202.229] GetFileType (hFile=0xe0) returned 0x1
	[0202.229] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4354, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=17236) returned 1
	[0202.229] CloseHandle (hObject=0xe0) returned 1
	[0202.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf.egmwv")) returned 0x20
	[0202.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.233] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x20
	[0202.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x20) returned 1
	[0202.252] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.287] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00015fcc4 | out: lpMode=0xc00015fcc4) returned 0
	[0202.287] ReadFile (in: hFile=0x164, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x687c, lpNumberOfBytesRead=0xc00015fcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc00015fcec*=0x687c, lpOverlapped=0x0) returned 1
	[0202.292] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0202.292] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0202.292] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0951 | out: pbBuffer=0xc0002c0951) returned 1
	[0202.293] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0202.293] GetFileType (hFile=0x164) returned 0x1
	[0202.293] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=26748) returned 1
	[0202.293] WriteFile (in: hFile=0x164, lpBuffer=0xc000302000*, nNumberOfBytesToWrite=0x687c, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000302000*, lpNumberOfBytesWritten=0xc000151ccc*=0x687c, lpOverlapped=0xc000151ce8) returned 1
	[0202.294] GetFileType (hFile=0x164) returned 0x1
	[0202.294] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x687c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=26748) returned 1
	[0202.294] GetFileType (hFile=0x164) returned 0x1
	[0202.294] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=26748) returned 1
	[0202.295] WriteFile (in: hFile=0x164, lpBuffer=0xc000324e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000324e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x230, lpOverlapped=0xc000151ce8) returned 1
	[0202.295] GetFileType (hFile=0x164) returned 0x1
	[0202.295] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x687c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=26748) returned 1
	[0202.295] CloseHandle (hObject=0x164) returned 1
	[0202.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf.egmwv")) returned 0x20
	[0202.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.297] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.305] SetEvent (hEvent=0x14c) returned 1
	[0202.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x20
	[0202.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x20) returned 1
	[0202.310] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.339] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0202.339] ReadFile (in: hFile=0xe0, lpBuffer=0xc00037c000, nNumberOfBytesToRead=0x5f00, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesRead=0xc000387cec*=0x5f00, lpOverlapped=0x0) returned 1
	[0202.352] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.354] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0202.354] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ca | out: pbBuffer=0xc0002b62ca) returned 1
	[0202.354] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1702 | out: pbBuffer=0xc0002c1702) returned 1
	[0202.354] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1746 | out: pbBuffer=0xc0002c1746) returned 1
	[0202.355] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1792 | out: pbBuffer=0xc0002c1792) returned 1
	[0202.355] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0202.355] GetFileType (hFile=0xe0) returned 0x1
	[0202.355] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=24320) returned 1
	[0202.355] WriteFile (in: hFile=0xe0, lpBuffer=0xc00042e000*, nNumberOfBytesToWrite=0x5f00, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00042e000*, lpNumberOfBytesWritten=0xc000151ccc*=0x5f00, lpOverlapped=0xc000151ce8) returned 1
	[0202.356] GetFileType (hFile=0xe0) returned 0x1
	[0202.356] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5f00, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=24320) returned 1
	[0202.356] GetFileType (hFile=0xe0) returned 0x1
	[0202.356] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=24320) returned 1
	[0202.357] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003ee700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003ee700*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0202.357] GetFileType (hFile=0xe0) returned 0x1
	[0202.358] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5f00, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=24320) returned 1
	[0202.360] CloseHandle (hObject=0xe0) returned 1
	[0202.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf.egmwv")) returned 0x20
	[0202.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.375] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.404] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.411] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.434] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.459] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.479] SetEvent (hEvent=0x15c) returned 1
	[0202.479] SetEvent (hEvent=0xe4) returned 1
	[0202.480] SetEvent (hEvent=0x60) returned 1
	[0202.480] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0202.485] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.485] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0202.487] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.487] SetEvent (hEvent=0xe4) returned 1
	[0202.487] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0202.490] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.490] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.759] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0202.766] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.192] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x20
	[0203.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x20) returned 1
	[0203.212] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.231] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0203.235] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0203.235] ReadFile (in: hFile=0x178, lpBuffer=0xc000412000, nNumberOfBytesToRead=0xa54, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000412000*, lpNumberOfBytesRead=0xc00038dcec*=0xa54, lpOverlapped=0x0) returned 1
	[0203.241] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0203.241] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1f02 | out: pbBuffer=0xc0002c1f02) returned 1
	[0203.241] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0203.241] GetFileType (hFile=0x178) returned 0x1
	[0203.242] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=2644) returned 1
	[0203.242] WriteFile (in: hFile=0x178, lpBuffer=0xc0002fb000*, nNumberOfBytesToWrite=0xa54, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0002fb000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0xa54, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.242] GetFileType (hFile=0x178) returned 0x1
	[0203.242] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xa54, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=2644) returned 1
	[0203.243] GetFileType (hFile=0x178) returned 0x1
	[0203.243] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=2644) returned 1
	[0203.243] WriteFile (in: hFile=0x178, lpBuffer=0xc0002f9500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0002f9500*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x227, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.244] GetFileType (hFile=0x178) returned 0x1
	[0203.244] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xa54, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=2644) returned 1
	[0203.244] CloseHandle (hObject=0x178) returned 1
	[0203.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf.egmwv")) returned 0x20
	[0203.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.247] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.250] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.257] SetEvent (hEvent=0x60) returned 1
	[0203.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x20
	[0203.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x20) returned 1
	[0203.259] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0203.279] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0203.279] ReadFile (in: hFile=0x170, lpBuffer=0xc000220000, nNumberOfBytesToRead=0xec4, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000220000*, lpNumberOfBytesRead=0xc000423cec*=0xec4, lpOverlapped=0x0) returned 1
	[0203.326] SetEvent (hEvent=0xb0) returned 1
	[0203.327] SetEvent (hEvent=0x5c) returned 1
	[0203.327] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0203.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0203.335] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.336] SetEvent (hEvent=0xc0) returned 1
	[0203.336] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0203.349] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0203.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020611a | out: pbBuffer=0xc00020611a) returned 1
	[0203.349] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00021e802 | out: pbBuffer=0xc00021e802) returned 1
	[0203.350] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0203.350] GetFileType (hFile=0x17c) returned 0x1
	[0203.350] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=4164) returned 1
	[0203.350] WriteFile (in: hFile=0x17c, lpBuffer=0xc00031e000*, nNumberOfBytesToWrite=0x1044, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc00031e000*, lpNumberOfBytesWritten=0xc000175ccc*=0x1044, lpOverlapped=0xc000175ce8) returned 1
	[0203.351] GetFileType (hFile=0x17c) returned 0x1
	[0203.351] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1044, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=4164) returned 1
	[0203.351] GetFileType (hFile=0x17c) returned 0x1
	[0203.351] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=4164) returned 1
	[0203.351] WriteFile (in: hFile=0x17c, lpBuffer=0xc00013e700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc00013e700*, lpNumberOfBytesWritten=0xc000175ccc*=0x221, lpOverlapped=0xc000175ce8) returned 1
	[0203.351] GetFileType (hFile=0x17c) returned 0x1
	[0203.351] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1044, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=4164) returned 1
	[0203.352] CloseHandle (hObject=0x17c) returned 1
	[0203.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf.egmwv")) returned 0x20
	[0203.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.363] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0203.371] SetEvent (hEvent=0xe4) returned 1
	[0203.372] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.038] SetEvent (hEvent=0x60) returned 1
	[0204.038] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.040] SetEvent (hEvent=0x60) returned 1
	[0204.040] SetEvent (hEvent=0x15c) returned 1
	[0204.041] SwitchToThread () returned 1
	[0204.042] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.046] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.062] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.091] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.112] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.176] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.198] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.252] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.275] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.287] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.310] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.334] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.356] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.365] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.387] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.429] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.451] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.462] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.475] SetEvent (hEvent=0x15c) returned 1
	[0204.476] SetEvent (hEvent=0x60) returned 1
	[0204.476] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0204.479] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.479] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0204.481] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.481] SetEvent (hEvent=0x15c) returned 1
	[0204.482] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0204.484] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.485] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.732] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.734] SetEvent (hEvent=0xc0) returned 1
	[0204.735] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.738] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.745] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.769] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.787] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.800] SetEvent (hEvent=0x150) returned 1
	[0204.800] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.815] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.823] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.847] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.867] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.877] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0204.897] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.016] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.020] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.038] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.046] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.067] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.094] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.123] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.206] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.233] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.243] SetEvent (hEvent=0xc0) returned 1
	[0205.244] SetEvent (hEvent=0x60) returned 1
	[0205.244] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0205.247] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.247] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x0
	[0205.248] SetEvent (hEvent=0x90) returned 1
	[0205.248] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x0
	[0205.249] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.769] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.774] SetEvent (hEvent=0xc0) returned 1
	[0205.775] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.777] SetEvent (hEvent=0xc0) returned 1
	[0205.777] SetEvent (hEvent=0xe4) returned 1
	[0205.777] SwitchToThread () returned 1
	[0205.812] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.819] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.843] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.862] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.881] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.896] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.912] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.937] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.961] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.980] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0205.994] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.023] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.044] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.053] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.071] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.097] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.117] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.132] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.145] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.192] SetEvent (hEvent=0xe4) returned 1
	[0206.193] SetEvent (hEvent=0xc0) returned 1
	[0206.193] SetEvent (hEvent=0x60) returned 1
	[0206.193] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x0
	[0206.197] SetEvent (hEvent=0x60) returned 1
	[0206.198] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x0
	[0206.214] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.406] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.409] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.756] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.758] SetEvent (hEvent=0xe4) returned 1
	[0206.758] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.761] SetEvent (hEvent=0xe4) returned 1
	[0206.761] SwitchToThread () returned 1
	[0206.763] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.776] SetEvent (hEvent=0x150) returned 1
	[0206.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x20
	[0206.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x20) returned 1
	[0206.778] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.804] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0206.804] ReadFile (in: hFile=0x164, lpBuffer=0xc0000da000, nNumberOfBytesToRead=0x3b3c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000da000*, lpNumberOfBytesRead=0xc0002d3cec*=0x3b3c, lpOverlapped=0x0) returned 1
	[0206.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0206.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0206.810] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215002 | out: pbBuffer=0xc000215002) returned 1
	[0206.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0206.810] GetFileType (hFile=0x164) returned 0x1
	[0206.811] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=15164) returned 1
	[0206.811] WriteFile (in: hFile=0x164, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x3b3c, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc000411ccc*=0x3b3c, lpOverlapped=0xc000411ce8) returned 1
	[0206.811] GetFileType (hFile=0x164) returned 0x1
	[0206.812] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3b3c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=15164) returned 1
	[0206.812] GetFileType (hFile=0x164) returned 0x1
	[0206.812] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=15164) returned 1
	[0206.812] WriteFile (in: hFile=0x164, lpBuffer=0xc0003db500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0003db500*, lpNumberOfBytesWritten=0xc000411ccc*=0x233, lpOverlapped=0xc000411ce8) returned 1
	[0206.812] GetFileType (hFile=0x164) returned 0x1
	[0206.812] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3b3c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=15164) returned 1
	[0206.813] CloseHandle (hObject=0x164) returned 1
	[0206.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf.egmwv")) returned 0x20
	[0206.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.816] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.819] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.822] SetEvent (hEvent=0x150) returned 1
	[0206.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x20
	[0206.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x20) returned 1
	[0206.824] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.852] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0206.852] ReadFile (in: hFile=0x17c, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1378, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000197cec*=0x1378, lpOverlapped=0x0) returned 1
	[0206.862] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0206.862] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ca | out: pbBuffer=0xc0004142ca) returned 1
	[0206.862] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215d02 | out: pbBuffer=0xc000215d02) returned 1
	[0206.862] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215d2e | out: pbBuffer=0xc000215d2e) returned 1
	[0206.862] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215d54 | out: pbBuffer=0xc000215d54) returned 1
	[0206.862] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215d86 | out: pbBuffer=0xc000215d86) returned 1
	[0206.863] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215de3 | out: pbBuffer=0xc000215de3) returned 1
	[0206.863] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0206.863] GetFileType (hFile=0x17c) returned 0x1
	[0206.864] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=4984) returned 1
	[0206.864] WriteFile (in: hFile=0x17c, lpBuffer=0xc000360000*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000360000*, lpNumberOfBytesWritten=0xc000411ccc*=0x1378, lpOverlapped=0xc000411ce8) returned 1
	[0206.864] GetFileType (hFile=0x17c) returned 0x1
	[0206.865] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1378, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=4984) returned 1
	[0206.865] GetFileType (hFile=0x17c) returned 0x1
	[0206.865] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=4984) returned 1
	[0206.865] WriteFile (in: hFile=0x17c, lpBuffer=0xc000354e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000354e00*, lpNumberOfBytesWritten=0xc000411ccc*=0x22d, lpOverlapped=0xc000411ce8) returned 1
	[0206.865] GetFileType (hFile=0x17c) returned 0x1
	[0206.866] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1378, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=4984) returned 1
	[0206.866] CloseHandle (hObject=0x17c) returned 1
	[0206.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf.egmwv")) returned 0x20
	[0206.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.884] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.889] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.914] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.934] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.950] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.966] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0207.259] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0207.276] SetEvent (hEvent=0xe4) returned 1
	[0207.276] SetEvent (hEvent=0x60) returned 1
	[0207.277] SetEvent (hEvent=0xc0) returned 1
	[0207.277] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0207.280] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0207.280] SetEvent (hEvent=0xc0) returned 1
	[0207.280] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x1) returned 0x102
	[0207.283] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0207.283] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0207.655] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0207.658] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0208.000] SetEvent (hEvent=0x90) returned 1
	[0208.000] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0208.303] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0208.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x20
	[0208.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x20) returned 1
	[0208.313] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0208.359] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0208.370] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0208.370] SetEvent (hEvent=0xc0) returned 1
	[0208.370] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0212.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf")) returned 0x20
	[0212.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF", dwFileAttributes=0x20) returned 1
	[0212.577] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0212.579] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec
	[0212.781] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0212.781] SetEvent (hEvent=0x14c) returned 1
	[0212.781] ReadFile (in: hFile=0xec, lpBuffer=0xc000218000, nNumberOfBytesToRead=0x35d8, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc000193cec*=0x35d8, lpOverlapped=0x0) returned 1
	[0212.788] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65c0 | out: pbBuffer=0xc0002b65c0) returned 1
	[0212.788] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65da | out: pbBuffer=0xc0002b65da) returned 1
	[0212.788] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000230502 | out: pbBuffer=0xc000230502) returned 1
	[0212.788] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6600 | out: pbBuffer=0xc0002b6600) returned 1
	[0212.788] GetFileType (hFile=0xec) returned 0x1
	[0212.788] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=13784) returned 1
	[0212.789] WriteFile (in: hFile=0xec, lpBuffer=0xc000246000*, nNumberOfBytesToWrite=0x35d8, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc000246000*, lpNumberOfBytesWritten=0xc000377ccc*=0x35d8, lpOverlapped=0xc000377ce8) returned 1
	[0212.789] GetFileType (hFile=0xec) returned 0x1
	[0212.789] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x35d8, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=13784) returned 1
	[0212.790] GetFileType (hFile=0xec) returned 0x1
	[0212.790] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=13784) returned 1
	[0212.790] WriteFile (in: hFile=0xec, lpBuffer=0xc00024a000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc00024a000*, lpNumberOfBytesWritten=0xc000377ccc*=0x230, lpOverlapped=0xc000377ce8) returned 1
	[0212.790] GetFileType (hFile=0xec) returned 0x1
	[0212.790] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x35d8, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=13784) returned 1
	[0212.790] CloseHandle (hObject=0xec) returned 1
	[0212.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf.egmwv")) returned 0x20
	[0212.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.821] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) 

Thread:
	id = 33
	os_tid = 0x96c

	[0072.714] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x479feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x479feb0*=0xa4) returned 1
	[0072.714] VirtualQuery (in: lpAddress=0x479fed0, lpBuffer=0x479fed0, dwLength=0x30 | out: lpBuffer=0x479fed0*(BaseAddress=0x479f000, AllocationBase=0x45a0000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0072.715] SetEvent (hEvent=0x60) returned 1
	[0072.715] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe4
	[0072.715] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.364] SetEvent (hEvent=0x90) returned 1
	[0073.365] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", dwFileAttributes=0x2020) returned 1
	[0073.366] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.egmwv"), dwFlags=0x1) returned 1
	[0073.368] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec
	[0073.369] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0xc000163cc4 | out: lpMode=0xc000163cc4) returned 0
	[0073.369] VirtualAlloc (lpAddress=0xc000242000, dwSize=0x2c000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000242000
	[0073.380] VirtualAlloc (lpAddress=0xc000184000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000184000
	[0073.380] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.252] SetEvent (hEvent=0xac) returned 1
	[0075.318] SwitchToThread () returned 1
	[0075.343] SetEvent (hEvent=0xac) returned 1
	[0075.343] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.574] SwitchToThread () returned 1
	[0075.930] SetEvent (hEvent=0xac) returned 1
	[0075.930] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.436] SwitchToThread () returned 1
	[0077.006] VirtualAlloc (lpAddress=0xc00020a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020a000
	[0077.761] SetEvent (hEvent=0xb0) returned 1
	[0077.761] SetEvent (hEvent=0x90) returned 1
	[0077.762] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.156] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.277] SetEvent (hEvent=0x5c) returned 1
	[0078.277] SetEvent (hEvent=0xb0) returned 1
	[0078.278] GetFileType (hFile=0xdc) returned 0x1
	[0078.278] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc000197ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000197ca0*=1608) returned 1
	[0078.278] WriteFile (in: hFile=0xdc, lpBuffer=0xc00027e000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000197ccc, lpOverlapped=0xc000197ce8 | out: lpBuffer=0xc00027e000*, lpNumberOfBytesWritten=0xc000197ccc*=0x224, lpOverlapped=0xc000197ce8) returned 1
	[0078.279] GetFileType (hFile=0xdc) returned 0x1
	[0078.279] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x648, lpNewFilePointer=0xc000197ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000197ca0*=1608) returned 1
	[0078.279] CloseHandle (hObject=0xdc) returned 1
	[0078.282] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0078.284] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0078.286] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc
	[0078.287] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0078.290] ReadFile (in: hFile=0xdc, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0x30f94, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc000173cec*=0x30f94, lpOverlapped=0x0) returned 1
	[0078.438] SwitchToThread () returned 1
	[0078.772] VirtualAlloc (lpAddress=0xc000416000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000416000
	[0078.774] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a120 | out: pbBuffer=0xc00041a120) returned 1
	[0078.776] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a13a | out: pbBuffer=0xc00041a13a) returned 1
	[0078.776] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0078.776] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038b20 | out: pbBuffer=0xc000038b20) returned 1
	[0078.776] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a160 | out: pbBuffer=0xc00041a160) returned 1
	[0078.780] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000
	[0078.781] VirtualAlloc (lpAddress=0xc0000d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d8000
	[0078.783] VirtualAlloc (lpAddress=0xc000682000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000682000
	[0078.801] VirtualAlloc (lpAddress=0xc0006c0000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0006c0000
	[0078.946] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0078.947] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0078.947] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0078.948] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0078.948] VirtualAlloc (lpAddress=0xc000780000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000780000
	[0078.964] SetEvent (hEvent=0xb0) returned 1
	[0078.964] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.621] SetEvent (hEvent=0x68) returned 1
	[0085.621] SwitchToThread () returned 1
	[0085.807] SetEvent (hEvent=0x68) returned 1
	[0085.808] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.916] SetEvent (hEvent=0x68) returned 1
	[0085.916] SetEvent (hEvent=0x5c) returned 1
	[0085.916] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi")) returned 0x2020
	[0085.917] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", dwFileAttributes=0x2020) returned 1
	[0085.918] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.egmwv"), dwFlags=0x1) returned 1
	[0085.921] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec
	[0085.921] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0xc00038bcc4 | out: lpMode=0xc00038bcc4) returned 0
	[0085.923] ReadFile (in: hFile=0xec, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x2b1c7, lpNumberOfBytesRead=0xc00038bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc00038bcec*=0x2b1c7, lpOverlapped=0x0) returned 1
	[0086.158] SwitchToThread () returned 1
	[0086.267] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.641] SetEvent (hEvent=0x5c) returned 1
	[0086.641] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.728] SetEvent (hEvent=0x90) returned 1
	[0086.728] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0102.761] SetEvent (hEvent=0xac) returned 1
	[0102.761] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0111.236] SwitchToThread () returned 1
	[0111.429] VirtualAlloc (lpAddress=0xc00097e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00097e000
	[0111.429] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0112.143] SetEvent (hEvent=0x90) returned 1
	[0112.143] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0112.423] SetEvent (hEvent=0xb0) returned 1
	[0112.423] SwitchToThread () returned 1
	[0112.531] SetEvent (hEvent=0xb0) returned 1
	[0112.531] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0112.629] SetEvent (hEvent=0xb0) returned 1
	[0112.629] SetEvent (hEvent=0xac) returned 1
	[0112.629] SetEvent (hEvent=0x90) returned 1
	[0112.629] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0112.922] SetEvent (hEvent=0x60) returned 1
	[0112.922] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0117.718] SwitchToThread () returned 1
	[0117.789] VirtualAlloc (lpAddress=0xc000cb8000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cb8000
	[0117.875] VirtualFree (lpAddress=0xc000a86000, dwSize=0x80000, dwFreeType=0x4000) returned 1
	[0117.884] SetEvent (hEvent=0xc4) returned 1
	[0117.897] SwitchToThread () returned 1
	[0117.934] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.066] SetEvent (hEvent=0x68) returned 1
	[0118.066] SwitchToThread () returned 1
	[0118.068] SetEvent (hEvent=0x68) returned 1
	[0118.068] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.069] SetEvent (hEvent=0x68) returned 1
	[0118.069] SetEvent (hEvent=0xac) returned 1
	[0118.069] VirtualAlloc (lpAddress=0xc0007c0000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0118.069] VirtualAlloc (lpAddress=0xc0007c0000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0118.070] VirtualAlloc (lpAddress=0xc0007c0000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007c0000
	[0118.072] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000800000
	[0118.074] VirtualFree (lpAddress=0xc000216000, dwSize=0x6a000, dwFreeType=0x4000) returned 1
	[0118.177] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.egmwv")) returned 0x2020
	[0118.178] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0119.923] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0119.926] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0201.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf")) returned 0x20
	[0201.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x20) returned 1
	[0201.579] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.879] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc00039dcc4 | out: lpMode=0xc00039dcc4) returned 0
	[0201.879] ReadFile (in: hFile=0xd0, lpBuffer=0xc000444000, nNumberOfBytesToRead=0x928, lpNumberOfBytesRead=0xc00039dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000444000*, lpNumberOfBytesRead=0xc00039dcec*=0x928, lpOverlapped=0x0) returned 1
	[0201.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414a80 | out: pbBuffer=0xc000414a80) returned 1
	[0201.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000414a9a | out: pbBuffer=0xc000414a9a) returned 1
	[0201.889] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fd602 | out: pbBuffer=0xc0000fd602) returned 1
	[0201.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414ac0 | out: pbBuffer=0xc000414ac0) returned 1
	[0201.889] GetFileType (hFile=0xd0) returned 0x1
	[0201.889] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2344) returned 1
	[0201.890] WriteFile (in: hFile=0xd0, lpBuffer=0xc000391000*, nNumberOfBytesToWrite=0x928, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000391000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x928, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.890] GetFileType (hFile=0xd0) returned 0x1
	[0201.890] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x928, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2344) returned 1
	[0201.890] GetFileType (hFile=0xd0) returned 0x1
	[0201.890] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2344) returned 1
	[0201.891] WriteFile (in: hFile=0xd0, lpBuffer=0xc000394a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000394a80*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x224, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.891] GetFileType (hFile=0xd0) returned 0x1
	[0201.891] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x928, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2344) returned 1
	[0201.891] CloseHandle (hObject=0xd0) returned 1
	[0201.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf.egmwv")) returned 0x20
	[0201.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.911] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.003] SetEvent (hEvent=0x14c) returned 1
	[0202.003] SetEvent (hEvent=0x15c) returned 1
	[0202.003] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.275] SetEvent (hEvent=0x15c) returned 1
	[0202.275] SetEvent (hEvent=0x14c) returned 1
	[0202.275] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.483] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.487] SetEvent (hEvent=0xc8) returned 1
	[0202.487] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.488] SetEvent (hEvent=0xc8) returned 1
	[0202.488] SetEvent (hEvent=0x60) returned 1
	[0202.488] SwitchToThread () returned 1
	[0202.491] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.499] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.515] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.547] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.566] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.590] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.609] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.647] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.667] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.687] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.703] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.727] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.756] SetEvent (hEvent=0x60) returned 1
	[0202.756] SetEvent (hEvent=0xc8) returned 1
	[0202.756] SetEvent (hEvent=0x15c) returned 1
	[0202.756] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0202.760] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.760] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0202.763] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.763] SetEvent (hEvent=0x15c) returned 1
	[0202.763] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0202.766] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.766] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.210] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.225] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.231] SetEvent (hEvent=0xc8) returned 1
	[0203.231] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x20
	[0203.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x20) returned 1
	[0203.235] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180
	[0203.266] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0203.266] ReadFile (in: hFile=0x180, lpBuffer=0xc000448c00, nNumberOfBytesToRead=0xbc8, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000448c00*, lpNumberOfBytesRead=0xc000197cec*=0xbc8, lpOverlapped=0x0) returned 1
	[0203.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206db0 | out: pbBuffer=0xc000206db0) returned 1
	[0203.323] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00021f502 | out: pbBuffer=0xc00021f502) returned 1
	[0203.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021f54c | out: pbBuffer=0xc00021f54c) returned 1
	[0203.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206df0 | out: pbBuffer=0xc000206df0) returned 1
	[0203.323] GetFileType (hFile=0x180) returned 0x1
	[0203.324] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc000273ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000273ca0*=3016) returned 1
	[0203.324] WriteFile (in: hFile=0x180, lpBuffer=0xc0004ec000*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0xc000273ccc, lpOverlapped=0xc000273ce8 | out: lpBuffer=0xc0004ec000*, lpNumberOfBytesWritten=0xc000273ccc*=0xbc8, lpOverlapped=0xc000273ce8) returned 1
	[0203.324] GetFileType (hFile=0x180) returned 0x1
	[0203.324] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xbc8, lpNewFilePointer=0xc000273ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000273ca0*=3016) returned 1
	[0203.324] GetFileType (hFile=0x180) returned 0x1
	[0203.325] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc000273ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000273ca0*=3016) returned 1
	[0203.325] WriteFile (in: hFile=0x180, lpBuffer=0xc000277500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000273ccc, lpOverlapped=0xc000273ce8 | out: lpBuffer=0xc000277500*, lpNumberOfBytesWritten=0xc000273ccc*=0x22a, lpOverlapped=0xc000273ce8) returned 1
	[0203.325] GetFileType (hFile=0x180) returned 0x1
	[0203.325] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xbc8, lpNewFilePointer=0xc000273ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000273ca0*=3016) returned 1
	[0203.325] CloseHandle (hObject=0x180) returned 1
	[0203.336] SwitchToThread () returned 1
	[0203.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf.egmwv")) returned 0x20
	[0203.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.355] SetEvent (hEvent=0x150) returned 1
	[0203.355] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.368] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.374] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0203.374] ReadFile (in: hFile=0x164, lpBuffer=0xc000176000, nNumberOfBytesToRead=0x32c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000176000*, lpNumberOfBytesRead=0xc0002d7cec*=0x32c, lpOverlapped=0x0) returned 1
	[0203.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6100 | out: pbBuffer=0xc0002b6100) returned 1
	[0203.400] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b611a | out: pbBuffer=0xc0002b611a) returned 1
	[0203.400] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0203.400] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6140 | out: pbBuffer=0xc0002b6140) returned 1
	[0203.400] GetFileType (hFile=0x164) returned 0x1
	[0203.400] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=812) returned 1
	[0203.400] WriteFile (in: hFile=0x164, lpBuffer=0xc00048a000*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc00048a000*, lpNumberOfBytesWritten=0xc000175ccc*=0x32c, lpOverlapped=0xc000175ce8) returned 1
	[0203.401] GetFileType (hFile=0x164) returned 0x1
	[0203.401] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x32c, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=812) returned 1
	[0203.401] GetFileType (hFile=0x164) returned 0x1
	[0203.401] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=812) returned 1
	[0203.401] WriteFile (in: hFile=0x164, lpBuffer=0xc000177880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc000177880*, lpNumberOfBytesWritten=0xc000175ccc*=0x227, lpOverlapped=0xc000175ce8) returned 1
	[0203.401] GetFileType (hFile=0x164) returned 0x1
	[0203.402] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x32c, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=812) returned 1
	[0203.402] CloseHandle (hObject=0x164) returned 1
	[0203.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf.egmwv")) returned 0x20
	[0203.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.411] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.426] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.441] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.463] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x20
	[0203.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x20) returned 1
	[0203.486] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.523] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0203.523] ReadFile (in: hFile=0x17c, lpBuffer=0xc000102000, nNumberOfBytesToRead=0x1138, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000102000*, lpNumberOfBytesRead=0xc000197cec*=0x1138, lpOverlapped=0x0) returned 1
	[0203.535] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414420 | out: pbBuffer=0xc000414420) returned 1
	[0203.535] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001702 | out: pbBuffer=0xc000001702) returned 1
	[0203.535] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001749 | out: pbBuffer=0xc000001749) returned 1
	[0203.535] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414460 | out: pbBuffer=0xc000414460) returned 1
	[0203.535] GetFileType (hFile=0x17c) returned 0x1
	[0203.535] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=4408) returned 1
	[0203.536] WriteFile (in: hFile=0x17c, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000171ccc*=0x1138, lpOverlapped=0xc000171ce8) returned 1
	[0203.536] GetFileType (hFile=0x17c) returned 0x1
	[0203.537] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1138, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=4408) returned 1
	[0203.537] GetFileType (hFile=0x17c) returned 0x1
	[0203.537] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=4408) returned 1
	[0203.537] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001fc700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc0001fc700*, lpNumberOfBytesWritten=0xc000171ccc*=0x227, lpOverlapped=0xc000171ce8) returned 1
	[0203.537] GetFileType (hFile=0x17c) returned 0x1
	[0203.537] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1138, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=4408) returned 1
	[0203.537] CloseHandle (hObject=0x17c) returned 1
	[0203.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf.egmwv")) returned 0x20
	[0203.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.545] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.562] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.573] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.595] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.608] SetEvent (hEvent=0x60) returned 1
	[0203.608] SetEvent (hEvent=0x15c) returned 1
	[0203.609] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0203.611] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.611] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0203.612] SetEvent (hEvent=0xc0) returned 1
	[0203.613] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0203.614] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0204.037] SetEvent (hEvent=0x150) returned 1
	[0204.037] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0205.770] SetEvent (hEvent=0xc0) returned 1
	[0205.770] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0205.812] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.195] SetEvent (hEvent=0x90) returned 1
	[0206.195] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.406] SetEvent (hEvent=0x60) returned 1
	[0206.406] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.408] SetEvent (hEvent=0x60) returned 1
	[0206.408] SetEvent (hEvent=0xc8) returned 1
	[0206.409] SwitchToThread () returned 1
	[0206.410] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.414] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.441] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.482] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.490] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.506] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.537] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.556] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.566] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.584] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.615] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.633] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.642] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.660] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.690] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.710] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.724] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.740] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.754] SetEvent (hEvent=0xc8) returned 1
	[0206.755] SetEvent (hEvent=0x60) returned 1
	[0206.755] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0206.758] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.758] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0206.759] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.760] SetEvent (hEvent=0xc8) returned 1
	[0206.760] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0206.762] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.762] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.277] SetEvent (hEvent=0x90) returned 1
	[0207.277] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.655] SetEvent (hEvent=0xc0) returned 1
	[0207.655] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.657] SetEvent (hEvent=0xc0) returned 1
	[0207.658] SetEvent (hEvent=0xc8) returned 1
	[0207.658] SwitchToThread () returned 1
	[0207.659] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.671] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.687] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.713] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.731] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.747] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.759] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.784] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.802] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.811] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.830] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.853] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.871] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.884] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.896] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.927] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.947] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.954] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.975] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0207.999] SetEvent (hEvent=0xc8) returned 1
	[0207.999] SetEvent (hEvent=0xc0) returned 1
	[0208.000] SetEvent (hEvent=0x60) returned 1
	[0208.000] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0208.002] SetEvent (hEvent=0x60) returned 1
	[0208.002] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0208.004] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0208.288] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0208.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x20
	[0208.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x20) returned 1
	[0208.299] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.316] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0208.317] ReadFile (in: hFile=0x170, lpBuffer=0xc0003b4000, nNumberOfBytesToRead=0x6852, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b4000*, lpNumberOfBytesRead=0xc000389cec*=0x6852, lpOverlapped=0x0) returned 1
	[0208.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0208.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041446a | out: pbBuffer=0xc00041446a) returned 1
	[0208.323] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043f802 | out: pbBuffer=0xc00043f802) returned 1
	[0208.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043f86f | out: pbBuffer=0xc00043f86f) returned 1
	[0208.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414490 | out: pbBuffer=0xc000414490) returned 1
	[0208.324] GetFileType (hFile=0x170) returned 0x1
	[0208.324] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=26706) returned 1
	[0208.324] WriteFile (in: hFile=0x170, lpBuffer=0xc000142000*, nNumberOfBytesToWrite=0x6852, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000142000*, lpNumberOfBytesWritten=0xc000455ccc*=0x6852, lpOverlapped=0xc000455ce8) returned 1
	[0208.325] GetFileType (hFile=0x170) returned 0x1
	[0208.325] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6852, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=26706) returned 1
	[0208.325] GetFileType (hFile=0x170) returned 0x1
	[0208.325] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=26706) returned 1
	[0208.325] WriteFile (in: hFile=0x170, lpBuffer=0xc000112700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000112700*, lpNumberOfBytesWritten=0xc000455ccc*=0x22a, lpOverlapped=0xc000455ce8) returned 1
	[0208.326] GetFileType (hFile=0x170) returned 0x1
	[0208.326] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6852, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=26706) returned 1
	[0208.326] CloseHandle (hObject=0x170) returned 1
	[0208.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf.egmwv")) returned 0x20
	[0208.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.330] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0208.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x20
	[0208.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x20) returned 1
	[0208.359] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0208.367] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0208.402] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000241cc4 | out: lpMode=0xc000241cc4) returned 0
	[0208.402] ReadFile (in: hFile=0x174, lpBuffer=0xc00029a000, nNumberOfBytesToRead=0x1efc, lpNumberOfBytesRead=0xc000241cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029a000*, lpNumberOfBytesRead=0xc000241cec*=0x1efc, lpOverlapped=0x0) returned 1
	[0208.554] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0208.554] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fc802 | out: pbBuffer=0xc0000fc802) returned 1
	[0208.554] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000fc80f | out: pbBuffer=0xc0000fc80f) returned 1
	[0208.554] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0208.554] GetFileType (hFile=0x174) returned 0x1
	[0208.554] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=7932) returned 1
	[0208.555] WriteFile (in: hFile=0x174, lpBuffer=0xc00030a000*, nNumberOfBytesToWrite=0x1efc, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc00030a000*, lpNumberOfBytesWritten=0xc0001bbccc*=0x1efc, lpOverlapped=0xc0001bbce8) returned 1
	[0208.555] GetFileType (hFile=0x174) returned 0x1
	[0208.555] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x1efc, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=7932) returned 1
	[0208.555] GetFileType (hFile=0x174) returned 0x1
	[0208.555] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=7932) returned 1
	[0208.556] WriteFile (in: hFile=0x174, lpBuffer=0xc00010a700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc00010a700*, lpNumberOfBytesWritten=0xc0001bbccc*=0x236, lpOverlapped=0xc0001bbce8) returned 1
	[0208.556] GetFileType (hFile=0x174) returned 0x1
	[0208.556] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x1efc, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=7932) returned 1
	[0208.556] CloseHandle (hObject=0x174) returned 1
	[0208.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf.egmwv")) returned 0x20
	[0208.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.567] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0208.593] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0208.669] SetEvent (hEvent=0xc0) returned 1
	[0208.669] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.219] SetEvent (hEvent=0x150) returned 1
	[0210.219] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.523] SetEvent (hEvent=0xc0) returned 1
	[0210.523] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.538] SwitchToThread () returned 1
	[0210.540] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.555] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.579] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.608] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.628] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.636] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.660] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.683] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.699] SetEvent (hEvent=0x148) returned 1
	[0210.699] SetEvent (hEvent=0xc0) returned 1
	[0210.699] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0210.702] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0210.703] SetEvent (hEvent=0x148) returned 1
	[0210.703] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0210.713] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.713] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.951] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.955] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.086] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.089] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.090] SetEvent (hEvent=0x90) returned 1
	[0211.090] SetEvent (hEvent=0x5c) returned 1
	[0211.090] SwitchToThread () returned 1
	[0211.113] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.120] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.163] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf")) returned 0x20
	[0211.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF", dwFileAttributes=0x20) returned 1
	[0211.178] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.307] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0211.307] ReadFile (in: hFile=0xe0, lpBuffer=0xc0001e8000, nNumberOfBytesToRead=0x6978, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e8000*, lpNumberOfBytesRead=0xc000425cec*=0x6978, lpOverlapped=0x0) returned 1
	[0211.313] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0211.313] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ca | out: pbBuffer=0xc0002b62ca) returned 1
	[0211.313] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ac102 | out: pbBuffer=0xc0001ac102) returned 1
	[0211.313] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001ac175 | out: pbBuffer=0xc0001ac175) returned 1
	[0211.313] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0211.314] GetFileType (hFile=0xe0) returned 0x1
	[0211.314] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=27000) returned 1
	[0211.314] WriteFile (in: hFile=0xe0, lpBuffer=0xc000114000*, nNumberOfBytesToWrite=0x6978, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc000114000*, lpNumberOfBytesWritten=0xc00034dccc*=0x6978, lpOverlapped=0xc00034dce8) returned 1
	[0211.315] GetFileType (hFile=0xe0) returned 0x1
	[0211.315] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x6978, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=27000) returned 1
	[0211.315] GetFileType (hFile=0xe0) returned 0x1
	[0211.315] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=27000) returned 1
	[0211.315] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001aae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc0001aae00*, lpNumberOfBytesWritten=0xc00034dccc*=0x230, lpOverlapped=0xc00034dce8) returned 1
	[0211.316] GetFileType (hFile=0xe0) returned 0x1
	[0211.316] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x6978, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=27000) returned 1
	[0211.316] CloseHandle (hObject=0xe0) returned 1
	[0211.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf.egmwv")) returned 0x20
	[0211.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.318] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.329] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.333] SetEvent (hEvent=0x150) returned 1
	[0211.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf")) returned 0x20
	[0211.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF", dwFileAttributes=0x20) returned 1
	[0211.334] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.361] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0211.362] ReadFile (in: hFile=0x170, lpBuffer=0xc000221000, nNumberOfBytesToRead=0x43c0, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000221000*, lpNumberOfBytesRead=0xc000429cec*=0x43c0, lpOverlapped=0x0) returned 1
	[0211.369] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0211.369] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b646a | out: pbBuffer=0xc0002b646a) returned 1
	[0211.369] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ace02 | out: pbBuffer=0xc0001ace02) returned 1
	[0211.369] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001ace74 | out: pbBuffer=0xc0001ace74) returned 1
	[0211.369] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6490 | out: pbBuffer=0xc0002b6490) returned 1
	[0211.369] SetEvent (hEvent=0x150) returned 1
	[0211.370] GetFileType (hFile=0x170) returned 0x1
	[0211.370] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=17344) returned 1
	[0211.370] WriteFile (in: hFile=0x170, lpBuffer=0xc00024c000*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesWritten=0xc00034dccc*=0x43c0, lpOverlapped=0xc00034dce8) returned 1
	[0211.371] GetFileType (hFile=0x170) returned 0x1
	[0211.371] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x43c0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=17344) returned 1
	[0211.371] GetFileType (hFile=0x170) returned 0x1
	[0211.371] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=17344) returned 1
	[0211.371] WriteFile (in: hFile=0x170, lpBuffer=0xc00022c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc00022c700*, lpNumberOfBytesWritten=0xc00034dccc*=0x227, lpOverlapped=0xc00034dce8) returned 1
	[0211.371] GetFileType (hFile=0x170) returned 0x1
	[0211.372] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x43c0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=17344) returned 1
	[0211.372] CloseHandle (hObject=0x170) returned 1
	[0211.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf.egmwv")) returned 0x20
	[0211.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.379] SwitchToThread () returned 1
	[0211.381] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.386] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.431] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.470] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.504] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.518] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.535] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.550] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.564] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.590] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.608] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.617] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.628] SetEvent (hEvent=0x150) returned 1
	[0211.629] SetEvent (hEvent=0x90) returned 1
	[0211.629] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0211.632] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.632] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0211.634] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.634] SetEvent (hEvent=0x5c) returned 1
	[0211.635] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0211.637] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.637] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.929] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.932] SetEvent (hEvent=0x150) returned 1
	[0211.932] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.935] SetEvent (hEvent=0x150) returned 1
	[0211.935] SwitchToThread () returned 1
	[0211.937] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.941] SetEvent (hEvent=0x15c) returned 1
	[0211.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf")) returned 0x20
	[0211.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF", dwFileAttributes=0x20) returned 1
	[0211.943] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.974] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0211.974] ReadFile (in: hFile=0x178, lpBuffer=0xc000068000, nNumberOfBytesToRead=0x305c, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesRead=0xc00016bcec*=0x305c, lpOverlapped=0x0) returned 1
	[0211.979] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0211.980] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ca | out: pbBuffer=0xc0002b62ca) returned 1
	[0211.980] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0211.980] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021596d | out: pbBuffer=0xc00021596d) returned 1
	[0211.980] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002159e8 | out: pbBuffer=0xc0002159e8) returned 1
	[0211.980] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0211.980] GetFileType (hFile=0x178) returned 0x1
	[0211.980] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12380) returned 1
	[0211.981] WriteFile (in: hFile=0x178, lpBuffer=0xc0004a4000*, nNumberOfBytesToWrite=0x305c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004a4000*, lpNumberOfBytesWritten=0xc000155ccc*=0x305c, lpOverlapped=0xc000155ce8) returned 1
	[0211.981] GetFileType (hFile=0x178) returned 0x1
	[0211.981] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x305c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12380) returned 1
	[0211.981] GetFileType (hFile=0x178) returned 0x1
	[0211.982] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12380) returned 1
	[0211.982] WriteFile (in: hFile=0x178, lpBuffer=0xc000468e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000468e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0211.982] GetFileType (hFile=0x178) returned 0x1
	[0211.982] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x305c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12380) returned 1
	[0211.982] CloseHandle (hObject=0x178) returned 1
	[0211.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf.egmwv")) returned 0x20
	[0211.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.986] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf")) returned 0x20
	[0211.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF", dwFileAttributes=0x20) returned 1
	[0211.993] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.024] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0212.024] ReadFile (in: hFile=0x170, lpBuffer=0xc00034e000, nNumberOfBytesToRead=0x1210, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034e000*, lpNumberOfBytesRead=0xc000389cec*=0x1210, lpOverlapped=0x0) returned 1
	[0212.029] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0212.029] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b646a | out: pbBuffer=0xc0002b646a) returned 1
	[0212.029] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000145002 | out: pbBuffer=0xc000145002) returned 1
	[0212.030] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014505b | out: pbBuffer=0xc00014505b) returned 1
	[0212.030] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6490 | out: pbBuffer=0xc0002b6490) returned 1
	[0212.030] GetFileType (hFile=0x170) returned 0x1
	[0212.030] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4624) returned 1
	[0212.030] WriteFile (in: hFile=0x170, lpBuffer=0xc0003b2000*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003b2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1210, lpOverlapped=0xc000155ce8) returned 1
	[0212.031] GetFileType (hFile=0x170) returned 0x1
	[0212.031] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1210, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4624) returned 1
	[0212.031] GetFileType (hFile=0x170) returned 0x1
	[0212.031] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4624) returned 1
	[0212.031] WriteFile (in: hFile=0x170, lpBuffer=0xc0003a2700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003a2700*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0212.031] GetFileType (hFile=0x170) returned 0x1
	[0212.031] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1210, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4624) returned 1
	[0212.031] CloseHandle (hObject=0x170) returned 1
	[0212.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf.egmwv")) returned 0x20
	[0212.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.036] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf")) returned 0x20
	[0212.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF", dwFileAttributes=0x20) returned 1
	[0212.054] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.081] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0212.081] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003f8000, nNumberOfBytesToRead=0x203c, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f8000*, lpNumberOfBytesRead=0xc000429cec*=0x203c, lpOverlapped=0x0) returned 1
	[0212.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0212.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0212.087] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1102 | out: pbBuffer=0xc0002c1102) returned 1
	[0212.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0212.087] GetFileType (hFile=0xe0) returned 0x1
	[0212.087] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000127ca0*=8252) returned 1
	[0212.087] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002ec000*, nNumberOfBytesToWrite=0x203c, lpNumberOfBytesWritten=0xc000127ccc, lpOverlapped=0xc000127ce8 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesWritten=0xc000127ccc*=0x203c, lpOverlapped=0xc000127ce8) returned 1
	[0212.088] GetFileType (hFile=0xe0) returned 0x1
	[0212.088] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x203c, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000127ca0*=8252) returned 1
	[0212.088] GetFileType (hFile=0xe0) returned 0x1
	[0212.088] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000127ca0*=8252) returned 1
	[0212.089] WriteFile (in: hFile=0xe0, lpBuffer=0xc00012d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000127ccc, lpOverlapped=0xc000127ce8 | out: lpBuffer=0xc00012d500*, lpNumberOfBytesWritten=0xc000127ccc*=0x227, lpOverlapped=0xc000127ce8) returned 1
	[0212.089] GetFileType (hFile=0xe0) returned 0x1
	[0212.089] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x203c, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000127ca0*=8252) returned 1
	[0212.089] CloseHandle (hObject=0xe0) returned 1
	[0212.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf.egmwv")) returned 0x20
	[0212.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.092] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.105] SetEvent (hEvent=0x15c) returned 1
	[0212.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf")) returned 0x20
	[0212.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF", dwFileAttributes=0x20) returned 1
	[0212.107] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.137] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0212.137] ReadFile (in: hFile=0xe0, lpBuffer=0xc00025a000, nNumberOfBytesToRead=0xd00, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00025a000*, lpNumberOfBytesRead=0xc000389cec*=0xd00, lpOverlapped=0x0) returned 1
	[0212.147] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0212.147] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000354c02 | out: pbBuffer=0xc000354c02) returned 1
	[0212.148] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000354c4a | out: pbBuffer=0xc000354c4a) returned 1
	[0212.148] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0212.148] GetFileType (hFile=0xe0) returned 0x1
	[0212.148] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3328) returned 1
	[0212.148] WriteFile (in: hFile=0xe0, lpBuffer=0xc000282000*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000282000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0xd00, lpOverlapped=0xc0001a1ce8) returned 1
	[0212.149] GetFileType (hFile=0xe0) returned 0x1
	[0212.149] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xd00, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3328) returned 1
	[0212.149] GetFileType (hFile=0xe0) returned 0x1
	[0212.149] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=3328) returned 1
	[0212.149] WriteFile (in: hFile=0xe0, lpBuffer=0xc000477880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000477880*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x221, lpOverlapped=0xc0001a1ce8) returned 1
	[0212.150] GetFileType (hFile=0xe0) returned 0x1
	[0212.150] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xd00, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=3328) returned 1
	[0212.150] CloseHandle (hObject=0xe0) returned 1
	[0212.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf.egmwv")) returned 0x20
	[0212.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.152] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf")) returned 0x20
	[0212.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF", dwFileAttributes=0x20) returned 1
	[0212.158] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.197] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0212.197] ReadFile (in: hFile=0x178, lpBuffer=0xc0004a0000, nNumberOfBytesToRead=0x1864, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004a0000*, lpNumberOfBytesRead=0xc000389cec*=0x1864, lpOverlapped=0x0) returned 1
	[0212.202] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0212.202] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0212.203] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0212.203] GetFileType (hFile=0x178) returned 0x1
	[0212.203] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6244) returned 1
	[0212.203] WriteFile (in: hFile=0x178, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0x1864, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1864, lpOverlapped=0xc000155ce8) returned 1
	[0212.203] GetFileType (hFile=0x178) returned 0x1
	[0212.204] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1864, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6244) returned 1
	[0212.204] GetFileType (hFile=0x178) returned 0x1
	[0212.204] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6244) returned 1
	[0212.204] WriteFile (in: hFile=0x178, lpBuffer=0xc0001f7880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f7880*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0212.204] GetFileType (hFile=0x178) returned 0x1
	[0212.204] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1864, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6244) returned 1
	[0212.205] CloseHandle (hObject=0x178) returned 1
	[0212.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf.egmwv")) returned 0x20
	[0212.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.210] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.214] SetEvent (hEvent=0x5c) returned 1
	[0212.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf")) returned 0x20
	[0212.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF", dwFileAttributes=0x20) returned 1
	[0212.215] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.252] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0212.252] ReadFile (in: hFile=0x170, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0x1560, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc000389cec*=0x1560, lpOverlapped=0x0) returned 1
	[0212.259] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0212.259] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0212.259] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215989 | out: pbBuffer=0xc000215989) returned 1
	[0212.259] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0212.259] GetFileType (hFile=0x170) returned 0x1
	[0212.259] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c5ca0*=5472) returned 1
	[0212.259] WriteFile (in: hFile=0x170, lpBuffer=0xc00030a000*, nNumberOfBytesToWrite=0x1560, lpNumberOfBytesWritten=0xc0002c5ccc, lpOverlapped=0xc0002c5ce8 | out: lpBuffer=0xc00030a000*, lpNumberOfBytesWritten=0xc0002c5ccc*=0x1560, lpOverlapped=0xc0002c5ce8) returned 1
	[0212.260] GetFileType (hFile=0x170) returned 0x1
	[0212.260] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1560, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c5ca0*=5472) returned 1
	[0212.260] GetFileType (hFile=0x170) returned 0x1
	[0212.260] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c5ca0*=5472) returned 1
	[0212.260] WriteFile (in: hFile=0x170, lpBuffer=0xc0000f0e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002c5ccc, lpOverlapped=0xc0002c5ce8 | out: lpBuffer=0xc0000f0e00*, lpNumberOfBytesWritten=0xc0002c5ccc*=0x227, lpOverlapped=0xc0002c5ce8) returned 1
	[0212.261] GetFileType (hFile=0x170) returned 0x1
	[0212.261] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1560, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c5ca0*=5472) returned 1
	[0212.261] CloseHandle (hObject=0x170) returned 1
	[0212.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf.egmwv")) returned 0x20
	[0212.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.264] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.273] SetEvent (hEvent=0x5c) returned 1
	[0212.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf")) returned 0x20
	[0212.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF", dwFileAttributes=0x20) returned 1
	[0212.275] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.306] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0212.306] ReadFile (in: hFile=0x178, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x7c44, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc00038dcec*=0x7c44, lpOverlapped=0x0) returned 1
	[0212.312] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ea0 | out: pbBuffer=0xc000052ea0) returned 1
	[0212.312] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000284e02 | out: pbBuffer=0xc000284e02) returned 1
	[0212.312] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ee0 | out: pbBuffer=0xc000052ee0) returned 1
	[0212.313] GetFileType (hFile=0x178) returned 0x1
	[0212.313] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=31812) returned 1
	[0212.313] WriteFile (in: hFile=0x178, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x7c44, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x7c44, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.314] GetFileType (hFile=0x178) returned 0x1
	[0212.314] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7c44, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=31812) returned 1
	[0212.314] GetFileType (hFile=0x178) returned 0x1
	[0212.314] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=31812) returned 1
	[0212.314] WriteFile (in: hFile=0x178, lpBuffer=0xc0002aa700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc0002aa700*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x22d, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.315] GetFileType (hFile=0x178) returned 0x1
	[0212.315] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7c44, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=31812) returned 1
	[0212.315] CloseHandle (hObject=0x178) returned 1
	[0212.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf.egmwv")) returned 0x20
	[0212.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.316] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.330] SetEvent (hEvent=0x148) returned 1
	[0212.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf")) returned 0x20
	[0212.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF", dwFileAttributes=0x20) returned 1
	[0212.336] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.369] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0212.369] ReadFile (in: hFile=0x178, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x542c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000387cec*=0x542c, lpOverlapped=0x0) returned 1
	[0212.375] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053020 | out: pbBuffer=0xc000053020) returned 1
	[0212.375] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005303a | out: pbBuffer=0xc00005303a) returned 1
	[0212.375] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000285a02 | out: pbBuffer=0xc000285a02) returned 1
	[0212.375] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053060 | out: pbBuffer=0xc000053060) returned 1
	[0212.376] GetFileType (hFile=0x178) returned 0x1
	[0212.376] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=21548) returned 1
	[0212.376] WriteFile (in: hFile=0x178, lpBuffer=0xc00042e000*, nNumberOfBytesToWrite=0x542c, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc00042e000*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x542c, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.377] GetFileType (hFile=0x178) returned 0x1
	[0212.377] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x542c, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=21548) returned 1
	[0212.377] GetFileType (hFile=0x178) returned 0x1
	[0212.377] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=21548) returned 1
	[0212.377] WriteFile (in: hFile=0x178, lpBuffer=0xc000436000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc000436000*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x22a, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.378] GetFileType (hFile=0x178) returned 0x1
	[0212.378] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x542c, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=21548) returned 1
	[0212.378] CloseHandle (hObject=0x178) returned 1
	[0212.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf.egmwv")) returned 0x20
	[0212.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.380] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.384] SetEvent (hEvent=0x148) returned 1
	[0212.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf")) returned 0x20
	[0212.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF", dwFileAttributes=0x20) returned 1
	[0212.386] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.422] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0212.422] ReadFile (in: hFile=0x170, lpBuffer=0xc000250000, nNumberOfBytesToRead=0x35f0, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000250000*, lpNumberOfBytesRead=0xc000387cec*=0x35f0, lpOverlapped=0x0) returned 1
	[0212.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206590 | out: pbBuffer=0xc000206590) returned 1
	[0212.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065aa | out: pbBuffer=0xc0002065aa) returned 1
	[0212.428] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ffd02 | out: pbBuffer=0xc0000ffd02) returned 1
	[0212.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000ffd66 | out: pbBuffer=0xc0000ffd66) returned 1
	[0212.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000ffd99 | out: pbBuffer=0xc0000ffd99) returned 1
	[0212.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065d0 | out: pbBuffer=0xc0002065d0) returned 1
	[0212.429] GetFileType (hFile=0x170) returned 0x1
	[0212.429] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=13808) returned 1
	[0212.429] WriteFile (in: hFile=0x170, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x35f0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc000155ccc*=0x35f0, lpOverlapped=0xc000155ce8) returned 1
	[0212.429] GetFileType (hFile=0x170) returned 0x1
	[0212.430] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x35f0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=13808) returned 1
	[0212.430] GetFileType (hFile=0x170) returned 0x1
	[0212.430] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=13808) returned 1
	[0212.430] WriteFile (in: hFile=0x170, lpBuffer=0xc000118380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000118380*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0212.430] GetFileType (hFile=0x170) returned 0x1
	[0212.431] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x35f0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=13808) returned 1
	[0212.431] CloseHandle (hObject=0x170) returned 1
	[0212.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf.egmwv")) returned 0x20
	[0212.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.480] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.484] SetEvent (hEvent=0x54) returned 1
	[0212.484] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.489] SetEvent (hEvent=0x148) returned 1
	[0212.489] SetEvent (hEvent=0x5c) returned 1
	[0212.490] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.500] SetEvent (hEvent=0x148) returned 1
	[0212.500] SetEvent (hEvent=0x15c) returned 1
	[0212.501] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0212.516] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0212.520] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0212.523] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.523] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0212.525] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.525] SetEvent (hEvent=0x70) returned 1
	[0212.525] SetEvent (hEvent=0x5c) returned 1
	[0212.525] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0212.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf")) returned 0x20
	[0212.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF", dwFileAttributes=0x20) returned 1
	[0212.527] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.529] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000149cc4 | out: lpMode=0xc000149cc4) returned 0
	[0212.529] ReadFile (in: hFile=0x170, lpBuffer=0xc000200000, nNumberOfBytesToRead=0x1dd0, lpNumberOfBytesRead=0xc000149cec, lpOverlapped=0x0 | out: lpBuffer=0xc000200000*, lpNumberOfBytesRead=0xc000149cec*=0x1dd0, lpOverlapped=0x0) returned 1
	[0212.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0212.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0212.544] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00012de02 | out: pbBuffer=0xc00012de02) returned 1
	[0212.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0212.545] GetFileType (hFile=0x170) returned 0x1
	[0212.545] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7632) returned 1
	[0212.545] WriteFile (in: hFile=0x170, lpBuffer=0xc000394000*, nNumberOfBytesToWrite=0x1dd0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000394000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1dd0, lpOverlapped=0xc000155ce8) returned 1
	[0212.545] GetFileType (hFile=0x170) returned 0x1
	[0212.545] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1dd0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7632) returned 1
	[0212.545] GetFileType (hFile=0x170) returned 0x1
	[0212.546] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7632) returned 1
	[0212.546] WriteFile (in: hFile=0x170, lpBuffer=0xc000118380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000118380*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0212.546] GetFileType (hFile=0x170) returned 0x1
	[0212.546] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1dd0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7632) returned 1
	[0212.546] CloseHandle (hObject=0x170) returned 1
	[0212.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf.egmwv")) returned 0x20
	[0212.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf")) returned 0x20
	[0212.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF", dwFileAttributes=0x20) returned 1
	[0212.547] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.633] SetEvent (hEvent=0x70) returned 1
	[0212.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.635] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0212.635] ReadFile (in: hFile=0x170, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x3490, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc00016bcec*=0x3490, lpOverlapped=0x0) returned 1
	[0212.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414120 | out: pbBuffer=0xc000414120) returned 1
	[0212.641] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1c02 | out: pbBuffer=0xc0002c1c02) returned 1
	[0212.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1c19 | out: pbBuffer=0xc0002c1c19) returned 1
	[0212.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414160 | out: pbBuffer=0xc000414160) returned 1
	[0212.642] GetFileType (hFile=0x170) returned 0x1
	[0212.642] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=13456) returned 1
	[0212.642] WriteFile (in: hFile=0x170, lpBuffer=0xc00012e000*, nNumberOfBytesToWrite=0x3490, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesWritten=0xc00017fccc*=0x3490, lpOverlapped=0xc00017fce8) returned 1
	[0212.642] GetFileType (hFile=0x170) returned 0x1
	[0212.643] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3490, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=13456) returned 1
	[0212.643] GetFileType (hFile=0x170) returned 0x1
	[0212.643] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=13456) returned 1
	[0212.643] WriteFile (in: hFile=0x170, lpBuffer=0xc0000ef500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0000ef500*, lpNumberOfBytesWritten=0xc00017fccc*=0x227, lpOverlapped=0xc00017fce8) returned 1
	[0212.643] GetFileType (hFile=0x170) returned 0x1
	[0212.643] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3490, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=13456) returned 1
	[0212.643] CloseHandle (hObject=0x170) returned 1
	[0212.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf.egmwv")) returned 0x20
	[0212.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.645] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.648] SetEvent (hEvent=0x100) returned 1
	[0212.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf")) returned 0x20
	[0212.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF", dwFileAttributes=0x20) returned 1
	[0212.649] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0212.934] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0212.934] ReadFile (in: hFile=0x130, lpBuffer=0xc00032c000, nNumberOfBytesToRead=0x3ee4, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00032c000*, lpNumberOfBytesRead=0xc00016bcec*=0x3ee4, lpOverlapped=0x0) returned 1
	[0212.939] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206900 | out: pbBuffer=0xc000206900) returned 1
	[0212.939] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000265702 | out: pbBuffer=0xc000265702) returned 1
	[0212.939] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000265768 | out: pbBuffer=0xc000265768) returned 1
	[0212.939] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026578a | out: pbBuffer=0xc00026578a) returned 1
	[0212.939] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002657cb | out: pbBuffer=0xc0002657cb) returned 1
	[0212.939] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206940 | out: pbBuffer=0xc000206940) returned 1
	[0212.939] GetFileType (hFile=0x130) returned 0x1
	[0212.940] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=16100) returned 1
	[0212.940] WriteFile (in: hFile=0x130, lpBuffer=0xc0001f6000*, nNumberOfBytesToWrite=0x3ee4, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0001f6000*, lpNumberOfBytesWritten=0xc000377ccc*=0x3ee4, lpOverlapped=0xc000377ce8) returned 1
	[0212.940] GetFileType (hFile=0x130) returned 0x1
	[0212.940] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3ee4, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=16100) returned 1
	[0212.940] GetFileType (hFile=0x130) returned 0x1
	[0212.941] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=16100) returned 1
	[0212.941] WriteFile (in: hFile=0x130, lpBuffer=0xc00033e380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc00033e380*, lpNumberOfBytesWritten=0xc000377ccc*=0x233, lpOverlapped=0xc000377ce8) returned 1
	[0212.941] GetFileType (hFile=0x130) returned 0x1
	[0212.941] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x3ee4, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=16100) returned 1
	[0212.942] CloseHandle (hObject=0x130) returned 1
	[0212.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf.egmwv")) returned 0x20
	[0212.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.944] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.947] SetEvent (hEvent=0x144) returned 1
	[0212.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf")) returned 0x20
	[0212.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF", dwFileAttributes=0x20) returned 1
	[0212.949] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.987] SetEvent (hEvent=0x70) returned 1
	[0212.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0212.988] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000149cc4 | out: lpMode=0xc000149cc4) returned 0
	[0212.988] ReadFile (in: hFile=0x164, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x4ef4, lpNumberOfBytesRead=0xc000149cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc000149cec*=0x4ef4, lpOverlapped=0x0) returned 1
	[0212.994] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6100 | out: pbBuffer=0xc0002b6100) returned 1
	[0212.994] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b611a | out: pbBuffer=0xc0002b611a) returned 1
	[0212.994] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0212.994] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000392a2 | out: pbBuffer=0xc0000392a2) returned 1
	[0212.994] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6140 | out: pbBuffer=0xc0002b6140) returned 1
	[0212.995] GetFileType (hFile=0x164) returned 0x1
	[0212.995] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=20212) returned 1
	[0212.995] WriteFile (in: hFile=0x164, lpBuffer=0xc0003a2000*, nNumberOfBytesToWrite=0x4ef4, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4ef4, lpOverlapped=0xc000155ce8) returned 1
	[0212.995] GetFileType (hFile=0x164) returned 0x1
	[0212.996] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4ef4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=20212) returned 1
	[0212.996] GetFileType (hFile=0x164) returned 0x1
	[0212.996] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=20212) returned 1
	[0212.996] WriteFile (in: hFile=0x164, lpBuffer=0xc00033f500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00033f500*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0212.996] GetFileType (hFile=0x164) returned 0x1
	[0212.997] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4ef4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=20212) returned 1
	[0212.997] CloseHandle (hObject=0x164) returned 1
	[0212.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf.egmwv")) returned 0x20
	[0212.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.001] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf")) returned 0x20
	[0213.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF", dwFileAttributes=0x20) returned 1
	[0213.014] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.041] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000145cc4 | out: lpMode=0xc000145cc4) returned 0
	[0213.041] ReadFile (in: hFile=0x164, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1498, lpNumberOfBytesRead=0xc000145cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000145cec*=0x1498, lpOverlapped=0x0) returned 1
	[0213.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0213.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b644a | out: pbBuffer=0xc0002b644a) returned 1
	[0213.047] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000212902 | out: pbBuffer=0xc000212902) returned 1
	[0213.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0213.047] GetFileType (hFile=0x164) returned 0x1
	[0213.047] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5272) returned 1
	[0213.047] WriteFile (in: hFile=0x164, lpBuffer=0xc000310000*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000310000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1498, lpOverlapped=0xc000155ce8) returned 1
	[0213.048] GetFileType (hFile=0x164) returned 0x1
	[0213.048] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1498, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5272) returned 1
	[0213.048] GetFileType (hFile=0x164) returned 0x1
	[0213.048] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5272) returned 1
	[0213.048] WriteFile (in: hFile=0x164, lpBuffer=0xc00016ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00016ea80*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0213.049] GetFileType (hFile=0x164) returned 0x1
	[0213.049] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1498, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5272) returned 1
	[0213.049] CloseHandle (hObject=0x164) returned 1
	[0213.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf.egmwv")) returned 0x20
	[0213.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.050] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf")) returned 0x20
	[0213.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF", dwFileAttributes=0x20) returned 1
	[0213.065] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.091] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0213.092] ReadFile (in: hFile=0x164, lpBuffer=0xc00036a000, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00036a000*, lpNumberOfBytesRead=0xc00038dcec*=0x3734, lpOverlapped=0x0) returned 1
	[0213.097] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b80 | out: pbBuffer=0xc000052b80) returned 1
	[0213.098] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215202 | out: pbBuffer=0xc000215202) returned 1
	[0213.098] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bc0 | out: pbBuffer=0xc000052bc0) returned 1
	[0213.098] GetFileType (hFile=0x164) returned 0x1
	[0213.098] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=14132) returned 1
	[0213.098] WriteFile (in: hFile=0x164, lpBuffer=0xc0004b8000*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0004b8000*, lpNumberOfBytesWritten=0xc000351ccc*=0x3734, lpOverlapped=0xc000351ce8) returned 1
	[0213.099] GetFileType (hFile=0x164) returned 0x1
	[0213.099] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3734, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=14132) returned 1
	[0213.099] GetFileType (hFile=0x164) returned 0x1
	[0213.099] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=14132) returned 1
	[0213.099] WriteFile (in: hFile=0x164, lpBuffer=0xc000359500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000359500*, lpNumberOfBytesWritten=0xc000351ccc*=0x230, lpOverlapped=0xc000351ce8) returned 1
	[0213.100] GetFileType (hFile=0x164) returned 0x1
	[0213.100] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3734, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=14132) returned 1
	[0213.100] CloseHandle (hObject=0x164) returned 1
	[0213.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf.egmwv")) returned 0x20
	[0213.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.102] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.106] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.109] SetEvent (hEvent=0xc4) returned 1
	[0213.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf")) returned 0x20
	[0213.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF", dwFileAttributes=0x20) returned 1
	[0213.111] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.139] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0213.139] ReadFile (in: hFile=0x170, lpBuffer=0xc00043c000, nNumberOfBytesToRead=0x99c, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc00043c000*, lpNumberOfBytesRead=0xc000147cec*=0x99c, lpOverlapped=0x0) returned 1
	[0213.146] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0213.146] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0213.146] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215f02 | out: pbBuffer=0xc000215f02) returned 1
	[0213.147] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215fc6 | out: pbBuffer=0xc000215fc6) returned 1
	[0213.147] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0213.147] GetFileType (hFile=0x170) returned 0x1
	[0213.147] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=2460) returned 1
	[0213.147] WriteFile (in: hFile=0x170, lpBuffer=0xc000458000*, nNumberOfBytesToWrite=0x99c, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000458000*, lpNumberOfBytesWritten=0xc000351ccc*=0x99c, lpOverlapped=0xc000351ce8) returned 1
	[0213.147] GetFileType (hFile=0x170) returned 0x1
	[0213.148] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x99c, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=2460) returned 1
	[0213.148] GetFileType (hFile=0x170) returned 0x1
	[0213.148] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=2460) returned 1
	[0213.148] WriteFile (in: hFile=0x170, lpBuffer=0xc00044ae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc00044ae00*, lpNumberOfBytesWritten=0xc000351ccc*=0x22a, lpOverlapped=0xc000351ce8) returned 1
	[0213.148] GetFileType (hFile=0x170) returned 0x1
	[0213.149] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x99c, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=2460) returned 1
	[0213.149] CloseHandle (hObject=0x170) returned 1
	[0213.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf.egmwv")) returned 0x20
	[0213.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.156] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf")) returned 0x20
	[0213.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF", dwFileAttributes=0x20) returned 1
	[0213.162] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.201] SetEvent (hEvent=0x70) returned 1
	[0213.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0213.202] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0213.202] ReadFile (in: hFile=0x130, lpBuffer=0xc000132000, nNumberOfBytesToRead=0x2a64, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000132000*, lpNumberOfBytesRead=0xc0002d7cec*=0x2a64, lpOverlapped=0x0) returned 1
	[0213.208] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0213.208] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00044ee02 | out: pbBuffer=0xc00044ee02) returned 1
	[0213.208] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0213.208] GetFileType (hFile=0x130) returned 0x1
	[0213.208] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=10852) returned 1
	[0213.209] WriteFile (in: hFile=0x130, lpBuffer=0xc0001e4000*, nNumberOfBytesToWrite=0x2a64, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesWritten=0xc000351ccc*=0x2a64, lpOverlapped=0xc000351ce8) returned 1
	[0213.209] GetFileType (hFile=0x130) returned 0x1
	[0213.209] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x2a64, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=10852) returned 1
	[0213.209] GetFileType (hFile=0x130) returned 0x1
	[0213.209] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=10852) returned 1
	[0213.210] WriteFile (in: hFile=0x130, lpBuffer=0xc0001d2700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0001d2700*, lpNumberOfBytesWritten=0xc000351ccc*=0x22a, lpOverlapped=0xc000351ce8) returned 1
	[0213.210] GetFileType (hFile=0x130) returned 0x1
	[0213.210] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x2a64, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=10852) returned 1
	[0213.210] CloseHandle (hObject=0x130) returned 1
	[0213.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf.egmwv")) returned 0x20
	[0213.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.213] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf")) returned 0x20
	[0213.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF", dwFileAttributes=0x20) returned 1
	[0213.227] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.256] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00014bcc4 | out: lpMode=0xc00014bcc4) returned 0
	[0213.256] ReadFile (in: hFile=0x164, lpBuffer=0xc000174600, nNumberOfBytesToRead=0x1094, lpNumberOfBytesRead=0xc00014bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000174600*, lpNumberOfBytesRead=0xc00014bcec*=0x1094, lpOverlapped=0x0) returned 1
	[0213.264] SetEvent (hEvent=0xc4) returned 1
	[0213.265] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b68f0 | out: pbBuffer=0xc0002b68f0) returned 1
	[0213.265] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000110e02 | out: pbBuffer=0xc000110e02) returned 1
	[0213.265] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6930 | out: pbBuffer=0xc0002b6930) returned 1
	[0213.266] GetFileType (hFile=0x164) returned 0x1
	[0213.266] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4244) returned 1
	[0213.266] WriteFile (in: hFile=0x164, lpBuffer=0xc000252000*, nNumberOfBytesToWrite=0x1094, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000252000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1094, lpOverlapped=0xc000155ce8) returned 1
	[0213.267] GetFileType (hFile=0x164) returned 0x1
	[0213.267] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1094, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4244) returned 1
	[0213.267] GetFileType (hFile=0x164) returned 0x1
	[0213.268] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4244) returned 1
	[0213.268] WriteFile (in: hFile=0x164, lpBuffer=0xc000245500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000245500*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0213.268] GetFileType (hFile=0x164) returned 0x1
	[0213.269] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1094, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4244) returned 1
	[0213.269] CloseHandle (hObject=0x164) returned 1
	[0213.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf.egmwv")) returned 0x20
	[0213.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.353] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.354] SetEvent (hEvent=0xc4) returned 1
	[0213.354] SetEvent (hEvent=0x144) returned 1
	[0213.355] SwitchToThread () returned 1
	[0213.356] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.368] SetEvent (hEvent=0x144) returned 1
	[0213.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf")) returned 0x20
	[0213.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF", dwFileAttributes=0x20) returned 1
	[0213.369] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.384] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0213.384] ReadFile (in: hFile=0x170, lpBuffer=0xc000190000, nNumberOfBytesToRead=0x1f1c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000190000*, lpNumberOfBytesRead=0xc000387cec*=0x1f1c, lpOverlapped=0x0) returned 1
	[0213.413] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0213.414] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0213.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f53 | out: pbBuffer=0xc000214f53) returned 1
	[0213.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214fe3 | out: pbBuffer=0xc000214fe3) returned 1
	[0213.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0213.414] GetFileType (hFile=0x170) returned 0x1
	[0213.414] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=7964) returned 1
	[0213.414] WriteFile (in: hFile=0x170, lpBuffer=0xc0003dc000*, nNumberOfBytesToWrite=0x1f1c, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc0003dc000*, lpNumberOfBytesWritten=0xc000231ccc*=0x1f1c, lpOverlapped=0xc000231ce8) returned 1
	[0213.415] GetFileType (hFile=0x170) returned 0x1
	[0213.415] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1f1c, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=7964) returned 1
	[0213.415] GetFileType (hFile=0x170) returned 0x1
	[0213.415] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=7964) returned 1
	[0213.416] WriteFile (in: hFile=0x170, lpBuffer=0xc000235500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc000235500*, lpNumberOfBytesWritten=0xc000231ccc*=0x230, lpOverlapped=0xc000231ce8) returned 1
	[0213.416] GetFileType (hFile=0x170) returned 0x1
	[0213.416] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1f1c, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=7964) returned 1
	[0213.416] CloseHandle (hObject=0x170) returned 1
	[0213.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf.egmwv")) returned 0x20
	[0213.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.425] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.442] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.451] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.476] SetEvent (hEvent=0x120) returned 1
	[0213.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf")) returned 0x20
	[0213.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF", dwFileAttributes=0x20) returned 1
	[0213.479] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0213.576] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0213.576] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003e7000, nNumberOfBytesToRead=0xe8c, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e7000*, lpNumberOfBytesRead=0xc000389cec*=0xe8c, lpOverlapped=0x0) returned 1
	[0213.632] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206750 | out: pbBuffer=0xc000206750) returned 1
	[0213.632] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000137b02 | out: pbBuffer=0xc000137b02) returned 1
	[0213.632] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206790 | out: pbBuffer=0xc000206790) returned 1
	[0213.632] GetFileType (hFile=0xcc) returned 0x1
	[0213.632] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000c3ca0*=3724) returned 1
	[0213.632] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001be000*, nNumberOfBytesToWrite=0xe8c, lpNumberOfBytesWritten=0xc0000c3ccc, lpOverlapped=0xc0000c3ce8 | out: lpBuffer=0xc0001be000*, lpNumberOfBytesWritten=0xc0000c3ccc*=0xe8c, lpOverlapped=0xc0000c3ce8) returned 1
	[0213.632] GetFileType (hFile=0xcc) returned 0x1
	[0213.633] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xe8c, lpNewFilePointer=0xc0000c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000c3ca0*=3724) returned 1
	[0213.633] GetFileType (hFile=0xcc) returned 0x1
	[0213.633] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000c3ca0*=3724) returned 1
	[0213.633] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002fb880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000c3ccc, lpOverlapped=0xc0000c3ce8 | out: lpBuffer=0xc0002fb880*, lpNumberOfBytesWritten=0xc0000c3ccc*=0x22a, lpOverlapped=0xc0000c3ce8) returned 1
	[0213.634] GetFileType (hFile=0xcc) returned 0x1
	[0213.634] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xe8c, lpNewFilePointer=0xc0000c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000c3ca0*=3724) returned 1
	[0213.634] CloseHandle (hObject=0xcc) returned 1
	[0213.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf.egmwv")) returned 0x20
	[0213.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.651] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.664] SetEvent (hEvent=0x108) returned 1
	[0213.664] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.684] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.711] SwitchToThread () returned 1
	[0213.713] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.719] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.738] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf")) returned 0x20
	[0213.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF", dwFileAttributes=0x20) returned 1
	[0213.756] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.777] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.787] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0213.787] ReadFile (in: hFile=0x170, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x1918, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000387cec*=0x1918, lpOverlapped=0x0) returned 1
	[0213.796] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0213.796] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000312a02 | out: pbBuffer=0xc000312a02) returned 1
	[0213.796] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000312a43 | out: pbBuffer=0xc000312a43) returned 1
	[0213.796] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0213.797] GetFileType (hFile=0x170) returned 0x1
	[0213.797] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=6424) returned 1
	[0213.797] WriteFile (in: hFile=0x170, lpBuffer=0xc0001dc000*, nNumberOfBytesToWrite=0x1918, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc0001dc000*, lpNumberOfBytesWritten=0xc000203ccc*=0x1918, lpOverlapped=0xc000203ce8) returned 1
	[0213.797] GetFileType (hFile=0x170) returned 0x1
	[0213.798] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1918, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=6424) returned 1
	[0213.798] GetFileType (hFile=0x170) returned 0x1
	[0213.798] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=6424) returned 1
	[0213.798] WriteFile (in: hFile=0x170, lpBuffer=0xc0003a7500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc0003a7500*, lpNumberOfBytesWritten=0xc000203ccc*=0x227, lpOverlapped=0xc000203ce8) returned 1
	[0213.798] GetFileType (hFile=0x170) returned 0x1
	[0213.798] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1918, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=6424) returned 1
	[0213.799] CloseHandle (hObject=0x170) returned 1
	[0213.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf.egmwv")) returned 0x20
	[0213.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.801] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.809] SetEvent (hEvent=0x120) returned 1
	[0213.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf")) returned 0x20
	[0213.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF", dwFileAttributes=0x20) returned 1
	[0213.810] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0213.824] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0213.824] ReadFile (in: hFile=0xa8, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x2a54, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc0002d7cec*=0x2a54, lpOverlapped=0x0) returned 1
	[0213.852] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070400 | out: pbBuffer=0xc000070400) returned 1
	[0213.852] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00007041a | out: pbBuffer=0xc00007041a) returned 1
	[0213.852] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003bab02 | out: pbBuffer=0xc0003bab02) returned 1
	[0213.852] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bab8b | out: pbBuffer=0xc0003bab8b) returned 1
	[0213.852] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bab94 | out: pbBuffer=0xc0003bab94) returned 1
	[0213.852] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070440 | out: pbBuffer=0xc000070440) returned 1
	[0213.852] GetFileType (hFile=0xa8) returned 0x1
	[0213.852] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10836) returned 1
	[0213.853] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003f4000*, nNumberOfBytesToWrite=0x2a54, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003f4000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2a54, lpOverlapped=0xc000155ce8) returned 1
	[0213.853] GetFileType (hFile=0xa8) returned 0x1
	[0213.853] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2a54, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10836) returned 1
	[0213.853] GetFileType (hFile=0xa8) returned 0x1
	[0213.853] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10836) returned 1
	[0213.854] WriteFile (in: hFile=0xa8, lpBuffer=0xc00032aa80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00032aa80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0213.854] GetFileType (hFile=0xa8) returned 0x1
	[0213.854] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2a54, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10836) returned 1
	[0213.855] CloseHandle (hObject=0xa8) returned 1
	[0213.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf.egmwv")) returned 0x20
	[0213.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.866] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.873] SetEvent (hEvent=0x108) returned 1
	[0213.873] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.907] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0213.982] SetEvent (hEvent=0x124) returned 1
	[0213.982] SetEvent (hEvent=0x120) returned 1
	[0213.982] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.453] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.459] SetEvent (hEvent=0x90) returned 1
	[0214.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg")) returned 0x20
	[0214.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG", dwFileAttributes=0x20) returned 1
	[0214.461] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0214.597] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0214.597] ReadFile (in: hFile=0x170, lpBuffer=0xc00042c000, nNumberOfBytesToRead=0x6988, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042c000*, lpNumberOfBytesRead=0xc000423cec*=0x6988, lpOverlapped=0x0) returned 1
	[0214.696] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0214.696] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d5a | out: pbBuffer=0xc000052d5a) returned 1
	[0214.696] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1502 | out: pbBuffer=0xc0002c1502) returned 1
	[0214.696] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c156f | out: pbBuffer=0xc0002c156f) returned 1
	[0214.696] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d80 | out: pbBuffer=0xc000052d80) returned 1
	[0214.696] GetFileType (hFile=0x170) returned 0x1
	[0214.697] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=27016) returned 1
	[0214.697] WriteFile (in: hFile=0x170, lpBuffer=0xc0003e6000*, nNumberOfBytesToWrite=0x6988, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x6988, lpOverlapped=0xc000155ce8) returned 1
	[0214.698] GetFileType (hFile=0x170) returned 0x1
	[0214.698] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6988, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=27016) returned 1
	[0214.698] GetFileType (hFile=0x170) returned 0x1
	[0214.699] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=27016) returned 1
	[0214.699] WriteFile (in: hFile=0x170, lpBuffer=0xc00017f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00017f500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0214.763] GetFileType (hFile=0x170) returned 0x1
	[0214.764] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6988, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=27016) returned 1
	[0214.764] CloseHandle (hObject=0x170) returned 1
	[0214.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.egmwv")) returned 0x20
	[0214.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf")) returned 0x20
	[0214.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF", dwFileAttributes=0x20) returned 1
	[0214.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0214.816] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0214.816] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x1a60, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000169cec*=0x1a60, lpOverlapped=0x0) returned 1
	[0214.822] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82a0 | out: pbBuffer=0xc0001b82a0) returned 1
	[0214.822] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031f902 | out: pbBuffer=0xc00031f902) returned 1
	[0214.822] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82e0 | out: pbBuffer=0xc0001b82e0) returned 1
	[0214.823] GetFileType (hFile=0xe8) returned 0x1
	[0214.823] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6752) returned 1
	[0214.823] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001f6000*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1a60, lpOverlapped=0xc000155ce8) returned 1
	[0214.823] GetFileType (hFile=0xe8) returned 0x1
	[0214.823] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1a60, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6752) returned 1
	[0214.824] GetFileType (hFile=0xe8) returned 0x1
	[0214.824] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6752) returned 1
	[0214.824] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003b4e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003b4e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0214.824] GetFileType (hFile=0xe8) returned 0x1
	[0214.824] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1a60, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6752) returned 1
	[0214.825] CloseHandle (hObject=0xe8) returned 1
	[0214.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf.egmwv")) returned 0x20
	[0214.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.827] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.845] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.868] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.887] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.898] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.904] SetEvent (hEvent=0x120) returned 1
	[0214.905] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0214.910] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.910] SetEvent (hEvent=0x120) returned 1
	[0214.911] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0214.913] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0214.913] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.141] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.157] SetEvent (hEvent=0x144) returned 1
	[0215.158] SetEvent (hEvent=0xf8) returned 1
	[0215.158] SetEvent (hEvent=0x124) returned 1
	[0215.158] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0215.162] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.162] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0215.163] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.164] SetEvent (hEvent=0x144) returned 1
	[0215.164] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0215.166] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.166] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.593] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.595] SetEvent (hEvent=0x120) returned 1
	[0215.596] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.599] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.605] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.629] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.649] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.668] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.680] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.711] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.732] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.741] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.759] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.789] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.806] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.826] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.840] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.860] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.880] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.889] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.901] SetEvent (hEvent=0x120) returned 1
	[0215.902] SetEvent (hEvent=0x90) returned 1
	[0215.902] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0215.904] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.904] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0215.905] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.906] SetEvent (hEvent=0x120) returned 1
	[0215.906] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0215.908] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0215.908] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.092] SetEvent (hEvent=0x120) returned 1
	[0216.092] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0218.416] SetEvent (hEvent=0x120) returned 1
	[0218.416] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.076] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.078] SetEvent (hEvent=0x90) returned 1
	[0219.078] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.081] SetEvent (hEvent=0x90) returned 1
	[0219.081] SetEvent (hEvent=0x144) returned 1
	[0219.081] SwitchToThread () returned 1
	[0219.089] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.093] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.111] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.141] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.158] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.167] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.187] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.211] SetEvent (hEvent=0x144) returned 1
	[0219.212] SetEvent (hEvent=0x90) returned 1
	[0219.212] SetEvent (hEvent=0x120) returned 1
	[0219.212] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x0
	[0219.216] SetEvent (hEvent=0x144) returned 1
	[0219.216] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0x1) returned 0x102
	[0219.218] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0219.218] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0220.441] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0220.534] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0220.544] SetEvent (hEvent=0x144) returned 1
	[0220.545] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0220.633] SetEvent (hEvent=0x144) returned 1
	[0220.633] SwitchToThread () returned 1
	[0220.742] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0222.385] SetEvent (hEvent=0xc4) returned 1
	[0222.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf")) returned 0x20
	[0222.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF", dwFileAttributes=0x20) returned 1
	[0222.418] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf.egmwv"), dwFlags=0x1) 

Thread:
	id = 34
	os_tid = 0xa0c

	[0118.763] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x4a5feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x4a5feb0*=0xf0) returned 1
	[0118.763] VirtualQuery (in: lpAddress=0x4a5fed0, lpBuffer=0x4a5fed0, dwLength=0x30 | out: lpBuffer=0x4a5fed0*(BaseAddress=0x4a5f000, AllocationBase=0x4860000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.763] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf8
	[0118.764] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0118.788] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 0x2020
	[0118.788] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", dwFileAttributes=0x2020) returned 1
	[0119.907] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.egmwv"), dwFlags=0x1) returned 1
	[0131.329] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0132.445] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0132.446] SwitchToThread () returned 1
	[0132.632] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0132.866] VirtualAlloc (lpAddress=0xc0001f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f6000
	[0132.867] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 0x2020
	[0132.868] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", dwFileAttributes=0x2020) returned 1
	[0133.332] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.egmwv"), dwFlags=0x1) returned 1
	[0135.594] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0136.110] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000165cc4 | out: lpMode=0xc000165cc4) returned 0
	[0136.112] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0x1) returned 0x102
	[0136.342] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.342] SetEvent (hEvent=0x70) returned 1
	[0136.342] SetEvent (hEvent=0x108) returned 1
	[0136.343] SetEvent (hEvent=0x90) returned 1
	[0136.343] ReadFile (in: hFile=0x164, lpBuffer=0xc000f3e000, nNumberOfBytesToRead=0x251f, lpNumberOfBytesRead=0xc000165cec, lpOverlapped=0x0 | out: lpBuffer=0xc000f3e000*, lpNumberOfBytesRead=0xc000165cec*=0x251f, lpOverlapped=0x0) returned 1
	[0136.790] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0137.461] SetEvent (hEvent=0x54) returned 1
	[0137.461] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0201.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf")) returned 0x20
	[0201.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x20) returned 1
	[0201.551] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.794] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0201.795] ReadFile (in: hFile=0xd0, lpBuffer=0xc000146000, nNumberOfBytesToRead=0x16cc, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000146000*, lpNumberOfBytesRead=0xc00016dcec*=0x16cc, lpOverlapped=0x0) returned 1
	[0201.801] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0201.801] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0201.801] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0201.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0201.802] GetFileType (hFile=0xd0) returned 0x1
	[0201.802] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=5836) returned 1
	[0201.802] WriteFile (in: hFile=0xd0, lpBuffer=0xc0002ac000*, nNumberOfBytesToWrite=0x16cc, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0002ac000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x16cc, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.803] GetFileType (hFile=0xd0) returned 0x1
	[0201.803] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x16cc, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=5836) returned 1
	[0201.803] GetFileType (hFile=0xd0) returned 0x1
	[0201.803] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=5836) returned 1
	[0201.804] WriteFile (in: hFile=0xd0, lpBuffer=0xc000183500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000183500*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x22d, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.804] GetFileType (hFile=0xd0) returned 0x1
	[0201.804] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x16cc, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=5836) returned 1
	[0201.804] CloseHandle (hObject=0xd0) returned 1
	[0201.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf.egmwv")) returned 0x20
	[0201.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.822] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0212.578] SetEvent (hEvent=0xc8) returned 1
	[0212.578] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0212.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf")) returned 0x20
	[0212.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF", dwFileAttributes=0x20) returned 1
	[0212.585] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0
	[0212.802] GetConsoleMode (in: hConsoleHandle=0xa0, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0212.802] ReadFile (in: hFile=0xa0, lpBuffer=0xc000252000, nNumberOfBytesToRead=0xbcc, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc000252000*, lpNumberOfBytesRead=0xc000147cec*=0xbcc, lpOverlapped=0x0) returned 1
	[0212.815] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0212.815] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0212.815] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0212.815] GetFileType (hFile=0xa0) returned 0x1
	[0212.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3020) returned 1
	[0212.816] WriteFile (in: hFile=0xa0, lpBuffer=0xc0004cc000*, nNumberOfBytesToWrite=0xbcc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004cc000*, lpNumberOfBytesWritten=0xc000155ccc*=0xbcc, lpOverlapped=0xc000155ce8) returned 1
	[0212.816] GetFileType (hFile=0xa0) returned 0x1
	[0212.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xbcc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3020) returned 1
	[0212.816] GetFileType (hFile=0xa0) returned 0x1
	[0212.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3020) returned 1
	[0212.816] WriteFile (in: hFile=0xa0, lpBuffer=0xc00024b880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00024b880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0212.817] GetFileType (hFile=0xa0) returned 0x1
	[0212.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xbcc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3020) returned 1
	[0212.817] CloseHandle (hObject=0xa0) returned 1
	[0212.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf.egmwv")) returned 0x20
	[0212.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.827] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0214.509] SetEvent (hEvent=0x144) returned 1
	[0214.509] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0214.717] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0214.737] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) returned 0x0
	[0215.160] SetEvent (hEvent=0x144) returned 1
	[0215.160] WaitForSingleObject (hHandle=0xf8, dwMilliseconds=0xffffffff) 

Thread:
	id = 35
	os_tid = 0xa1c

	[0118.765] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x4c5feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x4c5feb0*=0xfc) returned 1
	[0118.766] VirtualQuery (in: lpAddress=0x4c5fed0, lpBuffer=0x4c5fed0, dwLength=0x30 | out: lpBuffer=0x4c5fed0*(BaseAddress=0x4c5f000, AllocationBase=0x4a60000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.766] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x100
	[0118.766] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0118.786] SetEvent (hEvent=0xf8) returned 1
	[0118.786] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab")) returned 0x2020
	[0118.787] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", dwFileAttributes=0x2020) returned 1
	[0119.906] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.egmwv"), dwFlags=0x1) returned 1
	[0127.626] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0127.853] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000395cc4 | out: lpMode=0xc000395cc4) returned 0
	[0127.853] VirtualAlloc (lpAddress=0xc0003ae000, dwSize=0x34000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ae000
	[0127.863] ReadFile (in: hFile=0x118, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x320e2, lpNumberOfBytesRead=0xc000395cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc000395cec*=0x320e2, lpOverlapped=0x0) returned 1
	[0132.036] VirtualAlloc (lpAddress=0xc000156000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000156000
	[0132.037] VirtualAlloc (lpAddress=0xc000158000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000158000
	[0132.039] VirtualAlloc (lpAddress=0xc00015a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015a000
	[0132.040] VirtualAlloc (lpAddress=0xc00015c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015c000
	[0132.042] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0460 | out: pbBuffer=0xc0003a0460) returned 1
	[0132.042] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000112402 | out: pbBuffer=0xc000112402) returned 1
	[0132.043] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a04a0 | out: pbBuffer=0xc0003a04a0) returned 1
	[0132.043] VirtualAlloc (lpAddress=0xc0000aa000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000aa000
	[0132.049] VirtualAlloc (lpAddress=0xc0000bc000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000bc000
	[0132.050] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0132.050] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x200000, dwFreeType=0x4000) returned 0
	[0132.050] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x100000, dwFreeType=0x4000) returned 0
	[0132.050] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x80000, dwFreeType=0x4000) returned 0
	[0132.051] VirtualFree (lpAddress=0xc000fbe000, dwSize=0x40000, dwFreeType=0x4000) returned 1
	[0132.055] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x1c0000, dwFreeType=0x4000) returned 0
	[0132.055] VirtualFree (lpAddress=0xc000ffe000, dwSize=0xe0000, dwFreeType=0x4000) returned 0
	[0132.055] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x70000, dwFreeType=0x4000) returned 0
	[0132.055] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x38000, dwFreeType=0x4000) returned 0
	[0132.056] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x1c000, dwFreeType=0x4000) returned 0
	[0132.056] VirtualFree (lpAddress=0xc000ffe000, dwSize=0xe000, dwFreeType=0x4000) returned 0
	[0132.056] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x7000, dwFreeType=0x4000) returned 0
	[0132.056] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0132.056] VirtualFree (lpAddress=0xc000ffe000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0132.056] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1bf000, dwFreeType=0x4000) returned 0
	[0132.057] VirtualFree (lpAddress=0xc000fff000, dwSize=0xdf000, dwFreeType=0x4000) returned 0
	[0132.057] VirtualFree (lpAddress=0xc000fff000, dwSize=0x6f000, dwFreeType=0x4000) returned 0
	[0132.057] VirtualFree (lpAddress=0xc000fff000, dwSize=0x37000, dwFreeType=0x4000) returned 0
	[0132.057] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0132.057] VirtualFree (lpAddress=0xc000fff000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0132.057] VirtualFree (lpAddress=0xc000fff000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0132.057] VirtualFree (lpAddress=0xc000fff000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0132.058] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0132.058] VirtualFree (lpAddress=0xc001000000, dwSize=0x1be000, dwFreeType=0x4000) returned 1
	[0132.482] VirtualFree (lpAddress=0xc000f4e000, dwSize=0x270000, dwFreeType=0x4000) returned 0
	[0132.482] VirtualFree (lpAddress=0xc000f4e000, dwSize=0x270000, dwFreeType=0x4000) returned 0
	[0132.482] VirtualFree (lpAddress=0xc000f4e000, dwSize=0x138000, dwFreeType=0x4000) returned 0
	[0132.482] VirtualFree (lpAddress=0xc000f4e000, dwSize=0x9c000, dwFreeType=0x4000) returned 1
	[0132.483] VirtualFree (lpAddress=0xc000fea000, dwSize=0x1d4000, dwFreeType=0x4000) returned 0
	[0132.483] VirtualFree (lpAddress=0xc000fea000, dwSize=0xea000, dwFreeType=0x4000) returned 0
	[0132.483] VirtualFree (lpAddress=0xc000fea000, dwSize=0x75000, dwFreeType=0x4000) returned 0
	[0132.483] VirtualFree (lpAddress=0xc000fea000, dwSize=0x3a000, dwFreeType=0x4000) returned 0
	[0132.483] VirtualFree (lpAddress=0xc000fea000, dwSize=0x1d000, dwFreeType=0x4000) returned 0
	[0132.483] VirtualFree (lpAddress=0xc000fea000, dwSize=0xe000, dwFreeType=0x4000) returned 1
	[0132.483] VirtualFree (lpAddress=0xc000ff8000, dwSize=0x1c6000, dwFreeType=0x4000) returned 0
	[0132.484] VirtualFree (lpAddress=0xc000ff8000, dwSize=0xe3000, dwFreeType=0x4000) returned 0
	[0132.484] VirtualFree (lpAddress=0xc000ff8000, dwSize=0x71000, dwFreeType=0x4000) returned 0
	[0132.484] VirtualFree (lpAddress=0xc000ff8000, dwSize=0x38000, dwFreeType=0x4000) returned 0
	[0132.484] VirtualFree (lpAddress=0xc000ff8000, dwSize=0x1c000, dwFreeType=0x4000) returned 0
	[0132.484] VirtualFree (lpAddress=0xc000ff8000, dwSize=0xe000, dwFreeType=0x4000) returned 0
	[0132.485] VirtualFree (lpAddress=0xc000ff8000, dwSize=0x7000, dwFreeType=0x4000) returned 1
	[0132.486] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1bf000, dwFreeType=0x4000) returned 0
	[0132.486] VirtualFree (lpAddress=0xc000fff000, dwSize=0xdf000, dwFreeType=0x4000) returned 0
	[0132.486] VirtualFree (lpAddress=0xc000fff000, dwSize=0x6f000, dwFreeType=0x4000) returned 0
	[0132.486] VirtualFree (lpAddress=0xc000fff000, dwSize=0x37000, dwFreeType=0x4000) returned 0
	[0132.486] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0132.486] VirtualFree (lpAddress=0xc000fff000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0132.486] VirtualFree (lpAddress=0xc000fff000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0132.487] VirtualFree (lpAddress=0xc000fff000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0132.487] VirtualFree (lpAddress=0xc000fff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0132.487] VirtualFree (lpAddress=0xc001000000, dwSize=0x1be000, dwFreeType=0x4000) returned 1
	[0132.490] SetEvent (hEvent=0x124) returned 1
	[0132.490] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0133.298] SetEvent (hEvent=0x90) returned 1
	[0133.298] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0137.126] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi")) returned 0x2020
	[0137.127] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", dwFileAttributes=0x2020) returned 1
	[0137.460] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0137.670] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.egmwv"), dwFlags=0x1) returned 1
	[0143.606] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0143.917] SetEvent (hEvent=0xc8) returned 1
	[0143.917] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0145.045] SetEvent (hEvent=0x54) returned 1
	[0145.046] SetEvent (hEvent=0x120) returned 1
	[0145.046] SetEvent (hEvent=0x148) returned 1
	[0145.046] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0159.282] SetEvent (hEvent=0x54) returned 1
	[0159.282] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0159.398] SwitchToThread () returned 1
	[0159.434] GetFileType (hFile=0xcc) returned 0x1
	[0159.435] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0159.435] WriteFile (in: hFile=0xcc, lpBuffer=0xc0013e2000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc00038dccc, lpOverlapped=0xc00038dce8 | out: lpBuffer=0xc0013e2000*, lpNumberOfBytesWritten=0xc00038dccc*=0x100000, lpOverlapped=0xc00038dce8) returned 1
	[0160.855] GetFileType (hFile=0xcc) returned 0x1
	[0160.855] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x100000, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0160.856] GetFileType (hFile=0xcc) returned 0x1
	[0160.856] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0160.856] WriteFile (in: hFile=0xcc, lpBuffer=0xc000190500*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc00038dccc, lpOverlapped=0xc00038dce8 | out: lpBuffer=0xc000190500*, lpNumberOfBytesWritten=0xc00038dccc*=0x2d8, lpOverlapped=0xc00038dce8) returned 1
	[0161.252] SetEvent (hEvent=0x70) returned 1
	[0161.252] GetFileType (hFile=0xcc) returned 0x1
	[0161.252] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x100000, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0161.253] CloseHandle (hObject=0xcc) returned 1
	[0161.449] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.egmwv")) returned 0x2020
	[0161.449] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0165.550] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0170.593] SetEvent (hEvent=0x84) returned 1
	[0170.593] SetEvent (hEvent=0x54) returned 1
	[0170.594] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0170.674] SetEvent (hEvent=0x148) returned 1
	[0170.674] SetEvent (hEvent=0xc8) returned 1
	[0170.675] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0175.463] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 0x2020
	[0175.463] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", dwFileAttributes=0x2020) returned 1
	[0175.464] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.egmwv"), dwFlags=0x1) returned 1
	[0175.465] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0175.466] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0175.466] ReadFile (in: hFile=0x164, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x68fc, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000169cec*=0x68fc, lpOverlapped=0x0) returned 1
	[0175.573] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0175.657] SetEvent (hEvent=0x124) returned 1
	[0175.658] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0175.899] SwitchToThread () returned 1
	[0175.982] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi")) returned 0x2020
	[0175.982] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", dwFileAttributes=0x2020) returned 1
	[0175.982] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.egmwv"), dwFlags=0x1) returned 1
	[0175.983] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0175.984] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0175.984] ReadFile (in: hFile=0x130, lpBuffer=0xc000f60000, nNumberOfBytesToRead=0x3f457, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000f60000*, lpNumberOfBytesRead=0xc000387cec*=0x3f457, lpOverlapped=0x0) returned 1
	[0176.101] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0179.488] SetEvent (hEvent=0x54) returned 1
	[0179.488] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0179.535] SetEvent (hEvent=0x54) returned 1
	[0179.536] SetEvent (hEvent=0x124) returned 1
	[0179.546] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0179.547] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005213a | out: pbBuffer=0xc00005213a) returned 1
	[0179.547] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0179.547] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052160 | out: pbBuffer=0xc000052160) returned 1
	[0179.548] GetFileType (hFile=0xcc) returned 0x1
	[0179.548] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a7ca0*=819) returned 1
	[0179.548] WriteFile (in: hFile=0xcc, lpBuffer=0xc00042b000*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0xc0002a7ccc, lpOverlapped=0xc0002a7ce8 | out: lpBuffer=0xc00042b000*, lpNumberOfBytesWritten=0xc0002a7ccc*=0x333, lpOverlapped=0xc0002a7ce8) returned 1
	[0179.549] GetFileType (hFile=0xcc) returned 0x1
	[0179.549] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x333, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a7ca0*=819) returned 1
	[0179.549] GetFileType (hFile=0xcc) returned 0x1
	[0179.550] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a7ca0*=819) returned 1
	[0179.550] WriteFile (in: hFile=0xcc, lpBuffer=0xc00041d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0002a7ccc, lpOverlapped=0xc0002a7ce8 | out: lpBuffer=0xc00041d880*, lpNumberOfBytesWritten=0xc0002a7ccc*=0x22a, lpOverlapped=0xc0002a7ce8) returned 1
	[0179.550] GetFileType (hFile=0xcc) returned 0x1
	[0179.550] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x333, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a7ca0*=819) returned 1
	[0179.550] CloseHandle (hObject=0xcc) returned 1
	[0179.551] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.egmwv")) returned 0x2020
	[0179.551] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0179.553] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000522b0 | out: pbBuffer=0xc0000522b0) returned 1
	[0179.553] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000522ca | out: pbBuffer=0xc0000522ca) returned 1
	[0179.553] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215802 | out: pbBuffer=0xc000215802) returned 1
	[0179.553] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000522f0 | out: pbBuffer=0xc0000522f0) returned 1
	[0179.554] GetFileType (hFile=0x118) returned 0x1
	[0179.554] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a7ca0*=1857) returned 1
	[0179.554] WriteFile (in: hFile=0x118, lpBuffer=0xc0001f3000*, nNumberOfBytesToWrite=0x741, lpNumberOfBytesWritten=0xc0002a7ccc, lpOverlapped=0xc0002a7ce8 | out: lpBuffer=0xc0001f3000*, lpNumberOfBytesWritten=0xc0002a7ccc*=0x741, lpOverlapped=0xc0002a7ce8) returned 1
	[0179.554] GetFileType (hFile=0x118) returned 0x1
	[0179.555] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x741, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a7ca0*=1857) returned 1
	[0179.555] GetFileType (hFile=0x118) returned 0x1
	[0179.555] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a7ca0*=1857) returned 1
	[0179.555] WriteFile (in: hFile=0x118, lpBuffer=0xc000179180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002a7ccc, lpOverlapped=0xc0002a7ce8 | out: lpBuffer=0xc000179180*, lpNumberOfBytesWritten=0xc0002a7ccc*=0x227, lpOverlapped=0xc0002a7ce8) returned 1
	[0179.555] GetFileType (hFile=0x118) returned 0x1
	[0179.555] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x741, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a7ca0*=1857) returned 1
	[0179.555] CloseHandle (hObject=0x118) returned 1
	[0179.556] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.egmwv")) returned 0x2020
	[0179.556] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.egmwv", dwFileAttributes=0x2021) returned 1
	[0179.557] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.egmwv")) returned 0x2020
	[0179.557] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0179.559] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052420 | out: pbBuffer=0xc000052420) returned 1
	[0179.559] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038802 | out: pbBuffer=0xc000038802) returned 1
	[0179.559] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000388bf | out: pbBuffer=0xc0000388bf) returned 1
	[0179.559] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000388ea | out: pbBuffer=0xc0000388ea) returned 1
	[0179.559] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052460 | out: pbBuffer=0xc000052460) returned 1
	[0179.560] GetFileType (hFile=0xe8) returned 0x1
	[0179.560] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a7ca0*=3584) returned 1
	[0179.560] WriteFile (in: hFile=0xe8, lpBuffer=0xc001764000*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0xc0002a7ccc, lpOverlapped=0xc0002a7ce8 | out: lpBuffer=0xc001764000*, lpNumberOfBytesWritten=0xc0002a7ccc*=0xe00, lpOverlapped=0xc0002a7ce8) returned 1
	[0179.560] GetFileType (hFile=0xe8) returned 0x1
	[0179.560] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xe00, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a7ca0*=3584) returned 1
	[0179.561] GetFileType (hFile=0xe8) returned 0x1
	[0179.561] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a7ca0*=3584) returned 1
	[0179.561] WriteFile (in: hFile=0xe8, lpBuffer=0xc000212a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc0002a7ccc, lpOverlapped=0xc0002a7ce8 | out: lpBuffer=0xc000212a80*, lpNumberOfBytesWritten=0xc0002a7ccc*=0x221, lpOverlapped=0xc0002a7ce8) returned 1
	[0179.562] GetFileType (hFile=0xe8) returned 0x1
	[0179.562] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xe00, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a7ca0*=3584) returned 1
	[0179.562] CloseHandle (hObject=0xe8) returned 1
	[0179.562] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.egmwv")) returned 0x2020
	[0179.562] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.egmwv", dwFileAttributes=0x2021) returned 1
	[0179.564] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052590 | out: pbBuffer=0xc000052590) returned 1
	[0179.564] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000525aa | out: pbBuffer=0xc0000525aa) returned 1
	[0179.564] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039702 | out: pbBuffer=0xc000039702) returned 1
	[0179.564] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039747 | out: pbBuffer=0xc000039747) returned 1
	[0179.564] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000525d0 | out: pbBuffer=0xc0000525d0) returned 1
	[0179.566] GetFileType (hFile=0x164) returned 0x1
	[0179.566] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a7ca0*=26876) returned 1
	[0179.567] WriteFile (in: hFile=0x164, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x68fc, lpNumberOfBytesWritten=0xc0002a7ccc, lpOverlapped=0xc0002a7ce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc0002a7ccc*=0x68fc, lpOverlapped=0xc0002a7ce8) returned 1
	[0179.567] GetFileType (hFile=0x164) returned 0x1
	[0179.567] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x68fc, lpNewFilePointer=0xc0002a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a7ca0*=26876) returned 1
	[0179.623] SetEvent (hEvent=0x54) returned 1
	[0179.624] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0179.663] GetFileType (hFile=0x164) returned 0x1
	[0179.663] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000165ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000165ca0*=26876) returned 1
	[0179.664] WriteFile (in: hFile=0x164, lpBuffer=0xc000276380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000165ccc, lpOverlapped=0xc000165ce8 | out: lpBuffer=0xc000276380*, lpNumberOfBytesWritten=0xc000165ccc*=0x233, lpOverlapped=0xc000165ce8) returned 1
	[0179.664] GetFileType (hFile=0x164) returned 0x1
	[0179.664] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x68fc, lpNewFilePointer=0xc000165ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000165ca0*=26876) returned 1
	[0179.664] CloseHandle (hObject=0x164) returned 1
	[0179.665] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0179.773] SetEvent (hEvent=0x54) returned 1
	[0179.773] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0179.798] SetEvent (hEvent=0x148) returned 1
	[0179.798] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0179.838] SwitchToThread () returned 1
	[0179.842] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x102
	[0179.850] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0179.850] SetEvent (hEvent=0xc4) returned 1
	[0179.850] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x102
	[0181.667] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0181.667] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.egmwv"), dwFlags=0x1) returned 1
	[0181.669] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0181.669] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0181.669] ReadFile (in: hFile=0xe0, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x15b5, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc00038dcec*=0x15b5, lpOverlapped=0x0) returned 1
	[0182.080] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0182.143] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0182.160] SetEvent (hEvent=0x120) returned 1
	[0182.160] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 0x2020
	[0182.160] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", dwFileAttributes=0x2020) returned 1
	[0182.162] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.egmwv"), dwFlags=0x1) returned 1
	[0182.219] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0182.220] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0182.220] ReadFile (in: hFile=0x164, lpBuffer=0xc0001ac000, nNumberOfBytesToRead=0xe8f2, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac000*, lpNumberOfBytesRead=0xc000429cec*=0xe8f2, lpOverlapped=0x0) returned 1
	[0184.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0184.339] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0184.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0940 | out: pbBuffer=0xc0002c0940) returned 1
	[0184.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052160 | out: pbBuffer=0xc000052160) returned 1
	[0184.339] GetFileType (hFile=0x164) returned 0x1
	[0184.340] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc001067ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001067ca0*=59634) returned 1
	[0184.340] WriteFile (in: hFile=0x164, lpBuffer=0xc000216000*, nNumberOfBytesToWrite=0xe8f2, lpNumberOfBytesWritten=0xc001067ccc, lpOverlapped=0xc001067ce8 | out: lpBuffer=0xc000216000*, lpNumberOfBytesWritten=0xc001067ccc*=0xe8f2, lpOverlapped=0xc001067ce8) returned 1
	[0184.341] GetFileType (hFile=0x164) returned 0x1
	[0184.341] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe8f2, lpNewFilePointer=0xc001067ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001067ca0*=59634) returned 1
	[0184.341] GetFileType (hFile=0x164) returned 0x1
	[0184.341] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc001067ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001067ca0*=59634) returned 1
	[0184.341] WriteFile (in: hFile=0x164, lpBuffer=0xc0000db500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc001067ccc, lpOverlapped=0xc001067ce8 | out: lpBuffer=0xc0000db500*, lpNumberOfBytesWritten=0xc001067ccc*=0x236, lpOverlapped=0xc001067ce8) returned 1
	[0184.396] GetFileType (hFile=0x164) returned 0x1
	[0184.396] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe8f2, lpNewFilePointer=0xc001067ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001067ca0*=59634) returned 1
	[0184.397] CloseHandle (hObject=0x164) returned 1
	[0184.397] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.egmwv")) returned 0x2020
	[0184.397] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0184.398] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0184.398] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", dwFileAttributes=0x2020) returned 1
	[0184.409] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv"), dwFlags=0x1) returned 1
	[0185.649] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0186.226] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0186.226] VirtualAlloc (lpAddress=0xc000438000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000438000
	[0187.554] SetEvent (hEvent=0xac) returned 1
	[0187.554] ReadFile (in: hFile=0xe8, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000423cec*=0x100000, lpOverlapped=0x0) returned 1
	[0187.643] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0187.663] SetEvent (hEvent=0x124) returned 1
	[0187.663] SetEvent (hEvent=0xc8) returned 1
	[0187.663] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0187.679] SetEvent (hEvent=0x124) returned 1
	[0187.679] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0187.684] SetEvent (hEvent=0x124) returned 1
	[0187.684] SetEvent (hEvent=0xc8) returned 1
	[0187.684] SetEvent (hEvent=0xc4) returned 1
	[0187.684] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0187.827] SetEvent (hEvent=0x54) returned 1
	[0187.827] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0187.900] SetEvent (hEvent=0xac) returned 1
	[0187.901] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab")) returned 0x2020
	[0187.901] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", dwFileAttributes=0x2020) returned 1
	[0187.909] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.egmwv"), dwFlags=0x1) returned 1
	[0195.545] SetEvent (hEvent=0x70) returned 1
	[0195.545] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0196.551] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0196.552] ReadFile (in: hFile=0x118, lpBuffer=0xc000498000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000498000*, lpNumberOfBytesRead=0xc000425cec*=0x100000, lpOverlapped=0x0) returned 1
	[0196.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101a0 | out: pbBuffer=0xc0000101a0) returned 1
	[0196.622] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0196.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000392c2 | out: pbBuffer=0xc0000392c2) returned 1
	[0196.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101e0 | out: pbBuffer=0xc0000101e0) returned 1
	[0196.627] VirtualAlloc (lpAddress=0xc000a42000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000a42000
	[0196.720] SetEvent (hEvent=0x54) returned 1
	[0196.725] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x102
	[0196.733] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0196.733] SetEvent (hEvent=0x54) returned 1
	[0196.733] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x102
	[0196.749] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0196.750] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x102
	[0196.800] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0196.800] SetEvent (hEvent=0x70) returned 1
	[0196.800] SetEvent (hEvent=0x124) returned 1
	[0196.801] GetFileType (hFile=0x118) returned 0x1
	[0196.801] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0196.801] WriteFile (in: hFile=0x118, lpBuffer=0xc00073a000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000425ccc, lpOverlapped=0xc000425ce8 | out: lpBuffer=0xc00073a000*, lpNumberOfBytesWritten=0xc000425ccc*=0x100000, lpOverlapped=0xc000425ce8) returned 1
	[0196.835] GetFileType (hFile=0x118) returned 0x1
	[0196.835] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0196.835] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0196.851] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.417] SwitchToThread () returned 1
	[0198.522] SwitchToThread () returned 1
	[0198.616] SetEvent (hEvent=0x120) returned 1
	[0198.616] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.641] SetEvent (hEvent=0x120) returned 1
	[0198.642] SetEvent (hEvent=0x144) returned 1
	[0198.642] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101b0 | out: pbBuffer=0xc0000101b0) returned 1
	[0198.642] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0198.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0972 | out: pbBuffer=0xc0002c0972) returned 1
	[0198.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101f0 | out: pbBuffer=0xc0000101f0) returned 1
	[0198.643] GetFileType (hFile=0x118) returned 0x1
	[0198.644] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00028fca0*=71583) returned 1
	[0198.644] WriteFile (in: hFile=0x118, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x1179f, lpNumberOfBytesWritten=0xc00028fccc, lpOverlapped=0xc00028fce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc00028fccc*=0x1179f, lpOverlapped=0xc00028fce8) returned 1
	[0198.646] GetFileType (hFile=0x118) returned 0x1
	[0198.646] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1179f, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00028fca0*=71583) returned 1
	[0198.646] GetFileType (hFile=0x118) returned 0x1
	[0198.647] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00028fca0*=71583) returned 1
	[0198.647] WriteFile (in: hFile=0x118, lpBuffer=0xc000189500*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0xc00028fccc, lpOverlapped=0xc00028fce8 | out: lpBuffer=0xc000189500*, lpNumberOfBytesWritten=0xc00028fccc*=0x242, lpOverlapped=0xc00028fce8) returned 1
	[0198.661] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.667] GetFileType (hFile=0x118) returned 0x1
	[0198.667] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1179f, lpNewFilePointer=0xc00028fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00028fca0*=71583) returned 1
	[0198.667] CloseHandle (hObject=0x118) returned 1
	[0198.668] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.668] SetEvent (hEvent=0x120) returned 1
	[0198.669] SetEvent (hEvent=0x148) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0198.669] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0198.670] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1
	[0198.670] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0198.670] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1
	[0198.670] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0198.670] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0198.670] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0198.670] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0198.673] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0198.678] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.700] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.705] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.708] SetEvent (hEvent=0x54) returned 1
	[0198.709] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0198.710] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", dwFileAttributes=0x2020) returned 1
	[0198.712] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv"), dwFlags=0x1) returned 1
	[0198.965] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0198.969] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.994] SetEvent (hEvent=0x144) returned 1
	[0198.994] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0198.994] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0198.996] SetEvent (hEvent=0x144) returned 1
	[0198.996] SetEvent (hEvent=0x124) returned 1
	[0198.996] ReadFile (in: hFile=0xd4, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x220bd, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000173cec*=0x220bd, lpOverlapped=0x0) returned 1
	[0199.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010230 | out: pbBuffer=0xc000010230) returned 1
	[0199.087] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0199.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0995 | out: pbBuffer=0xc0002c0995) returned 1
	[0199.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c09df | out: pbBuffer=0xc0002c09df) returned 1
	[0199.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010270 | out: pbBuffer=0xc000010270) returned 1
	[0199.089] GetFileType (hFile=0xd4) returned 0x1
	[0199.089] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=139453) returned 1
	[0199.089] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002fe000*, nNumberOfBytesToWrite=0x220bd, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesWritten=0xc000351ccc*=0x220bd, lpOverlapped=0xc000351ce8) returned 1
	[0199.091] GetFileType (hFile=0xd4) returned 0x1
	[0199.091] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x220bd, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=139453) returned 1
	[0199.091] GetFileType (hFile=0xd4) returned 0x1
	[0199.091] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=139453) returned 1
	[0199.092] WriteFile (in: hFile=0xd4, lpBuffer=0xc00018b500*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc00018b500*, lpNumberOfBytesWritten=0xc000351ccc*=0x245, lpOverlapped=0xc000351ce8) returned 1
	[0199.099] GetFileType (hFile=0xd4) returned 0x1
	[0199.099] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x220bd, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=139453) returned 1
	[0199.099] CloseHandle (hObject=0xd4) returned 1
	[0199.106] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv")) returned 0x2020
	[0199.106] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.107] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi")) returned 0x2020
	[0199.107] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", dwFileAttributes=0x2020) returned 1
	[0199.108] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.egmwv"), dwFlags=0x1) returned 1
	[0199.136] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0199.137] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0199.137] ReadFile (in: hFile=0x118, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc00038dcec*=0x100000, lpOverlapped=0x0) returned 1
	[0199.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010230 | out: pbBuffer=0xc000010230) returned 1
	[0199.193] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0199.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010270 | out: pbBuffer=0xc000010270) returned 1
	[0199.198] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x102
	[0199.200] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.200] SetEvent (hEvent=0x70) returned 1
	[0199.200] SetEvent (hEvent=0x124) returned 1
	[0199.204] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0199.206] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0199.207] SetEvent (hEvent=0x148) returned 1
	[0199.207] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0199.209] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0199.210] SetEvent (hEvent=0x124) returned 1
	[0199.210] GetFileType (hFile=0x118) returned 0x1
	[0199.211] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0199.211] WriteFile (in: hFile=0x118, lpBuffer=0xc00074a000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc00038dccc, lpOverlapped=0xc00038dce8 | out: lpBuffer=0xc00074a000*, lpNumberOfBytesWritten=0xc00038dccc*=0x100000, lpOverlapped=0xc00038dce8) returned 1
	[0199.221] GetFileType (hFile=0x118) returned 0x1
	[0199.221] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0199.221] GetFileType (hFile=0x118) returned 0x1
	[0199.221] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0199.222] WriteFile (in: hFile=0x118, lpBuffer=0xc000080000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc00038dccc, lpOverlapped=0xc00038dce8 | out: lpBuffer=0xc000080000*, lpNumberOfBytesWritten=0xc00038dccc*=0x2d8, lpOverlapped=0xc00038dce8) returned 1
	[0199.227] GetFileType (hFile=0x118) returned 0x1
	[0199.228] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc00038dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038dca0*=1048576) returned 1
	[0199.228] CloseHandle (hObject=0x118) returned 1
	[0199.230] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.egmwv")) returned 0x2020
	[0199.230] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.231] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0199.252] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0199.258] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0199.337] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0199.337] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0199.338] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000429a14 | out: lpMode=0xc000429a14) returned 0
	[0199.339] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004299b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0004299b4*=0x25d, lpOverlapped=0x0) returned 1
	[0199.342] CloseHandle (hObject=0xe8) returned 1
	[0199.342] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000429990 | out: lpFileInformation=0xc000429990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xd5197e10, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5197e10, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0199.343] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0199.343] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0xc000429708 | out: lpFindFileData=0xc000429708*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0199.365] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.378] SetEvent (hEvent=0x148) returned 1
	[0199.378] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.416] SetEvent (hEvent=0x148) returned 1
	[0199.417] SwitchToThread () returned 1
	[0199.418] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.439] SetEvent (hEvent=0x124) returned 1
	[0199.440] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0199.444] SetEvent (hEvent=0x70) returned 1
	[0199.444] SetEvent (hEvent=0x124) returned 1
	[0199.444] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010190 | out: pbBuffer=0xc000010190) returned 1
	[0199.444] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000101aa | out: pbBuffer=0xc0000101aa) returned 1
	[0199.444] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0199.445] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039233 | out: pbBuffer=0xc000039233) returned 1
	[0199.445] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101d0 | out: pbBuffer=0xc0000101d0) returned 1
	[0199.445] GetFileType (hFile=0xd4) returned 0x1
	[0199.445] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036bca0*=71583) returned 1
	[0199.446] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x1179f, lpNumberOfBytesWritten=0xc00036bccc, lpOverlapped=0xc00036bce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc00036bccc*=0x1179f, lpOverlapped=0xc00036bce8) returned 1
	[0199.447] GetFileType (hFile=0xd4) returned 0x1
	[0199.447] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1179f, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036bca0*=71583) returned 1
	[0199.447] GetFileType (hFile=0xd4) returned 0x1
	[0199.447] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036bca0*=71583) returned 1
	[0199.447] WriteFile (in: hFile=0xd4, lpBuffer=0xc00029b500*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0xc00036bccc, lpOverlapped=0xc00036bce8 | out: lpBuffer=0xc00029b500*, lpNumberOfBytesWritten=0xc00036bccc*=0x242, lpOverlapped=0xc00036bce8) returned 1
	[0199.453] GetFileType (hFile=0xd4) returned 0x1
	[0199.454] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1179f, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036bca0*=71583) returned 1
	[0199.454] CloseHandle (hObject=0xd4) returned 1
	[0199.454] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv")) returned 0x2020
	[0199.454] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.455] SetEvent (hEvent=0x54) returned 1
	[0199.455] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.584] SetEvent (hEvent=0x124) returned 1
	[0199.584] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.586] SetEvent (hEvent=0x124) returned 1
	[0199.587] SetEvent (hEvent=0x54) returned 1
	[0199.591] SwitchToThread () returned 1
	[0199.628] SwitchToThread () returned 1
	[0199.632] SetEvent (hEvent=0x124) returned 1
	[0199.632] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.637] SetEvent (hEvent=0x124) returned 1
	[0199.637] SetEvent (hEvent=0x54) returned 1
	[0199.637] SetEvent (hEvent=0x148) returned 1
	[0199.637] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.660] SetEvent (hEvent=0x120) returned 1
	[0199.660] SetEvent (hEvent=0x148) returned 1
	[0199.660] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0199.821] SetEvent (hEvent=0xac) returned 1
	[0199.821] SetEvent (hEvent=0x124) returned 1
	[0199.821] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.000] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.016] SetEvent (hEvent=0x54) returned 1
	[0200.016] SwitchToThread () returned 1
	[0200.018] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.030] SetEvent (hEvent=0x54) returned 1
	[0200.030] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.066] SetEvent (hEvent=0x148) returned 1
	[0200.066] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0200.068] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0200.070] SetEvent (hEvent=0x54) returned 1
	[0200.071] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0200.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0190 | out: pbBuffer=0xc0003a0190) returned 1
	[0200.073] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0200.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0990 | out: pbBuffer=0xc0002c0990) returned 1
	[0200.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c099e | out: pbBuffer=0xc0002c099e) returned 1
	[0200.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a01d0 | out: pbBuffer=0xc0003a01d0) returned 1
	[0200.074] GetFileType (hFile=0x118) returned 0x1
	[0200.074] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8723) returned 1
	[0200.074] WriteFile (in: hFile=0x118, lpBuffer=0xc000210000*, nNumberOfBytesToWrite=0x2213, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000210000*, lpNumberOfBytesWritten=0xc000151ccc*=0x2213, lpOverlapped=0xc000151ce8) returned 1
	[0200.074] GetFileType (hFile=0x118) returned 0x1
	[0200.074] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2213, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8723) returned 1
	[0200.075] GetFileType (hFile=0x118) returned 0x1
	[0200.075] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8723) returned 1
	[0200.075] WriteFile (in: hFile=0x118, lpBuffer=0xc0002bd500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002bd500*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0200.075] GetFileType (hFile=0x118) returned 0x1
	[0200.075] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2213, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8723) returned 1
	[0200.075] CloseHandle (hObject=0x118) returned 1
	[0200.076] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.egmwv")) returned 0x2020
	[0200.076] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0200.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20
	[0200.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl", dwFileAttributes=0x20) returned 1
	[0200.080] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.087] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.087] ReadFile (in: hFile=0x118, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x78e4, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc000389cec*=0x78e4, lpOverlapped=0x0) returned 1
	[0200.093] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0320 | out: pbBuffer=0xc0003a0320) returned 1
	[0200.093] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1502 | out: pbBuffer=0xc0002c1502) returned 1
	[0200.094] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1518 | out: pbBuffer=0xc0002c1518) returned 1
	[0200.094] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c153c | out: pbBuffer=0xc0002c153c) returned 1
	[0200.094] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1575 | out: pbBuffer=0xc0002c1575) returned 1
	[0200.094] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0360 | out: pbBuffer=0xc0003a0360) returned 1
	[0200.095] GetFileType (hFile=0x118) returned 0x1
	[0200.095] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=30948) returned 1
	[0200.095] WriteFile (in: hFile=0x118, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x78e4, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc000151ccc*=0x78e4, lpOverlapped=0xc000151ce8) returned 1
	[0200.096] GetFileType (hFile=0x118) returned 0x1
	[0200.096] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x78e4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=30948) returned 1
	[0200.096] GetFileType (hFile=0x118) returned 0x1
	[0200.096] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=30948) returned 1
	[0200.096] WriteFile (in: hFile=0x118, lpBuffer=0xc0002b2e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002b2e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x230, lpOverlapped=0xc000151ce8) returned 1
	[0200.097] GetFileType (hFile=0x118) returned 0x1
	[0200.097] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x78e4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=30948) returned 1
	[0200.097] CloseHandle (hObject=0x118) returned 1
	[0200.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.egmwv")) returned 0x20
	[0200.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.106] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.117] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.149] SetEvent (hEvent=0x120) returned 1
	[0200.149] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.155] SetEvent (hEvent=0xac) returned 1
	[0200.156] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0200.161] SetEvent (hEvent=0xac) returned 1
	[0200.162] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x1) returned 0x0
	[0200.163] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.524] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0200.823] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0201.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20
	[0201.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x20) returned 1
	[0201.519] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.648] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0201.648] ReadFile (in: hFile=0xd4, lpBuffer=0xc000234000, nNumberOfBytesToRead=0x385c, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000234000*, lpNumberOfBytesRead=0xc000423cec*=0x385c, lpOverlapped=0x0) returned 1
	[0201.655] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414930 | out: pbBuffer=0xc000414930) returned 1
	[0201.655] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026f502 | out: pbBuffer=0xc00026f502) returned 1
	[0201.655] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026f5a5 | out: pbBuffer=0xc00026f5a5) returned 1
	[0201.655] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414970 | out: pbBuffer=0xc000414970) returned 1
	[0201.656] GetFileType (hFile=0xd4) returned 0x1
	[0201.656] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=14428) returned 1
	[0201.656] WriteFile (in: hFile=0xd4, lpBuffer=0xc0003aa000*, nNumberOfBytesToWrite=0x385c, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0003aa000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x385c, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.657] GetFileType (hFile=0xd4) returned 0x1
	[0201.657] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x385c, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=14428) returned 1
	[0201.657] GetFileType (hFile=0xd4) returned 0x1
	[0201.657] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=14428) returned 1
	[0201.658] WriteFile (in: hFile=0xd4, lpBuffer=0xc0003ae000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x22d, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.658] GetFileType (hFile=0xd4) returned 0x1
	[0201.658] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x385c, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=14428) returned 1
	[0201.658] CloseHandle (hObject=0xd4) returned 1
	[0201.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.egmwv")) returned 0x20
	[0201.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.669] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0212.604] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0212.619] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0
	[0212.649] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) 

Thread:
	id = 36
	os_tid = 0xa2c

	[0118.767] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x4e5feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x4e5feb0*=0xf4) returned 1
	[0118.768] VirtualQuery (in: lpAddress=0x4e5fed0, lpBuffer=0x4e5fed0, dwLength=0x30 | out: lpBuffer=0x4e5fed0*(BaseAddress=0x4e5f000, AllocationBase=0x4c60000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.768] SetEvent (hEvent=0xc4) returned 1
	[0118.768] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x104
	[0118.768] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0118.770] SetEvent (hEvent=0xc4) returned 1
	[0118.770] SetEvent (hEvent=0x100) returned 1
	[0118.770] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0118.771] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0118.772] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0122.719] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0122.847] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0122.847] ReadFile (in: hFile=0x118, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x16fc, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000197cec*=0x16fc, lpOverlapped=0x0) returned 1
	[0127.316] VirtualAlloc (lpAddress=0xc000376000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000376000
	[0127.316] VirtualAlloc (lpAddress=0xc000b14000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b14000
	[0127.317] VirtualAlloc (lpAddress=0xc000b16000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b16000
	[0127.318] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a02b0 | out: pbBuffer=0xc0003a02b0) returned 1
	[0127.318] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215a02 | out: pbBuffer=0xc000215a02) returned 1
	[0127.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a02f0 | out: pbBuffer=0xc0003a02f0) returned 1
	[0127.319] VirtualAlloc (lpAddress=0xc0001fa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fa000
	[0127.321] GetFileType (hFile=0x118) returned 0x1
	[0127.321] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00094bca0*=5884) returned 1
	[0127.321] WriteFile (in: hFile=0x118, lpBuffer=0xc0001a0000*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0xc00094bccc, lpOverlapped=0xc00094bce8 | out: lpBuffer=0xc0001a0000*, lpNumberOfBytesWritten=0xc00094bccc*=0x16fc, lpOverlapped=0xc00094bce8) returned 1
	[0127.321] GetFileType (hFile=0x118) returned 0x1
	[0127.321] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x16fc, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00094bca0*=5884) returned 1
	[0127.321] GetFileType (hFile=0x118) returned 0x1
	[0127.322] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00094bca0*=5884) returned 1
	[0127.322] WriteFile (in: hFile=0x118, lpBuffer=0xc000212e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00094bccc, lpOverlapped=0xc00094bce8 | out: lpBuffer=0xc000212e00*, lpNumberOfBytesWritten=0xc00094bccc*=0x233, lpOverlapped=0xc00094bce8) returned 1
	[0127.322] GetFileType (hFile=0x118) returned 0x1
	[0127.322] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x16fc, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00094bca0*=5884) returned 1
	[0127.322] CloseHandle (hObject=0x118) returned 1
	[0127.627] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0127.627] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0127.869] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0128.167] SetEvent (hEvent=0xb0) returned 1
	[0128.167] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab")) returned 0x2020
	[0128.167] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", dwFileAttributes=0x2020) returned 1
	[0128.168] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.egmwv"), dwFlags=0x1) returned 1
	[0128.169] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0128.169] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00039bcc4 | out: lpMode=0xc00039bcc4) returned 0
	[0128.169] VirtualAlloc (lpAddress=0xc0011be000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011be000
	[0128.421] ReadFile (in: hFile=0xd8, lpBuffer=0xc0011be000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00039bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0011be000*, lpNumberOfBytesRead=0xc00039bcec*=0x100000, lpOverlapped=0x0) returned 1
	[0131.888] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010320 | out: pbBuffer=0xc000010320) returned 1
	[0131.888] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039c02 | out: pbBuffer=0xc000039c02) returned 1
	[0131.888] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039c55 | out: pbBuffer=0xc000039c55) returned 1
	[0131.888] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010360 | out: pbBuffer=0xc000010360) returned 1
	[0131.888] VirtualAlloc (lpAddress=0xc000d14000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d14000
	[0131.892] VirtualAlloc (lpAddress=0xc000356000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000356000
	[0132.861] VirtualAlloc (lpAddress=0xc000322000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000322000
	[0132.866] GetFileType (hFile=0xd0) returned 0x1
	[0132.866] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba9ca0*=86886) returned 1
	[0132.866] WriteFile (in: hFile=0xd0, lpBuffer=0xc000322000*, nNumberOfBytesToWrite=0x15366, lpNumberOfBytesWritten=0xc000ba9ccc, lpOverlapped=0xc000ba9ce8 | out: lpBuffer=0xc000322000*, lpNumberOfBytesWritten=0xc000ba9ccc*=0x15366, lpOverlapped=0xc000ba9ce8) returned 1
	[0133.128] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0135.561] GetFileType (hFile=0xd0) returned 0x1
	[0135.562] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x15366, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba9ca0*=86886) returned 1
	[0135.562] GetFileType (hFile=0xd0) returned 0x1
	[0135.562] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba9ca0*=86886) returned 1
	[0135.562] WriteFile (in: hFile=0xd0, lpBuffer=0xc00012b180*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc000ba9ccc, lpOverlapped=0xc000ba9ce8 | out: lpBuffer=0xc00012b180*, lpNumberOfBytesWritten=0xc000ba9ccc*=0x23c, lpOverlapped=0xc000ba9ce8) returned 1
	[0136.558] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0137.242] GetFileType (hFile=0xd0) returned 0x1
	[0137.242] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x15366, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba9ca0*=86886) returned 1
	[0137.242] CloseHandle (hObject=0xd0) returned 1
	[0137.266] SetEvent (hEvent=0xf8) returned 1
	[0137.266] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0201.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf")) returned 0x20
	[0201.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x20) returned 1
	[0201.569] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.828] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000399cc4 | out: lpMode=0xc000399cc4) returned 0
	[0201.828] ReadFile (in: hFile=0xd0, lpBuffer=0xc0002d0000, nNumberOfBytesToRead=0x1d74, lpNumberOfBytesRead=0xc000399cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002d0000*, lpNumberOfBytesRead=0xc000399cec*=0x1d74, lpOverlapped=0x0) returned 1
	[0201.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414420 | out: pbBuffer=0xc000414420) returned 1
	[0201.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041443a | out: pbBuffer=0xc00041443a) returned 1
	[0201.835] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001e8102 | out: pbBuffer=0xc0001e8102) returned 1
	[0201.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001e81b3 | out: pbBuffer=0xc0001e81b3) returned 1
	[0201.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414460 | out: pbBuffer=0xc000414460) returned 1
	[0201.836] GetFileType (hFile=0xd0) returned 0x1
	[0201.836] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=7540) returned 1
	[0201.836] WriteFile (in: hFile=0xd0, lpBuffer=0xc000406000*, nNumberOfBytesToWrite=0x1d74, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc000406000*, lpNumberOfBytesWritten=0xc000353ccc*=0x1d74, lpOverlapped=0xc000353ce8) returned 1
	[0201.836] GetFileType (hFile=0xd0) returned 0x1
	[0201.837] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1d74, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=7540) returned 1
	[0201.837] GetFileType (hFile=0xd0) returned 0x1
	[0201.837] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=7540) returned 1
	[0201.837] WriteFile (in: hFile=0xd0, lpBuffer=0xc000360700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc000360700*, lpNumberOfBytesWritten=0xc000353ccc*=0x230, lpOverlapped=0xc000353ce8) returned 1
	[0201.837] GetFileType (hFile=0xd0) returned 0x1
	[0201.837] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1d74, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=7540) returned 1
	[0201.838] CloseHandle (hObject=0xd0) returned 1
	[0201.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf.egmwv")) returned 0x20
	[0201.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.853] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0203.297] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0203.329] SetEvent (hEvent=0x60) returned 1
	[0203.329] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0212.575] SetEvent (hEvent=0xb0) returned 1
	[0212.575] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0212.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf")) returned 0x20
	[0212.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF", dwFileAttributes=0x20) returned 1
	[0212.580] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec
	[0212.792] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0xc00014bcc4 | out: lpMode=0xc00014bcc4) returned 0
	[0212.792] ReadFile (in: hFile=0xec, lpBuffer=0xc00024c000, nNumberOfBytesToRead=0xd04, lpNumberOfBytesRead=0xc00014bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesRead=0xc00014bcec*=0xd04, lpOverlapped=0x0) returned 1
	[0212.799] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0212.809] SetEvent (hEvent=0x14c) returned 1
	[0212.809] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ce0 | out: pbBuffer=0xc000052ce0) returned 1
	[0212.810] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000264102 | out: pbBuffer=0xc000264102) returned 1
	[0212.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002641b2 | out: pbBuffer=0xc0002641b2) returned 1
	[0212.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002641e7 | out: pbBuffer=0xc0002641e7) returned 1
	[0212.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0212.811] GetFileType (hFile=0xec) returned 0x1
	[0212.811] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=3332) returned 1
	[0212.811] WriteFile (in: hFile=0xec, lpBuffer=0xc000280000*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000280000*, lpNumberOfBytesWritten=0xc000183ccc*=0xd04, lpOverlapped=0xc000183ce8) returned 1
	[0212.811] GetFileType (hFile=0xec) returned 0x1
	[0212.811] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0xd04, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=3332) returned 1
	[0212.812] GetFileType (hFile=0xec) returned 0x1
	[0212.812] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=3332) returned 1
	[0212.812] WriteFile (in: hFile=0xec, lpBuffer=0xc000477880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000477880*, lpNumberOfBytesWritten=0xc000183ccc*=0x224, lpOverlapped=0xc000183ce8) returned 1
	[0212.812] GetFileType (hFile=0xec) returned 0x1
	[0212.812] SetFilePointerEx (in: hFile=0xec, liDistanceToMove=0xd04, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=3332) returned 1
	[0212.812] CloseHandle (hObject=0xec) returned 1
	[0212.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf.egmwv")) returned 0x20
	[0212.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.827] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.509] SetEvent (hEvent=0x90) returned 1
	[0214.509] SetEvent (hEvent=0xac) returned 1
	[0214.509] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.570] SetEvent (hEvent=0x90) returned 1
	[0214.570] SwitchToThread () returned 1
	[0214.573] SetEvent (hEvent=0x90) returned 1
	[0214.573] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.575] SetEvent (hEvent=0x90) returned 1
	[0214.575] SetEvent (hEvent=0xac) returned 1
	[0214.575] SetEvent (hEvent=0x144) returned 1
	[0214.575] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.645] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.678] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf")) returned 0x20
	[0214.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF", dwFileAttributes=0x20) returned 1
	[0214.689] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.755] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0214.755] ReadFile (in: hFile=0xa8, lpBuffer=0xc0002a0000, nNumberOfBytesToRead=0x4844, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesRead=0xc00038dcec*=0x4844, lpOverlapped=0x0) returned 1
	[0214.765] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0214.765] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001702 | out: pbBuffer=0xc000001702) returned 1
	[0214.765] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000176f | out: pbBuffer=0xc00000176f) returned 1
	[0214.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0214.766] GetFileType (hFile=0xa8) returned 0x1
	[0214.766] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=18500) returned 1
	[0214.767] WriteFile (in: hFile=0xa8, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0x4844, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc000411ccc*=0x4844, lpOverlapped=0xc000411ce8) returned 1
	[0214.767] GetFileType (hFile=0xa8) returned 0x1
	[0214.767] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x4844, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=18500) returned 1
	[0214.767] GetFileType (hFile=0xa8) returned 0x1
	[0214.768] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=18500) returned 1
	[0214.768] WriteFile (in: hFile=0xa8, lpBuffer=0xc000224a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000224a80*, lpNumberOfBytesWritten=0xc000411ccc*=0x224, lpOverlapped=0xc000411ce8) returned 1
	[0214.768] GetFileType (hFile=0xa8) returned 0x1
	[0214.768] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x4844, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=18500) returned 1
	[0214.768] CloseHandle (hObject=0xa8) returned 1
	[0214.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf.egmwv")) returned 0x20
	[0214.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf")) returned 0x20
	[0214.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF", dwFileAttributes=0x20) returned 1
	[0214.791] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.829] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0214.829] ReadFile (in: hFile=0xa8, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0x2988, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc0002d7cec*=0x2988, lpOverlapped=0x0) returned 1
	[0214.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0214.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0214.835] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000c6802 | out: pbBuffer=0xc0000c6802) returned 1
	[0214.835] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000c6805 | out: pbBuffer=0xc0000c6805) returned 1
	[0214.836] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000c686d | out: pbBuffer=0xc0000c686d) returned 1
	[0214.836] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0214.836] GetFileType (hFile=0xa8) returned 0x1
	[0214.836] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=10632) returned 1
	[0214.836] WriteFile (in: hFile=0xa8, lpBuffer=0xc000444000*, nNumberOfBytesToWrite=0x2988, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000444000*, lpNumberOfBytesWritten=0xc000411ccc*=0x2988, lpOverlapped=0xc000411ce8) returned 1
	[0214.837] GetFileType (hFile=0xa8) returned 0x1
	[0214.837] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2988, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=10632) returned 1
	[0214.837] GetFileType (hFile=0xa8) returned 0x1
	[0214.837] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=10632) returned 1
	[0214.838] WriteFile (in: hFile=0xa8, lpBuffer=0xc000400380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000400380*, lpNumberOfBytesWritten=0xc000411ccc*=0x227, lpOverlapped=0xc000411ce8) returned 1
	[0214.838] GetFileType (hFile=0xa8) returned 0x1
	[0214.838] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2988, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=10632) returned 1
	[0214.838] CloseHandle (hObject=0xa8) returned 1
	[0214.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf.egmwv")) returned 0x20
	[0214.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.841] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.844] SetEvent (hEvent=0xe4) returned 1
	[0214.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf")) returned 0x20
	[0214.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF", dwFileAttributes=0x20) returned 1
	[0214.845] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.876] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0214.876] ReadFile (in: hFile=0x118, lpBuffer=0xc000336000, nNumberOfBytesToRead=0x2a00, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000336000*, lpNumberOfBytesRead=0xc0002d7cec*=0x2a00, lpOverlapped=0x0) returned 1
	[0214.884] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8420 | out: pbBuffer=0xc0001b8420) returned 1
	[0214.884] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00044a902 | out: pbBuffer=0xc00044a902) returned 1
	[0214.884] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00044a914 | out: pbBuffer=0xc00044a914) returned 1
	[0214.884] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8460 | out: pbBuffer=0xc0001b8460) returned 1
	[0214.884] GetFileType (hFile=0x118) returned 0x1
	[0214.884] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10752) returned 1
	[0214.885] WriteFile (in: hFile=0x118, lpBuffer=0xc000126000*, nNumberOfBytesToWrite=0x2a00, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000126000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2a00, lpOverlapped=0xc000155ce8) returned 1
	[0214.885] GetFileType (hFile=0x118) returned 0x1
	[0214.885] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2a00, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10752) returned 1
	[0214.885] GetFileType (hFile=0x118) returned 0x1
	[0214.885] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10752) returned 1
	[0214.886] WriteFile (in: hFile=0x118, lpBuffer=0xc000112700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000112700*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0214.886] GetFileType (hFile=0x118) returned 0x1
	[0214.886] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x2a00, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10752) returned 1
	[0214.886] CloseHandle (hObject=0x118) returned 1
	[0214.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf.egmwv")) returned 0x20
	[0214.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.891] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf")) returned 0x20
	[0214.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x20) returned 1
	[0214.898] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.935] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0214.935] ReadFile (in: hFile=0xa8, lpBuffer=0xc000244800, nNumberOfBytesToRead=0x406c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000244800*, lpNumberOfBytesRead=0xc0002d7cec*=0x406c, lpOverlapped=0x0) returned 1
	[0214.940] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0214.941] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0214.941] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f7e | out: pbBuffer=0xc000214f7e) returned 1
	[0214.941] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0214.941] GetFileType (hFile=0xa8) returned 0x1
	[0214.941] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=16492) returned 1
	[0214.941] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004a0000*, nNumberOfBytesToWrite=0x406c, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc0004a0000*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x406c, lpOverlapped=0xc0005d3ce8) returned 1
	[0214.942] GetFileType (hFile=0xa8) returned 0x1
	[0214.942] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x406c, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=16492) returned 1
	[0214.942] GetFileType (hFile=0xa8) returned 0x1
	[0214.942] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=16492) returned 1
	[0214.942] WriteFile (in: hFile=0xa8, lpBuffer=0xc00013f500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc00013f500*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x227, lpOverlapped=0xc0005d3ce8) returned 1
	[0214.943] GetFileType (hFile=0xa8) returned 0x1
	[0214.943] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x406c, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=16492) returned 1
	[0214.943] CloseHandle (hObject=0xa8) returned 1
	[0214.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf.egmwv")) returned 0x20
	[0214.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.947] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0214.962] SetEvent (hEvent=0x120) returned 1
	[0214.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf")) returned 0x20
	[0214.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF", dwFileAttributes=0x20) returned 1
	[0214.965] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.994] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0214.994] ReadFile (in: hFile=0x118, lpBuffer=0xc000158000, nNumberOfBytesToRead=0x3eb4, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000158000*, lpNumberOfBytesRead=0xc0002d7cec*=0x3eb4, lpOverlapped=0x0) returned 1
	[0214.999] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0214.999] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000233002 | out: pbBuffer=0xc000233002) returned 1
	[0214.999] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000233008 | out: pbBuffer=0xc000233008) returned 1
	[0214.999] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000233067 | out: pbBuffer=0xc000233067) returned 1
	[0214.999] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0215.000] GetFileType (hFile=0x118) returned 0x1
	[0215.000] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=16052) returned 1
	[0215.000] WriteFile (in: hFile=0x118, lpBuffer=0xc0000fc000*, nNumberOfBytesToWrite=0x3eb4, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc0000fc000*, lpNumberOfBytesWritten=0xc0000edccc*=0x3eb4, lpOverlapped=0xc0000edce8) returned 1
	[0215.000] GetFileType (hFile=0x118) returned 0x1
	[0215.001] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3eb4, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=16052) returned 1
	[0215.001] GetFileType (hFile=0x118) returned 0x1
	[0215.001] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=16052) returned 1
	[0215.001] WriteFile (in: hFile=0x118, lpBuffer=0xc000365500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc000365500*, lpNumberOfBytesWritten=0xc0000edccc*=0x233, lpOverlapped=0xc0000edce8) returned 1
	[0215.001] GetFileType (hFile=0x118) returned 0x1
	[0215.002] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3eb4, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=16052) returned 1
	[0215.002] CloseHandle (hObject=0x118) returned 1
	[0215.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf.egmwv")) returned 0x20
	[0215.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.003] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.015] SetEvent (hEvent=0x120) returned 1
	[0215.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf")) returned 0x20
	[0215.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF", dwFileAttributes=0x20) returned 1
	[0215.016] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0215.042] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.042] ReadFile (in: hFile=0x118, lpBuffer=0xc000120000, nNumberOfBytesToRead=0xd28, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000120000*, lpNumberOfBytesRead=0xc000387cec*=0xd28, lpOverlapped=0x0) returned 1
	[0215.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0215.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0215.048] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000233c02 | out: pbBuffer=0xc000233c02) returned 1
	[0215.048] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0215.048] GetFileType (hFile=0x118) returned 0x1
	[0215.048] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=3368) returned 1
	[0215.048] WriteFile (in: hFile=0x118, lpBuffer=0xc000446000*, nNumberOfBytesToWrite=0xd28, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc000446000*, lpNumberOfBytesWritten=0xc0000edccc*=0xd28, lpOverlapped=0xc0000edce8) returned 1
	[0215.048] GetFileType (hFile=0x118) returned 0x1
	[0215.049] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xd28, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=3368) returned 1
	[0215.049] GetFileType (hFile=0x118) returned 0x1
	[0215.049] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=3368) returned 1
	[0215.049] WriteFile (in: hFile=0x118, lpBuffer=0xc000430e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc000430e00*, lpNumberOfBytesWritten=0xc0000edccc*=0x227, lpOverlapped=0xc0000edce8) returned 1
	[0215.049] GetFileType (hFile=0x118) returned 0x1
	[0215.049] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xd28, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=3368) returned 1
	[0215.050] CloseHandle (hObject=0x118) returned 1
	[0215.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf.egmwv")) returned 0x20
	[0215.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.052] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf")) returned 0x20
	[0215.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF", dwFileAttributes=0x20) returned 1
	[0215.070] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.102] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.102] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003aa000, nNumberOfBytesToRead=0x2628, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003aa000*, lpNumberOfBytesRead=0xc000387cec*=0x2628, lpOverlapped=0x0) returned 1
	[0215.109] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065b0 | out: pbBuffer=0xc0002065b0) returned 1
	[0215.109] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065ca | out: pbBuffer=0xc0002065ca) returned 1
	[0215.109] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f5602 | out: pbBuffer=0xc0001f5602) returned 1
	[0215.109] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f5690 | out: pbBuffer=0xc0001f5690) returned 1
	[0215.109] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065f0 | out: pbBuffer=0xc0002065f0) returned 1
	[0215.109] GetFileType (hFile=0xcc) returned 0x1
	[0215.109] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=9768) returned 1
	[0215.110] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002e4000*, nNumberOfBytesToWrite=0x2628, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc0002e4000*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x2628, lpOverlapped=0xc0005d3ce8) returned 1
	[0215.110] GetFileType (hFile=0xcc) returned 0x1
	[0215.110] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2628, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=9768) returned 1
	[0215.110] GetFileType (hFile=0xcc) returned 0x1
	[0215.111] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0005d3ca0*=9768) returned 1
	[0215.111] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002e8000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0005d3ccc, lpOverlapped=0xc0005d3ce8 | out: lpBuffer=0xc0002e8000*, lpNumberOfBytesWritten=0xc0005d3ccc*=0x227, lpOverlapped=0xc0005d3ce8) returned 1
	[0215.111] GetFileType (hFile=0xcc) returned 0x1
	[0215.111] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2628, lpNewFilePointer=0xc0005d3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0005d3ca0*=9768) returned 1
	[0215.112] CloseHandle (hObject=0xcc) returned 1
	[0215.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf.egmwv")) returned 0x20
	[0215.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.115] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf")) returned 0x20
	[0215.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF", dwFileAttributes=0x20) returned 1
	[0215.126] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.171] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.171] ReadFile (in: hFile=0xa8, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x3094, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc000387cec*=0x3094, lpOverlapped=0x0) returned 1
	[0215.177] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0215.177] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b7a | out: pbBuffer=0xc000052b7a) returned 1
	[0215.177] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0215.177] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0215.177] GetFileType (hFile=0xa8) returned 0x1
	[0215.177] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=12436) returned 1
	[0215.178] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000f0000*, nNumberOfBytesToWrite=0x3094, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc0000f0000*, lpNumberOfBytesWritten=0xc000347ccc*=0x3094, lpOverlapped=0xc000347ce8) returned 1
	[0215.178] GetFileType (hFile=0xa8) returned 0x1
	[0215.178] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3094, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=12436) returned 1
	[0215.179] GetFileType (hFile=0xa8) returned 0x1
	[0215.179] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000347ca0*=12436) returned 1
	[0215.179] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002a3500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000347ccc, lpOverlapped=0xc000347ce8 | out: lpBuffer=0xc0002a3500*, lpNumberOfBytesWritten=0xc000347ccc*=0x227, lpOverlapped=0xc000347ce8) returned 1
	[0215.179] GetFileType (hFile=0xa8) returned 0x1
	[0215.179] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3094, lpNewFilePointer=0xc000347ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000347ca0*=12436) returned 1
	[0215.180] CloseHandle (hObject=0xa8) returned 1
	[0215.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf.egmwv")) returned 0x20
	[0215.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.184] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.190] SetEvent (hEvent=0xc4) returned 1
	[0215.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf")) returned 0x20
	[0215.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF", dwFileAttributes=0x20) returned 1
	[0215.193] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.228] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0215.228] ReadFile (in: hFile=0xcc, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x6688, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc0002d3cec*=0x6688, lpOverlapped=0x0) returned 1
	[0215.235] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0215.235] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0802 | out: pbBuffer=0xc0002c0802) returned 1
	[0215.235] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c082b | out: pbBuffer=0xc0002c082b) returned 1
	[0215.235] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0215.235] GetFileType (hFile=0xcc) returned 0x1
	[0215.236] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=26248) returned 1
	[0215.236] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002aa000*, nNumberOfBytesToWrite=0x6688, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesWritten=0xc000343ccc*=0x6688, lpOverlapped=0xc000343ce8) returned 1
	[0215.236] GetFileType (hFile=0xcc) returned 0x1
	[0215.236] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6688, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=26248) returned 1
	[0215.237] GetFileType (hFile=0xcc) returned 0x1
	[0215.237] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=26248) returned 1
	[0215.237] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003daa80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc0003daa80*, lpNumberOfBytesWritten=0xc000343ccc*=0x22a, lpOverlapped=0xc000343ce8) returned 1
	[0215.237] GetFileType (hFile=0xcc) returned 0x1
	[0215.237] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6688, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=26248) returned 1
	[0215.237] CloseHandle (hObject=0xcc) returned 1
	[0215.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf.egmwv")) returned 0x20
	[0215.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.253] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.254] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.267] SetEvent (hEvent=0xc4) returned 1
	[0215.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf")) returned 0x20
	[0215.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF", dwFileAttributes=0x20) returned 1
	[0215.268] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.295] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0215.295] ReadFile (in: hFile=0xe8, lpBuffer=0xc000456000, nNumberOfBytesToRead=0x4f4, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000456000*, lpNumberOfBytesRead=0xc0002d3cec*=0x4f4, lpOverlapped=0x0) returned 1
	[0215.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82a0 | out: pbBuffer=0xc0001b82a0) returned 1
	[0215.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b82ba | out: pbBuffer=0xc0001b82ba) returned 1
	[0215.301] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000373302 | out: pbBuffer=0xc000373302) returned 1
	[0215.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00037333e | out: pbBuffer=0xc00037333e) returned 1
	[0215.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000373343 | out: pbBuffer=0xc000373343) returned 1
	[0215.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82e0 | out: pbBuffer=0xc0001b82e0) returned 1
	[0215.301] GetFileType (hFile=0xe8) returned 0x1
	[0215.301] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=1268) returned 1
	[0215.301] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002e5000*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc0002e5000*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x4f4, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.302] GetFileType (hFile=0xe8) returned 0x1
	[0215.302] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4f4, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=1268) returned 1
	[0215.302] GetFileType (hFile=0xe8) returned 0x1
	[0215.302] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=1268) returned 1
	[0215.302] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002e8e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc0002e8e00*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x22a, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.303] GetFileType (hFile=0xe8) returned 0x1
	[0215.303] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4f4, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=1268) returned 1
	[0215.303] CloseHandle (hObject=0xe8) returned 1
	[0215.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf.egmwv")) returned 0x20
	[0215.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.306] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.310] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.320] SetEvent (hEvent=0xc4) returned 1
	[0215.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf")) returned 0x20
	[0215.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x20) returned 1
	[0215.412] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.440] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.440] ReadFile (in: hFile=0xe8, lpBuffer=0xc000124000, nNumberOfBytesToRead=0x4b8, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000124000*, lpNumberOfBytesRead=0xc000387cec*=0x4b8, lpOverlapped=0x0) returned 1
	[0215.446] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0215.446] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ca | out: pbBuffer=0xc0002b62ca) returned 1
	[0215.446] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00012c602 | out: pbBuffer=0xc00012c602) returned 1
	[0215.446] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00012c634 | out: pbBuffer=0xc00012c634) returned 1
	[0215.446] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0215.446] GetFileType (hFile=0xe8) returned 0x1
	[0215.447] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=1208) returned 1
	[0215.447] WriteFile (in: hFile=0xe8, lpBuffer=0xc000138000*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc000138000*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x4b8, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.447] GetFileType (hFile=0xe8) returned 0x1
	[0215.447] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4b8, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=1208) returned 1
	[0215.447] GetFileType (hFile=0xe8) returned 0x1
	[0215.447] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=1208) returned 1
	[0215.448] WriteFile (in: hFile=0xe8, lpBuffer=0xc000132e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc000132e00*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x227, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.448] GetFileType (hFile=0xe8) returned 0x1
	[0215.448] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4b8, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=1208) returned 1
	[0215.448] CloseHandle (hObject=0xe8) returned 1
	[0215.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf.egmwv")) returned 0x20
	[0215.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.451] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf")) returned 0x20
	[0215.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF", dwFileAttributes=0x20) returned 1
	[0215.477] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.512] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.512] ReadFile (in: hFile=0xa8, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x132c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000387cec*=0x132c, lpOverlapped=0x0) returned 1
	[0215.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068f0 | out: pbBuffer=0xc0002068f0) returned 1
	[0215.519] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000220e02 | out: pbBuffer=0xc000220e02) returned 1
	[0215.520] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000220e90 | out: pbBuffer=0xc000220e90) returned 1
	[0215.520] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206930 | out: pbBuffer=0xc000206930) returned 1
	[0215.520] GetFileType (hFile=0xa8) returned 0x1
	[0215.520] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=4908) returned 1
	[0215.520] WriteFile (in: hFile=0xa8, lpBuffer=0xc00024a000*, nNumberOfBytesToWrite=0x132c, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc00024a000*, lpNumberOfBytesWritten=0xc000343ccc*=0x132c, lpOverlapped=0xc000343ce8) returned 1
	[0215.521] GetFileType (hFile=0xa8) returned 0x1
	[0215.521] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x132c, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=4908) returned 1
	[0215.521] GetFileType (hFile=0xa8) returned 0x1
	[0215.521] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=4908) returned 1
	[0215.521] WriteFile (in: hFile=0xa8, lpBuffer=0xc000235500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc000235500*, lpNumberOfBytesWritten=0xc000343ccc*=0x22a, lpOverlapped=0xc000343ce8) returned 1
	[0215.522] GetFileType (hFile=0xa8) returned 0x1
	[0215.522] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x132c, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=4908) returned 1
	[0215.522] CloseHandle (hObject=0xa8) returned 1
	[0215.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf.egmwv")) returned 0x20
	[0215.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.529] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf")) returned 0x20
	[0215.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF", dwFileAttributes=0x20) returned 1
	[0215.537] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.620] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.620] ReadFile (in: hFile=0xcc, lpBuffer=0xc000384000, nNumberOfBytesToRead=0x1ec4, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000384000*, lpNumberOfBytesRead=0xc000387cec*=0x1ec4, lpOverlapped=0x0) returned 1
	[0215.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0215.625] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1802 | out: pbBuffer=0xc0002c1802) returned 1
	[0215.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1836 | out: pbBuffer=0xc0002c1836) returned 1
	[0215.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1842 | out: pbBuffer=0xc0002c1842) returned 1
	[0215.626] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1867 | out: pbBuffer=0xc0002c1867) returned 1
	[0215.626] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0215.626] GetFileType (hFile=0xcc) returned 0x1
	[0215.626] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7876) returned 1
	[0215.626] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000b0000*, nNumberOfBytesToWrite=0x1ec4, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000b0000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1ec4, lpOverlapped=0xc000155ce8) returned 1
	[0215.627] GetFileType (hFile=0xcc) returned 0x1
	[0215.627] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1ec4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7876) returned 1
	[0215.627] GetFileType (hFile=0xcc) returned 0x1
	[0215.627] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7876) returned 1
	[0215.627] WriteFile (in: hFile=0xcc, lpBuffer=0xc000211180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000211180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0215.628] GetFileType (hFile=0xcc) returned 0x1
	[0215.628] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1ec4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7876) returned 1
	[0215.628] CloseHandle (hObject=0xcc) returned 1
	[0215.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf.egmwv")) returned 0x20
	[0215.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.632] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.646] SetEvent (hEvent=0xe4) returned 1
	[0215.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf")) returned 0x20
	[0215.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF", dwFileAttributes=0x20) returned 1
	[0215.653] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.682] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.682] ReadFile (in: hFile=0xe8, lpBuffer=0xc000390000, nNumberOfBytesToRead=0x1b2c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000390000*, lpNumberOfBytesRead=0xc000387cec*=0x1b2c, lpOverlapped=0x0) returned 1
	[0215.688] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0215.688] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052e9a | out: pbBuffer=0xc000052e9a) returned 1
	[0215.689] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000398402 | out: pbBuffer=0xc000398402) returned 1
	[0215.689] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0215.689] GetFileType (hFile=0xe8) returned 0x1
	[0215.689] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6956) returned 1
	[0215.689] WriteFile (in: hFile=0xe8, lpBuffer=0xc000158000*, nNumberOfBytesToWrite=0x1b2c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000158000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1b2c, lpOverlapped=0xc000155ce8) returned 1
	[0215.690] GetFileType (hFile=0xe8) returned 0x1
	[0215.690] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b2c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6956) returned 1
	[0215.690] GetFileType (hFile=0xe8) returned 0x1
	[0215.690] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6956) returned 1
	[0215.690] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001b2a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001b2a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0215.691] GetFileType (hFile=0xe8) returned 0x1
	[0215.691] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b2c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6956) returned 1
	[0215.691] CloseHandle (hObject=0xe8) returned 1
	[0215.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf.egmwv")) returned 0x20
	[0215.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.694] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.698] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.709] SetEvent (hEvent=0xe4) returned 1
	[0215.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf")) returned 0x20
	[0215.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF", dwFileAttributes=0x20) returned 1
	[0215.712] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.742] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.743] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003f6000, nNumberOfBytesToRead=0x2c54, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f6000*, lpNumberOfBytesRead=0xc000387cec*=0x2c54, lpOverlapped=0x0) returned 1
	[0215.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0215.749] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0215.749] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000402402 | out: pbBuffer=0xc000402402) returned 1
	[0215.749] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0215.749] GetFileType (hFile=0xe8) returned 0x1
	[0215.749] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=11348) returned 1
	[0215.749] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000e6000*, nNumberOfBytesToWrite=0x2c54, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0000e6000*, lpNumberOfBytesWritten=0xc00017fccc*=0x2c54, lpOverlapped=0xc00017fce8) returned 1
	[0215.750] GetFileType (hFile=0xe8) returned 0x1
	[0215.750] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2c54, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=11348) returned 1
	[0215.750] GetFileType (hFile=0xe8) returned 0x1
	[0215.750] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=11348) returned 1
	[0215.750] WriteFile (in: hFile=0xe8, lpBuffer=0xc000408e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc000408e00*, lpNumberOfBytesWritten=0xc00017fccc*=0x22a, lpOverlapped=0xc00017fce8) returned 1
	[0215.751] GetFileType (hFile=0xe8) returned 0x1
	[0215.751] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2c54, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=11348) returned 1
	[0215.751] CloseHandle (hObject=0xe8) returned 1
	[0215.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf.egmwv")) returned 0x20
	[0215.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.754] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.758] SetEvent (hEvent=0xe4) returned 1
	[0215.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf")) returned 0x20
	[0215.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF", dwFileAttributes=0x20) returned 1
	[0215.760] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.796] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.796] ReadFile (in: hFile=0xa8, lpBuffer=0xc000458000, nNumberOfBytesToRead=0x778, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000458000*, lpNumberOfBytesRead=0xc000387cec*=0x778, lpOverlapped=0x0) returned 1
	[0215.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531a0 | out: pbBuffer=0xc0000531a0) returned 1
	[0215.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531ba | out: pbBuffer=0xc0000531ba) returned 1
	[0215.802] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001d8102 | out: pbBuffer=0xc0001d8102) returned 1
	[0215.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d815a | out: pbBuffer=0xc0001d815a) returned 1
	[0215.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531e0 | out: pbBuffer=0xc0000531e0) returned 1
	[0215.802] GetFileType (hFile=0xa8) returned 0x1
	[0215.803] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1912) returned 1
	[0215.803] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001df000*, nNumberOfBytesToWrite=0x778, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001df000*, lpNumberOfBytesWritten=0xc000155ccc*=0x778, lpOverlapped=0xc000155ce8) returned 1
	[0215.803] GetFileType (hFile=0xa8) returned 0x1
	[0215.803] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x778, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1912) returned 1
	[0215.803] GetFileType (hFile=0xa8) returned 0x1
	[0215.804] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1912) returned 1
	[0215.804] WriteFile (in: hFile=0xa8, lpBuffer=0xc000361c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000361c00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0215.804] GetFileType (hFile=0xa8) returned 0x1
	[0215.804] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x778, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1912) returned 1
	[0215.804] CloseHandle (hObject=0xa8) returned 1
	[0215.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf.egmwv")) returned 0x20
	[0215.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.809] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf")) returned 0x20
	[0215.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF", dwFileAttributes=0x20) returned 1
	[0215.815] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.851] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0215.851] ReadFile (in: hFile=0xcc, lpBuffer=0xc00013c000, nNumberOfBytesToRead=0x22b0, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00013c000*, lpNumberOfBytesRead=0xc0002d5cec*=0x22b0, lpOverlapped=0x0) returned 1
	[0215.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0215.857] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000120e02 | out: pbBuffer=0xc000120e02) returned 1
	[0215.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0215.857] GetFileType (hFile=0xcc) returned 0x1
	[0215.857] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002f5ca0*=8880) returned 1
	[0215.857] WriteFile (in: hFile=0xcc, lpBuffer=0xc00032e000*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0xc0002f5ccc, lpOverlapped=0xc0002f5ce8 | out: lpBuffer=0xc00032e000*, lpNumberOfBytesWritten=0xc0002f5ccc*=0x22b0, lpOverlapped=0xc0002f5ce8) returned 1
	[0215.858] GetFileType (hFile=0xcc) returned 0x1
	[0215.858] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x22b0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002f5ca0*=8880) returned 1
	[0215.858] GetFileType (hFile=0xcc) returned 0x1
	[0215.858] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002f5ca0*=8880) returned 1
	[0215.858] WriteFile (in: hFile=0xcc, lpBuffer=0xc000312700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002f5ccc, lpOverlapped=0xc0002f5ce8 | out: lpBuffer=0xc000312700*, lpNumberOfBytesWritten=0xc0002f5ccc*=0x227, lpOverlapped=0xc0002f5ce8) returned 1
	[0215.859] GetFileType (hFile=0xcc) returned 0x1
	[0215.859] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x22b0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002f5ca0*=8880) returned 1
	[0215.859] CloseHandle (hObject=0xcc) returned 1
	[0215.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf.egmwv")) returned 0x20
	[0215.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.864] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.878] SetEvent (hEvent=0xe4) returned 1
	[0215.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf")) returned 0x20
	[0215.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF", dwFileAttributes=0x20) returned 1
	[0215.882] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.915] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0215.915] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x4e80, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000429cec*=0x4e80, lpOverlapped=0x0) returned 1
	[0215.920] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0215.920] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0215.920] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0215.920] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d52 | out: pbBuffer=0xc000214d52) returned 1
	[0215.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d5b | out: pbBuffer=0xc000214d5b) returned 1
	[0215.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0215.921] GetFileType (hFile=0xe8) returned 0x1
	[0215.921] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=20096) returned 1
	[0215.921] WriteFile (in: hFile=0xe8, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0x4e80, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x4e80, lpOverlapped=0xc0004b3ce8) returned 1
	[0215.922] GetFileType (hFile=0xe8) returned 0x1
	[0215.922] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4e80, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=20096) returned 1
	[0215.922] GetFileType (hFile=0xe8) returned 0x1
	[0215.922] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=20096) returned 1
	[0215.922] WriteFile (in: hFile=0xe8, lpBuffer=0xc00045e000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00045e000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x227, lpOverlapped=0xc0004b3ce8) returned 1
	[0215.923] GetFileType (hFile=0xe8) returned 0x1
	[0215.923] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4e80, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=20096) returned 1
	[0215.923] CloseHandle (hObject=0xe8) returned 1
	[0215.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf.egmwv")) returned 0x20
	[0215.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.932] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.940] SetEvent (hEvent=0x144) returned 1
	[0215.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf")) returned 0x20
	[0215.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF", dwFileAttributes=0x20) returned 1
	[0215.948] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.975] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.977] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0215.977] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001ba000, nNumberOfBytesToRead=0x9658, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesRead=0xc000387cec*=0x9658, lpOverlapped=0x0) returned 1
	[0215.983] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0215.983] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d0a | out: pbBuffer=0xc000052d0a) returned 1
	[0215.983] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0215.983] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215984 | out: pbBuffer=0xc000215984) returned 1
	[0215.983] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0215.984] GetFileType (hFile=0xa8) returned 0x1
	[0215.984] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=38488) returned 1
	[0215.984] WriteFile (in: hFile=0xa8, lpBuffer=0xc00034a000*, nNumberOfBytesToWrite=0x9658, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x9658, lpOverlapped=0xc0004b3ce8) returned 1
	[0215.985] GetFileType (hFile=0xa8) returned 0x1
	[0215.985] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x9658, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=38488) returned 1
	[0215.985] GetFileType (hFile=0xa8) returned 0x1
	[0215.985] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=38488) returned 1
	[0215.985] WriteFile (in: hFile=0xa8, lpBuffer=0xc00045f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00045f880*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x230, lpOverlapped=0xc0004b3ce8) returned 1
	[0215.985] GetFileType (hFile=0xa8) returned 0x1
	[0215.986] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x9658, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=38488) returned 1
	[0215.986] CloseHandle (hObject=0xa8) returned 1
	[0215.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf.egmwv")) returned 0x20
	[0215.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.988] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0215.992] SetEvent (hEvent=0x144) returned 1
	[0215.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf")) returned 0x20
	[0215.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF", dwFileAttributes=0x20) returned 1
	[0215.993] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.026] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0216.026] ReadFile (in: hFile=0xcc, lpBuffer=0xc000403000, nNumberOfBytesToRead=0x4464, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000403000*, lpNumberOfBytesRead=0xc000387cec*=0x4464, lpOverlapped=0x0) returned 1
	[0216.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0216.032] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000454102 | out: pbBuffer=0xc000454102) returned 1
	[0216.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00045418e | out: pbBuffer=0xc00045418e) returned 1
	[0216.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004541a1 | out: pbBuffer=0xc0004541a1) returned 1
	[0216.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004541e5 | out: pbBuffer=0xc0004541e5) returned 1
	[0216.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0216.033] GetFileType (hFile=0xcc) returned 0x1
	[0216.033] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000f9ca0*=17508) returned 1
	[0216.033] WriteFile (in: hFile=0xcc, lpBuffer=0xc00026a000*, nNumberOfBytesToWrite=0x4464, lpNumberOfBytesWritten=0xc0000f9ccc, lpOverlapped=0xc0000f9ce8 | out: lpBuffer=0xc00026a000*, lpNumberOfBytesWritten=0xc0000f9ccc*=0x4464, lpOverlapped=0xc0000f9ce8) returned 1
	[0216.034] GetFileType (hFile=0xcc) returned 0x1
	[0216.034] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4464, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000f9ca0*=17508) returned 1
	[0216.034] GetFileType (hFile=0xcc) returned 0x1
	[0216.034] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000f9ca0*=17508) returned 1
	[0216.034] WriteFile (in: hFile=0xcc, lpBuffer=0xc000452e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000f9ccc, lpOverlapped=0xc0000f9ce8 | out: lpBuffer=0xc000452e00*, lpNumberOfBytesWritten=0xc0000f9ccc*=0x227, lpOverlapped=0xc0000f9ce8) returned 1
	[0216.035] GetFileType (hFile=0xcc) returned 0x1
	[0216.035] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4464, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000f9ca0*=17508) returned 1
	[0216.035] CloseHandle (hObject=0xcc) returned 1
	[0216.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf.egmwv")) returned 0x20
	[0216.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.039] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf")) returned 0x20
	[0216.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF", dwFileAttributes=0x20) returned 1
	[0216.045] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.079] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0216.079] ReadFile (in: hFile=0xe8, lpBuffer=0xc00032a000, nNumberOfBytesToRead=0x1d08, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00032a000*, lpNumberOfBytesRead=0xc000387cec*=0x1d08, lpOverlapped=0x0) returned 1
	[0216.084] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0216.086] SetEvent (hEvent=0x120) returned 1
	[0216.086] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0216.086] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eaa | out: pbBuffer=0xc000052eaa) returned 1
	[0216.086] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00014ca02 | out: pbBuffer=0xc00014ca02) returned 1
	[0216.086] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014ca4e | out: pbBuffer=0xc00014ca4e) returned 1
	[0216.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014ca6f | out: pbBuffer=0xc00014ca6f) returned 1
	[0216.087] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0216.087] GetFileType (hFile=0xe8) returned 0x1
	[0216.087] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=7432) returned 1
	[0216.087] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004c2000*, nNumberOfBytesToWrite=0x1d08, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0004c2000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x1d08, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.087] GetFileType (hFile=0xe8) returned 0x1
	[0216.088] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1d08, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=7432) returned 1
	[0216.088] GetFileType (hFile=0xe8) returned 0x1
	[0216.088] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=7432) returned 1
	[0216.088] WriteFile (in: hFile=0xe8, lpBuffer=0xc000335180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000335180*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x227, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.088] GetFileType (hFile=0xe8) returned 0x1
	[0216.088] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1d08, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=7432) returned 1
	[0216.088] CloseHandle (hObject=0xe8) returned 1
	[0216.092] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf.egmwv")) returned 0x20
	[0216.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.109] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.118] SetEvent (hEvent=0x124) returned 1
	[0216.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf")) returned 0x20
	[0216.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF", dwFileAttributes=0x20) returned 1
	[0216.124] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.150] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0216.150] ReadFile (in: hFile=0xa8, lpBuffer=0xc00016e000, nNumberOfBytesToRead=0xb66e, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesRead=0xc000169cec*=0xb66e, lpOverlapped=0x0) returned 1
	[0216.157] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0216.157] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62aa | out: pbBuffer=0xc0002b62aa) returned 1
	[0216.157] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00014de02 | out: pbBuffer=0xc00014de02) returned 1
	[0216.157] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014de06 | out: pbBuffer=0xc00014de06) returned 1
	[0216.157] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014decb | out: pbBuffer=0xc00014decb) returned 1
	[0216.158] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0216.158] GetFileType (hFile=0xa8) returned 0x1
	[0216.158] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=46702) returned 1
	[0216.159] WriteFile (in: hFile=0xa8, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0xb66e, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc0004afccc*=0xb66e, lpOverlapped=0xc0004afce8) returned 1
	[0216.159] GetFileType (hFile=0xa8) returned 0x1
	[0216.160] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb66e, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=46702) returned 1
	[0216.160] GetFileType (hFile=0xa8) returned 0x1
	[0216.160] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=46702) returned 1
	[0216.160] WriteFile (in: hFile=0xa8, lpBuffer=0xc000288e00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc000288e00*, lpNumberOfBytesWritten=0xc0004afccc*=0x239, lpOverlapped=0xc0004afce8) returned 1
	[0216.160] GetFileType (hFile=0xa8) returned 0x1
	[0216.160] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb66e, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=46702) returned 1
	[0216.161] CloseHandle (hObject=0xa8) returned 1
	[0216.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf.egmwv")) returned 0x20
	[0216.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.163] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.167] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.179] SetEvent (hEvent=0x124) returned 1
	[0216.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf")) returned 0x20
	[0216.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF", dwFileAttributes=0x20) returned 1
	[0216.180] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.214] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0216.214] ReadFile (in: hFile=0xa8, lpBuffer=0xc0004bd000, nNumberOfBytesToRead=0x2c84, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004bd000*, lpNumberOfBytesRead=0xc000169cec*=0x2c84, lpOverlapped=0x0) returned 1
	[0216.221] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b80 | out: pbBuffer=0xc000052b80) returned 1
	[0216.221] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b9a | out: pbBuffer=0xc000052b9a) returned 1
	[0216.221] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215202 | out: pbBuffer=0xc000215202) returned 1
	[0216.222] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bc0 | out: pbBuffer=0xc000052bc0) returned 1
	[0216.222] GetFileType (hFile=0xa8) returned 0x1
	[0216.222] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000251ca0*=11396) returned 1
	[0216.222] WriteFile (in: hFile=0xa8, lpBuffer=0xc000434000*, nNumberOfBytesToWrite=0x2c84, lpNumberOfBytesWritten=0xc000251ccc, lpOverlapped=0xc000251ce8 | out: lpBuffer=0xc000434000*, lpNumberOfBytesWritten=0xc000251ccc*=0x2c84, lpOverlapped=0xc000251ce8) returned 1
	[0216.223] GetFileType (hFile=0xa8) returned 0x1
	[0216.223] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2c84, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000251ca0*=11396) returned 1
	[0216.223] GetFileType (hFile=0xa8) returned 0x1
	[0216.223] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000251ca0*=11396) returned 1
	[0216.223] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003f7500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000251ccc, lpOverlapped=0xc000251ce8 | out: lpBuffer=0xc0003f7500*, lpNumberOfBytesWritten=0xc000251ccc*=0x227, lpOverlapped=0xc000251ce8) returned 1
	[0216.223] GetFileType (hFile=0xa8) returned 0x1
	[0216.224] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2c84, lpNewFilePointer=0xc000251ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000251ca0*=11396) returned 1
	[0216.224] CloseHandle (hObject=0xa8) returned 1
	[0216.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf.egmwv")) returned 0x20
	[0216.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.227] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.231] SetEvent (hEvent=0x124) returned 1
	[0216.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf")) returned 0x20
	[0216.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF", dwFileAttributes=0x20) returned 1
	[0216.233] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.274] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0216.274] ReadFile (in: hFile=0xcc, lpBuffer=0xc000278000, nNumberOfBytesToRead=0x72de, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000278000*, lpNumberOfBytesRead=0xc000169cec*=0x72de, lpOverlapped=0x0) returned 1
	[0216.280] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0216.280] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1a02 | out: pbBuffer=0xc0002c1a02) returned 1
	[0216.280] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1a62 | out: pbBuffer=0xc0002c1a62) returned 1
	[0216.280] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1a73 | out: pbBuffer=0xc0002c1a73) returned 1
	[0216.280] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1aa7 | out: pbBuffer=0xc0002c1aa7) returned 1
	[0216.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0216.281] GetFileType (hFile=0xcc) returned 0x1
	[0216.281] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=29406) returned 1
	[0216.281] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x72de, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0004afccc*=0x72de, lpOverlapped=0xc0004afce8) returned 1
	[0216.282] GetFileType (hFile=0xcc) returned 0x1
	[0216.282] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x72de, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=29406) returned 1
	[0216.282] GetFileType (hFile=0xcc) returned 0x1
	[0216.282] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=29406) returned 1
	[0216.283] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001f6000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0001f6000*, lpNumberOfBytesWritten=0xc0004afccc*=0x236, lpOverlapped=0xc0004afce8) returned 1
	[0216.283] GetFileType (hFile=0xcc) returned 0x1
	[0216.283] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x72de, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=29406) returned 1
	[0216.283] CloseHandle (hObject=0xcc) returned 1
	[0216.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf.egmwv")) returned 0x20
	[0216.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.288] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf")) returned 0x20
	[0216.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x20) returned 1
	[0216.294] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.335] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0216.335] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x3888, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc00016bcec*=0x3888, lpOverlapped=0x0) returned 1
	[0216.342] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0216.342] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001102 | out: pbBuffer=0xc000001102) returned 1
	[0216.342] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0216.342] GetFileType (hFile=0xe8) returned 0x1
	[0216.342] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=14472) returned 1
	[0216.343] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0x3888, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x3888, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.343] GetFileType (hFile=0xe8) returned 0x1
	[0216.343] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3888, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=14472) returned 1
	[0216.343] GetFileType (hFile=0xe8) returned 0x1
	[0216.344] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=14472) returned 1
	[0216.344] WriteFile (in: hFile=0xe8, lpBuffer=0xc000326e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000326e00*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x227, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.344] GetFileType (hFile=0xe8) returned 0x1
	[0216.344] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3888, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=14472) returned 1
	[0216.344] CloseHandle (hObject=0xe8) returned 1
	[0216.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf.egmwv")) returned 0x20
	[0216.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.349] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.363] SetEvent (hEvent=0x90) returned 1
	[0216.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf")) returned 0x20
	[0216.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x20) returned 1
	[0216.366] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.403] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0216.403] ReadFile (in: hFile=0xe8, lpBuffer=0xc000072000, nNumberOfBytesToRead=0x1b74, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000072000*, lpNumberOfBytesRead=0xc00016bcec*=0x1b74, lpOverlapped=0x0) returned 1
	[0216.408] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0216.408] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0216.408] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039602 | out: pbBuffer=0xc000039602) returned 1
	[0216.409] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039628 | out: pbBuffer=0xc000039628) returned 1
	[0216.409] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0216.409] GetFileType (hFile=0xe8) returned 0x1
	[0216.409] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=7028) returned 1
	[0216.409] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x1b74, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc0004afccc*=0x1b74, lpOverlapped=0xc0004afce8) returned 1
	[0216.410] GetFileType (hFile=0xe8) returned 0x1
	[0216.410] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b74, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=7028) returned 1
	[0216.410] GetFileType (hFile=0xe8) returned 0x1
	[0216.410] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=7028) returned 1
	[0216.410] WriteFile (in: hFile=0xe8, lpBuffer=0xc00021d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc00021d500*, lpNumberOfBytesWritten=0xc0004afccc*=0x230, lpOverlapped=0xc0004afce8) returned 1
	[0216.410] GetFileType (hFile=0xe8) returned 0x1
	[0216.410] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b74, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=7028) returned 1
	[0216.411] CloseHandle (hObject=0xe8) returned 1
	[0216.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf.egmwv")) returned 0x20
	[0216.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.412] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.420] SetEvent (hEvent=0x90) returned 1
	[0216.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf")) returned 0x20
	[0216.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x20) returned 1
	[0216.426] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.452] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0216.452] ReadFile (in: hFile=0xa8, lpBuffer=0xc00036e000, nNumberOfBytesToRead=0x2608, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00036e000*, lpNumberOfBytesRead=0xc00038dcec*=0x2608, lpOverlapped=0x0) returned 1
	[0216.459] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0216.459] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a4302 | out: pbBuffer=0xc0002a4302) returned 1
	[0216.459] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a43da | out: pbBuffer=0xc0002a43da) returned 1
	[0216.460] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0216.460] GetFileType (hFile=0xa8) returned 0x1
	[0216.460] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=9736) returned 1
	[0216.460] WriteFile (in: hFile=0xa8, lpBuffer=0xc00033e000*, nNumberOfBytesToWrite=0x2608, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc00033e000*, lpNumberOfBytesWritten=0xc0004afccc*=0x2608, lpOverlapped=0xc0004afce8) returned 1
	[0216.461] GetFileType (hFile=0xa8) returned 0x1
	[0216.461] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2608, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=9736) returned 1
	[0216.461] GetFileType (hFile=0xa8) returned 0x1
	[0216.461] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=9736) returned 1
	[0216.461] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002a8e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0002a8e00*, lpNumberOfBytesWritten=0xc0004afccc*=0x224, lpOverlapped=0xc0004afce8) returned 1
	[0216.462] GetFileType (hFile=0xa8) returned 0x1
	[0216.462] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2608, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=9736) returned 1
	[0216.462] CloseHandle (hObject=0xa8) returned 1
	[0216.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf.egmwv")) returned 0x20
	[0216.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.464] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.477] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.490] SetEvent (hEvent=0x90) returned 1
	[0216.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg")) returned 0x20
	[0216.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x20) returned 1
	[0216.492] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.530] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0216.530] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0xb57d, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc0002d3cec*=0xb57d, lpOverlapped=0x0) returned 1
	[0216.537] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206750 | out: pbBuffer=0xc000206750) returned 1
	[0216.538] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020676a | out: pbBuffer=0xc00020676a) returned 1
	[0216.538] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002fef02 | out: pbBuffer=0xc0002fef02) returned 1
	[0216.538] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002fefa5 | out: pbBuffer=0xc0002fefa5) returned 1
	[0216.538] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206790 | out: pbBuffer=0xc000206790) returned 1
	[0216.538] GetFileType (hFile=0xcc) returned 0x1
	[0216.539] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=46461) returned 1
	[0216.539] WriteFile (in: hFile=0xcc, lpBuffer=0xc000444000*, nNumberOfBytesToWrite=0xb57d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000444000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0xb57d, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.539] GetFileType (hFile=0xcc) returned 0x1
	[0216.540] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xb57d, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=46461) returned 1
	[0216.540] GetFileType (hFile=0xcc) returned 0x1
	[0216.540] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=46461) returned 1
	[0216.540] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000f7180*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0000f7180*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x23c, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.540] GetFileType (hFile=0xcc) returned 0x1
	[0216.541] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xb57d, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=46461) returned 1
	[0216.541] CloseHandle (hObject=0xcc) returned 1
	[0216.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.egmwv")) returned 0x20
	[0216.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.546] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg")) returned 0x20
	[0216.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x20) returned 1
	[0216.562] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.610] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0216.611] SetEvent (hEvent=0x90) returned 1
	[0216.611] ReadFile (in: hFile=0xa8, lpBuffer=0xc00023a000, nNumberOfBytesToRead=0xd902, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00023a000*, lpNumberOfBytesRead=0xc000389cec*=0xd902, lpOverlapped=0x0) returned 1
	[0216.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65b0 | out: pbBuffer=0xc0002b65b0) returned 1
	[0216.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ca | out: pbBuffer=0xc0002b65ca) returned 1
	[0216.617] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a5e02 | out: pbBuffer=0xc0002a5e02) returned 1
	[0216.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a5e18 | out: pbBuffer=0xc0002a5e18) returned 1
	[0216.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65f0 | out: pbBuffer=0xc0002b65f0) returned 1
	[0216.618] GetFileType (hFile=0xa8) returned 0x1
	[0216.618] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=55554) returned 1
	[0216.619] WriteFile (in: hFile=0xa8, lpBuffer=0xc000516000*, nNumberOfBytesToWrite=0xd902, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc000516000*, lpNumberOfBytesWritten=0xc0004afccc*=0xd902, lpOverlapped=0xc0004afce8) returned 1
	[0216.619] GetFileType (hFile=0xa8) returned 0x1
	[0216.620] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd902, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=55554) returned 1
	[0216.620] GetFileType (hFile=0xa8) returned 0x1
	[0216.620] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=55554) returned 1
	[0216.620] WriteFile (in: hFile=0xa8, lpBuffer=0xc000284000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc000284000*, lpNumberOfBytesWritten=0xc0004afccc*=0x22d, lpOverlapped=0xc0004afce8) returned 1
	[0216.620] GetFileType (hFile=0xa8) returned 0x1
	[0216.620] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd902, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=55554) returned 1
	[0216.621] CloseHandle (hObject=0xa8) returned 1
	[0216.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.egmwv")) returned 0x20
	[0216.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.626] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.640] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.656] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.670] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.684] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.709] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.727] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.737] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.757] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.767] SetEvent (hEvent=0x90) returned 1
	[0216.767] SetEvent (hEvent=0x144) returned 1
	[0216.767] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0216.770] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0216.771] SetEvent (hEvent=0x120) returned 1
	[0216.771] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0216.774] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.930] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.995] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0216.997] SetEvent (hEvent=0xc4) returned 1
	[0216.997] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.002] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.008] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.041] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.062] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.078] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.093] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.117] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.134] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.142] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.160] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.175] SetEvent (hEvent=0xc4) returned 1
	[0217.175] SetEvent (hEvent=0x144) returned 1
	[0217.175] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x102
	[0217.178] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.178] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x102
	[0217.182] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.182] SetEvent (hEvent=0x120) returned 1
	[0217.182] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x102
	[0217.184] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.184] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.509] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.510] SetEvent (hEvent=0xc4) returned 1
	[0217.510] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.516] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.530] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.548] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.571] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.581] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.649] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.704] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.733] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.767] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.790] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.800] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.832] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.853] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.861] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.879] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.909] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.927] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.941] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.955] SetEvent (hEvent=0x120) returned 1
	[0217.955] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.962] SetEvent (hEvent=0xc4) returned 1
	[0217.963] SetEvent (hEvent=0x144) returned 1
	[0217.963] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0217.968] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0217.969] SetEvent (hEvent=0xc4) returned 1
	[0217.970] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0217.971] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0217.985] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.005] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.020] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.033] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.066] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.086] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.100] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.111] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.141] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.158] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.167] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.185] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.197] SetEvent (hEvent=0x120) returned 1
	[0218.197] SetEvent (hEvent=0x144) returned 1
	[0218.197] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x102
	[0218.200] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.201] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0218.203] SetEvent (hEvent=0xc4) returned 1
	[0218.203] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x102
	[0218.204] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.205] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.415] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.418] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.419] SetEvent (hEvent=0x120) returned 1
	[0218.419] SetEvent (hEvent=0x90) returned 1
	[0218.419] SwitchToThread () returned 1
	[0218.420] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.423] SetEvent (hEvent=0x90) returned 1
	[0218.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf")) returned 0x20
	[0218.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x20) returned 1
	[0218.424] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.597] SetEvent (hEvent=0x70) returned 1
	[0218.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.598] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002f5cc4 | out: lpMode=0xc0002f5cc4) returned 0
	[0218.598] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0xd6b4, lpNumberOfBytesRead=0xc0002f5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc0002f5cec*=0xd6b4, lpOverlapped=0x0) returned 1
	[0218.605] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82a0 | out: pbBuffer=0xc0001d82a0) returned 1
	[0218.605] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d82ba | out: pbBuffer=0xc0001d82ba) returned 1
	[0218.605] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0218.605] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82e0 | out: pbBuffer=0xc0001d82e0) returned 1
	[0218.826] GetFileType (hFile=0xcc) returned 0x1
	[0218.827] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=54964) returned 1
	[0218.827] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000bc000*, nNumberOfBytesToWrite=0xd6b4, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0000bc000*, lpNumberOfBytesWritten=0xc0000dbccc*=0xd6b4, lpOverlapped=0xc0000dbce8) returned 1
	[0218.829] GetFileType (hFile=0xcc) returned 0x1
	[0218.829] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xd6b4, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=54964) returned 1
	[0218.829] GetFileType (hFile=0xcc) returned 0x1
	[0218.829] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=54964) returned 1
	[0218.829] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003dce00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0003dce00*, lpNumberOfBytesWritten=0xc0000dbccc*=0x236, lpOverlapped=0xc0000dbce8) returned 1
	[0218.830] GetFileType (hFile=0xcc) returned 0x1
	[0218.830] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xd6b4, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=54964) returned 1
	[0218.830] CloseHandle (hObject=0xcc) returned 1
	[0218.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf.egmwv")) returned 0x20
	[0218.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.967] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0218.983] SetEvent (hEvent=0x90) returned 1
	[0218.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf")) returned 0x20
	[0218.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x20) returned 1
	[0218.985] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.023] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0219.023] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001da000, nNumberOfBytesToRead=0xa69e, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001da000*, lpNumberOfBytesRead=0xc0002d5cec*=0xa69e, lpOverlapped=0x0) returned 1
	[0219.031] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8410 | out: pbBuffer=0xc0001b8410) returned 1
	[0219.031] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0402 | out: pbBuffer=0xc0002c0402) returned 1
	[0219.031] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c04a8 | out: pbBuffer=0xc0002c04a8) returned 1
	[0219.031] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8450 | out: pbBuffer=0xc0001b8450) returned 1
	[0219.032] GetFileType (hFile=0xcc) returned 0x1
	[0219.032] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=42654) returned 1
	[0219.032] WriteFile (in: hFile=0xcc, lpBuffer=0xc00043c000*, nNumberOfBytesToWrite=0xa69e, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc00043c000*, lpNumberOfBytesWritten=0xc0000dbccc*=0xa69e, lpOverlapped=0xc0000dbce8) returned 1
	[0219.032] GetFileType (hFile=0xcc) returned 0x1
	[0219.032] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xa69e, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=42654) returned 1
	[0219.033] GetFileType (hFile=0xcc) returned 0x1
	[0219.033] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=42654) returned 1
	[0219.033] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001eea80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0001eea80*, lpNumberOfBytesWritten=0xc0000dbccc*=0x236, lpOverlapped=0xc0000dbce8) returned 1
	[0219.034] GetFileType (hFile=0xcc) returned 0x1
	[0219.035] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xa69e, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=42654) returned 1
	[0219.035] CloseHandle (hObject=0xcc) returned 1
	[0219.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf.egmwv")) returned 0x20
	[0219.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.037] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf")) returned 0x20
	[0219.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x20) returned 1
	[0219.054] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0219.094] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002f1cc4 | out: lpMode=0xc0002f1cc4) returned 0
	[0219.094] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001da000, nNumberOfBytesToRead=0xc20c, lpNumberOfBytesRead=0xc0002f1cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001da000*, lpNumberOfBytesRead=0xc0002f1cec*=0xc20c, lpOverlapped=0x0) returned 1
	[0219.100] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8100 | out: pbBuffer=0xc0001b8100) returned 1
	[0219.100] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b811a | out: pbBuffer=0xc0001b811a) returned 1
	[0219.100] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001102 | out: pbBuffer=0xc000001102) returned 1
	[0219.100] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8140 | out: pbBuffer=0xc0001b8140) returned 1
	[0219.101] GetFileType (hFile=0xa8) returned 0x1
	[0219.101] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=49676) returned 1
	[0219.101] WriteFile (in: hFile=0xa8, lpBuffer=0xc00021a000*, nNumberOfBytesToWrite=0xc20c, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc00021a000*, lpNumberOfBytesWritten=0xc0000dbccc*=0xc20c, lpOverlapped=0xc0000dbce8) returned 1
	[0219.102] GetFileType (hFile=0xa8) returned 0x1
	[0219.102] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc20c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=49676) returned 1
	[0219.102] GetFileType (hFile=0xa8) returned 0x1
	[0219.102] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=49676) returned 1
	[0219.102] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003bb500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0003bb500*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22a, lpOverlapped=0xc0000dbce8) returned 1
	[0219.103] GetFileType (hFile=0xa8) returned 0x1
	[0219.103] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc20c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=49676) returned 1
	[0219.103] CloseHandle (hObject=0xa8) returned 1
	[0219.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf.egmwv")) returned 0x20
	[0219.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.105] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.110] SetEvent (hEvent=0xe4) returned 1
	[0219.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf")) returned 0x20
	[0219.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF", dwFileAttributes=0x20) returned 1
	[0219.111] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0219.146] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002f1cc4 | out: lpMode=0xc0002f1cc4) returned 0
	[0219.146] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002ae000, nNumberOfBytesToRead=0x714e, lpNumberOfBytesRead=0xc0002f1cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ae000*, lpNumberOfBytesRead=0xc0002f1cec*=0x714e, lpOverlapped=0x0) returned 1
	[0219.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0219.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d3a | out: pbBuffer=0xc000052d3a) returned 1
	[0219.153] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215b02 | out: pbBuffer=0xc000215b02) returned 1
	[0219.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215b3c | out: pbBuffer=0xc000215b3c) returned 1
	[0219.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215bcb | out: pbBuffer=0xc000215bcb) returned 1
	[0219.153] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d60 | out: pbBuffer=0xc000052d60) returned 1
	[0219.153] GetFileType (hFile=0xe8) returned 0x1
	[0219.154] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=29006) returned 1
	[0219.154] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000ae000*, nNumberOfBytesToWrite=0x714e, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc0000ae000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x714e, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.154] GetFileType (hFile=0xe8) returned 0x1
	[0219.155] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x714e, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=29006) returned 1
	[0219.155] GetFileType (hFile=0xe8) returned 0x1
	[0219.155] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=29006) returned 1
	[0219.155] WriteFile (in: hFile=0xe8, lpBuffer=0xc000380e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc000380e00*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x230, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.155] GetFileType (hFile=0xe8) returned 0x1
	[0219.155] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x714e, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=29006) returned 1
	[0219.156] CloseHandle (hObject=0xe8) returned 1
	[0219.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf.egmwv")) returned 0x20
	[0219.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.160] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.165] SetEvent (hEvent=0xe4) returned 1
	[0219.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf")) returned 0x20
	[0219.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF", dwFileAttributes=0x20) returned 1
	[0219.167] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0219.201] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0219.201] ReadFile (in: hFile=0xa8, lpBuffer=0xc00023c000, nNumberOfBytesToRead=0x662a, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00023c000*, lpNumberOfBytesRead=0xc0002d3cec*=0x662a, lpOverlapped=0x0) returned 1
	[0219.206] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0219.206] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000326a02 | out: pbBuffer=0xc000326a02) returned 1
	[0219.207] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0219.207] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1) returned 0x0
	[0219.207] SetEvent (hEvent=0x124) returned 1
	[0219.208] GetFileType (hFile=0xa8) returned 0x1
	[0219.208] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=26154) returned 1
	[0219.208] WriteFile (in: hFile=0xa8, lpBuffer=0xc000272000*, nNumberOfBytesToWrite=0x662a, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc000272000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x662a, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.209] GetFileType (hFile=0xa8) returned 0x1
	[0219.209] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x662a, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=26154) returned 1
	[0219.209] GetFileType (hFile=0xa8) returned 0x1
	[0219.209] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=26154) returned 1
	[0219.209] WriteFile (in: hFile=0xa8, lpBuffer=0xc000456700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc000456700*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x22d, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.209] GetFileType (hFile=0xa8) returned 0x1
	[0219.210] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x662a, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=26154) returned 1
	[0219.210] CloseHandle (hObject=0xa8) returned 1
	[0219.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf.egmwv")) returned 0x20
	[0219.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.214] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.218] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.230] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.236] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.261] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.278] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.297] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.310] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf")) returned 0x20
	[0219.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF", dwFileAttributes=0x20) returned 1
	[0219.316] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0219.351] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0219.351] ReadFile (in: hFile=0xa8, lpBuffer=0xc000430000, nNumberOfBytesToRead=0x2004, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000430000*, lpNumberOfBytesRead=0xc0002d5cec*=0x2004, lpOverlapped=0x0) returned 1
	[0219.357] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8280 | out: pbBuffer=0xc0001b8280) returned 1
	[0219.357] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b829a | out: pbBuffer=0xc0001b829a) returned 1
	[0219.357] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000448302 | out: pbBuffer=0xc000448302) returned 1
	[0219.357] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00044831e | out: pbBuffer=0xc00044831e) returned 1
	[0219.357] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00044833e | out: pbBuffer=0xc00044833e) returned 1
	[0219.357] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82c0 | out: pbBuffer=0xc0001b82c0) returned 1
	[0219.357] GetFileType (hFile=0xa8) returned 0x1
	[0219.357] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8196) returned 1
	[0219.358] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003fa000*, nNumberOfBytesToWrite=0x2004, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003fa000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2004, lpOverlapped=0xc000155ce8) returned 1
	[0219.358] GetFileType (hFile=0xa8) returned 0x1
	[0219.358] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2004, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8196) returned 1
	[0219.358] GetFileType (hFile=0xa8) returned 0x1
	[0219.358] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8196) returned 1
	[0219.359] WriteFile (in: hFile=0xa8, lpBuffer=0xc000445180*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000445180*, lpNumberOfBytesWritten=0xc000155ccc*=0x21e, lpOverlapped=0xc000155ce8) returned 1
	[0219.359] GetFileType (hFile=0xa8) returned 0x1
	[0219.359] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2004, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8196) returned 1
	[0219.359] CloseHandle (hObject=0xa8) returned 1
	[0219.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf.egmwv")) returned 0x20
	[0219.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.363] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf")) returned 0x20
	[0219.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF", dwFileAttributes=0x20) returned 1
	[0219.376] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.405] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0219.405] ReadFile (in: hFile=0xcc, lpBuffer=0xc000104000, nNumberOfBytesToRead=0x1f7c, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000104000*, lpNumberOfBytesRead=0xc0002d5cec*=0x1f7c, lpOverlapped=0x0) returned 1
	[0219.411] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8410 | out: pbBuffer=0xc0001b8410) returned 1
	[0219.411] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000448e02 | out: pbBuffer=0xc000448e02) returned 1
	[0219.411] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000448e4f | out: pbBuffer=0xc000448e4f) returned 1
	[0219.411] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000448ed5 | out: pbBuffer=0xc000448ed5) returned 1
	[0219.412] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8450 | out: pbBuffer=0xc0001b8450) returned 1
	[0219.412] GetFileType (hFile=0xcc) returned 0x1
	[0219.412] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8060) returned 1
	[0219.412] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001f8000*, nNumberOfBytesToWrite=0x1f7c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f8000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1f7c, lpOverlapped=0xc000155ce8) returned 1
	[0219.413] GetFileType (hFile=0xcc) returned 0x1
	[0219.413] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1f7c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8060) returned 1
	[0219.413] GetFileType (hFile=0xcc) returned 0x1
	[0219.413] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8060) returned 1
	[0219.413] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001e0a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001e0a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x236, lpOverlapped=0xc000155ce8) returned 1
	[0219.414] GetFileType (hFile=0xcc) returned 0x1
	[0219.414] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1f7c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8060) returned 1
	[0219.414] CloseHandle (hObject=0xcc) returned 1
	[0219.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf.egmwv")) returned 0x20
	[0219.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.416] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0xffffffff) returned 0x0
	[0219.760] SetEvent (hEvent=0x124) returned 1
	[0219.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf")) returned 0x20
	[0219.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x20) returned 1
	[0220.434] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf.egmwv"), dwFlags=0x1) 

Thread:
	id = 37
	os_tid = 0xa3c

	[0118.792] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x505feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x505feb0*=0x114) returned 1
	[0118.793] VirtualQuery (in: lpAddress=0x505fed0, lpBuffer=0x505fed0, dwLength=0x30 | out: lpBuffer=0x505fed0*(BaseAddress=0x505f000, AllocationBase=0x4e60000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.793] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0118.793] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0119.903] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0121.238] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0121.619] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0121.619] VirtualAlloc (lpAddress=0xc000184000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000184000
	[0121.620] ReadFile (in: hFile=0x118, lpBuffer=0xc000184000, nNumberOfBytesToRead=0x93a, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000184000*, lpNumberOfBytesRead=0xc000389cec*=0x93a, lpOverlapped=0x0) returned 1
	[0122.412] VirtualAlloc (lpAddress=0xc00020a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020a000
	[0122.413] VirtualAlloc (lpAddress=0xc00094c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00094c000
	[0122.414] VirtualAlloc (lpAddress=0xc000ac4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ac4000
	[0122.415] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a120 | out: pbBuffer=0xc00041a120) returned 1
	[0122.415] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0122.415] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a160 | out: pbBuffer=0xc00041a160) returned 1
	[0122.415] VirtualAlloc (lpAddress=0xc000380000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000380000
	[0122.417] GetFileType (hFile=0x118) returned 0x1
	[0122.417] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba9ca0*=2362) returned 1
	[0122.417] WriteFile (in: hFile=0x118, lpBuffer=0xc0001af000*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0xc000ba9ccc, lpOverlapped=0xc000ba9ce8 | out: lpBuffer=0xc0001af000*, lpNumberOfBytesWritten=0xc000ba9ccc*=0x93a, lpOverlapped=0xc000ba9ce8) returned 1
	[0122.418] GetFileType (hFile=0x118) returned 0x1
	[0122.418] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x93a, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba9ca0*=2362) returned 1
	[0122.418] GetFileType (hFile=0x118) returned 0x1
	[0122.418] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba9ca0*=2362) returned 1
	[0122.419] WriteFile (in: hFile=0x118, lpBuffer=0xc00017d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000ba9ccc, lpOverlapped=0xc000ba9ce8 | out: lpBuffer=0xc00017d880*, lpNumberOfBytesWritten=0xc000ba9ccc*=0x22a, lpOverlapped=0xc000ba9ce8) returned 1
	[0122.419] GetFileType (hFile=0x118) returned 0x1
	[0122.419] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x93a, lpNewFilePointer=0xc000ba9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba9ca0*=2362) returned 1
	[0122.419] CloseHandle (hObject=0x118) returned 1
	[0122.720] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0122.720] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0122.852] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x108
	[0122.852] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0123.037] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0128.480] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0128.481] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0128.481] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0128.482] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0128.482] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0128.483] VirtualAlloc (lpAddress=0xc0003e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e8000
	[0128.483] ReadFile (in: hFile=0x10c, lpBuffer=0xc0003e8000, nNumberOfBytesToRead=0x73c, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e8000*, lpNumberOfBytesRead=0xc000173cec*=0x73c, lpOverlapped=0x0) returned 1
	[0132.814] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0133.488] SwitchToThread () returned 1
	[0135.243] VirtualAlloc (lpAddress=0xc00027e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027e000
	[0135.245] VirtualAlloc (lpAddress=0xc000ada000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ada000
	[0135.245] VirtualAlloc (lpAddress=0xc000adc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000adc000
	[0135.246] VirtualAlloc (lpAddress=0xc000ade000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ade000
	[0135.247] VirtualAlloc (lpAddress=0xc000ae0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ae0000
	[0135.248] VirtualAlloc (lpAddress=0xc000ae2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ae2000
	[0135.248] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010490 | out: pbBuffer=0xc000010490) returned 1
	[0135.249] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000104aa | out: pbBuffer=0xc0000104aa) returned 1
	[0135.249] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000adc602 | out: pbBuffer=0xc000adc602) returned 1
	[0135.249] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000adc646 | out: pbBuffer=0xc000adc646) returned 1
	[0135.249] VirtualAlloc (lpAddress=0xc000ae4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ae4000
	[0135.250] VirtualAlloc (lpAddress=0xc000ae6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ae6000
	[0135.250] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000104d0 | out: pbBuffer=0xc0000104d0) returned 1
	[0135.250] VirtualAlloc (lpAddress=0xc000ae8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ae8000
	[0135.251] GetFileType (hFile=0x10c) returned 0x1
	[0135.251] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=1852) returned 1
	[0135.251] WriteFile (in: hFile=0x10c, lpBuffer=0xc000ae8000*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc000ae8000*, lpNumberOfBytesWritten=0xc00006fccc*=0x73c, lpOverlapped=0xc00006fce8) returned 1
	[0135.252] GetFileType (hFile=0x10c) returned 0x1
	[0135.252] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x73c, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=1852) returned 1
	[0135.252] GetFileType (hFile=0x10c) returned 0x1
	[0135.252] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=1852) returned 1
	[0135.253] WriteFile (in: hFile=0x10c, lpBuffer=0xc000ae6380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc000ae6380*, lpNumberOfBytesWritten=0xc00006fccc*=0x22d, lpOverlapped=0xc00006fce8) returned 1
	[0135.253] GetFileType (hFile=0x10c) returned 0x1
	[0135.253] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x73c, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=1852) returned 1
	[0135.253] CloseHandle (hObject=0x10c) returned 1
	[0135.256] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0135.256] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0135.257] SetEvent (hEvent=0x84) returned 1
	[0135.257] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0136.074] VirtualAlloc (lpAddress=0xc00092a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00092a000
	[0136.082] VirtualAlloc (lpAddress=0xc000b28000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b28000
	[0136.083] VirtualAlloc (lpAddress=0xc000b2c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b2c000
	[0136.084] VirtualAlloc (lpAddress=0xc000b30000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b30000
	[0136.085] VirtualAlloc (lpAddress=0xc000b34000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b34000
	[0136.086] VirtualAlloc (lpAddress=0xc000b38000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b38000
	[0136.088] VirtualAlloc (lpAddress=0xc000b3c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b3c000
	[0136.089] VirtualAlloc (lpAddress=0xc000b40000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b40000
	[0136.091] VirtualAlloc (lpAddress=0xc000b44000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b44000
	[0136.092] VirtualAlloc (lpAddress=0xc000b48000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b48000
	[0136.093] VirtualAlloc (lpAddress=0xc000b4c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b4c000
	[0136.095] VirtualAlloc (lpAddress=0xc000b50000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b50000
	[0136.096] VirtualAlloc (lpAddress=0xc000b54000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b54000
	[0136.097] VirtualAlloc (lpAddress=0xc000b58000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b58000
	[0136.098] VirtualAlloc (lpAddress=0xc000b5c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b5c000
	[0136.340] SetEvent (hEvent=0xf8) returned 1
	[0136.340] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0136.789] SetEvent (hEvent=0x100) returned 1
	[0136.789] SetEvent (hEvent=0xc0) returned 1
	[0136.789] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0137.129] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0137.129] SetEvent (hEvent=0xb0) returned 1
	[0137.129] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0137.267] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0137.267] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0137.462] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0137.463] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0137.671] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0137.672] SetEvent (hEvent=0x124) returned 1
	[0137.672] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0137.873] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0137.878] VirtualAlloc (lpAddress=0xc001362000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001362000
	[0138.084] VirtualAlloc (lpAddress=0xc001a00000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001a00000
	[0138.095] VirtualFree (lpAddress=0xc001400000, dwSize=0x600000, dwFreeType=0x4000) returned 0
	[0138.095] VirtualFree (lpAddress=0xc001400000, dwSize=0x600000, dwFreeType=0x4000) returned 0
	[0138.096] VirtualFree (lpAddress=0xc001400000, dwSize=0x300000, dwFreeType=0x4000) returned 1
	[0138.418] VirtualFree (lpAddress=0xc001700000, dwSize=0x300000, dwFreeType=0x4000) returned 0
	[0138.418] VirtualFree (lpAddress=0xc001700000, dwSize=0x180000, dwFreeType=0x4000) returned 0
	[0138.418] VirtualFree (lpAddress=0xc001700000, dwSize=0xc0000, dwFreeType=0x4000) returned 1
	[0141.651] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x240000, dwFreeType=0x4000) returned 0
	[0141.651] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x120000, dwFreeType=0x4000) returned 0
	[0141.651] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x90000, dwFreeType=0x4000) returned 0
	[0141.651] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x48000, dwFreeType=0x4000) returned 0
	[0141.652] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x24000, dwFreeType=0x4000) returned 1
	[0141.653] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x21c000, dwFreeType=0x4000) returned 0
	[0141.653] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x10e000, dwFreeType=0x4000) returned 0
	[0141.653] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x87000, dwFreeType=0x4000) returned 0
	[0141.653] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x43000, dwFreeType=0x4000) returned 0
	[0141.653] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x21000, dwFreeType=0x4000) returned 0
	[0141.653] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0141.654] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x20c000, dwFreeType=0x4000) returned 0
	[0141.654] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x106000, dwFreeType=0x4000) returned 0
	[0141.655] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x83000, dwFreeType=0x4000) returned 0
	[0141.655] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x41000, dwFreeType=0x4000) returned 0
	[0141.655] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0141.655] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0141.655] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0141.656] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x204000, dwFreeType=0x4000) returned 0
	[0141.656] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x102000, dwFreeType=0x4000) returned 0
	[0141.656] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x81000, dwFreeType=0x4000) returned 0
	[0141.656] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0141.656] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0141.656] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0141.656] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0141.657] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0141.657] VirtualFree (lpAddress=0xc001800000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0141.682] VirtualFree (lpAddress=0xc0013e2000, dwSize=0x61e000, dwFreeType=0x4000) returned 0
	[0141.682] VirtualFree (lpAddress=0xc0013e2000, dwSize=0x61e000, dwFreeType=0x4000) returned 0
	[0141.682] VirtualFree (lpAddress=0xc0013e2000, dwSize=0x30f000, dwFreeType=0x4000) returned 0
	[0141.682] VirtualFree (lpAddress=0xc0013e2000, dwSize=0x187000, dwFreeType=0x4000) returned 0
	[0141.682] VirtualFree (lpAddress=0xc0013e2000, dwSize=0xc3000, dwFreeType=0x4000) returned 0
	[0142.267] VirtualFree (lpAddress=0xc0013e2000, dwSize=0x61000, dwFreeType=0x4000) returned 0
	[0142.267] VirtualFree (lpAddress=0xc0013e2000, dwSize=0x30000, dwFreeType=0x4000) returned 0
	[0142.267] VirtualFree (lpAddress=0xc0013e2000, dwSize=0x18000, dwFreeType=0x4000) returned 1
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0x606000, dwFreeType=0x4000) returned 0
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0x303000, dwFreeType=0x4000) returned 0
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0x181000, dwFreeType=0x4000) returned 0
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0xc0000, dwFreeType=0x4000) returned 0
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0x60000, dwFreeType=0x4000) returned 0
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0x30000, dwFreeType=0x4000) returned 0
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0x18000, dwFreeType=0x4000) returned 0
	[0142.268] VirtualFree (lpAddress=0xc0013fa000, dwSize=0xc000, dwFreeType=0x4000) returned 0
	[0142.269] VirtualFree (lpAddress=0xc0013fa000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0142.269] VirtualFree (lpAddress=0xc001400000, dwSize=0x600000, dwFreeType=0x4000) returned 0
	[0142.269] VirtualFree (lpAddress=0xc001400000, dwSize=0x300000, dwFreeType=0x4000) returned 1
	[0142.269] VirtualFree (lpAddress=0xc001700000, dwSize=0x300000, dwFreeType=0x4000) returned 0
	[0142.269] VirtualFree (lpAddress=0xc001700000, dwSize=0x180000, dwFreeType=0x4000) returned 0
	[0142.269] VirtualFree (lpAddress=0xc001700000, dwSize=0xc0000, dwFreeType=0x4000) returned 1
	[0142.270] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x240000, dwFreeType=0x4000) returned 0
	[0142.270] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x120000, dwFreeType=0x4000) returned 0
	[0142.270] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x90000, dwFreeType=0x4000) returned 0
	[0142.270] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x48000, dwFreeType=0x4000) returned 0
	[0142.270] VirtualFree (lpAddress=0xc0017c0000, dwSize=0x24000, dwFreeType=0x4000) returned 1
	[0142.271] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x21c000, dwFreeType=0x4000) returned 0
	[0142.271] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x10e000, dwFreeType=0x4000) returned 0
	[0142.271] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x87000, dwFreeType=0x4000) returned 0
	[0142.271] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x43000, dwFreeType=0x4000) returned 0
	[0142.271] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x21000, dwFreeType=0x4000) returned 0
	[0142.271] VirtualFree (lpAddress=0xc0017e4000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0142.272] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x20c000, dwFreeType=0x4000) returned 0
	[0142.272] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x106000, dwFreeType=0x4000) returned 0
	[0142.272] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x83000, dwFreeType=0x4000) returned 0
	[0142.272] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x41000, dwFreeType=0x4000) returned 0
	[0142.272] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0142.272] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0142.273] VirtualFree (lpAddress=0xc0017f4000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0142.273] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x204000, dwFreeType=0x4000) returned 0
	[0142.273] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x102000, dwFreeType=0x4000) returned 0
	[0142.273] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x81000, dwFreeType=0x4000) returned 0
	[0142.273] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x40000, dwFreeType=0x4000) returned 0
	[0142.273] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x20000, dwFreeType=0x4000) returned 0
	[0142.273] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x10000, dwFreeType=0x4000) returned 0
	[0142.274] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x8000, dwFreeType=0x4000) returned 0
	[0142.274] VirtualFree (lpAddress=0xc0017fc000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0142.275] VirtualFree (lpAddress=0xc001800000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0142.275] SetEvent (hEvent=0x84) returned 1
	[0143.605] SetEvent (hEvent=0x54) returned 1
	[0143.605] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0143.891] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 0x2020
	[0143.891] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", dwFileAttributes=0x2020) returned 1
	[0143.943] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.egmwv"), dwFlags=0x1) returned 1
	[0149.917] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0150.083] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0150.231] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00039bcc4 | out: lpMode=0xc00039bcc4) returned 0
	[0150.231] ReadFile (in: hFile=0xd4, lpBuffer=0xc000288700, nNumberOfBytesToRead=0x646, lpNumberOfBytesRead=0xc00039bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000288700*, lpNumberOfBytesRead=0xc00039bcec*=0x646, lpOverlapped=0x0) returned 1
	[0150.333] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0150.492] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0153.694] VirtualAlloc (lpAddress=0xc001092000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001092000
	[0153.696] VirtualAlloc (lpAddress=0xc001096000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001096000
	[0153.698] VirtualAlloc (lpAddress=0xc00109a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00109a000
	[0153.699] VirtualAlloc (lpAddress=0xc00109e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00109e000
	[0153.702] VirtualAlloc (lpAddress=0xc0010a2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0010a2000
	[0153.703] VirtualAlloc (lpAddress=0xc0010a6000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0010a6000
	[0153.713] VirtualFree (lpAddress=0xc000438000, dwSize=0xb28000, dwFreeType=0x4000) returned 0
	[0153.713] VirtualFree (lpAddress=0xc000438000, dwSize=0xb28000, dwFreeType=0x4000) returned 0
	[0153.713] VirtualFree (lpAddress=0xc000438000, dwSize=0x594000, dwFreeType=0x4000) returned 0
	[0153.714] VirtualFree (lpAddress=0xc000438000, dwSize=0x2ca000, dwFreeType=0x4000) returned 1
	[0154.316] VirtualFree (lpAddress=0xc000702000, dwSize=0x85e000, dwFreeType=0x4000) returned 0
	[0154.316] VirtualFree (lpAddress=0xc000702000, dwSize=0x42f000, dwFreeType=0x4000) returned 0
	[0154.316] VirtualFree (lpAddress=0xc000702000, dwSize=0x217000, dwFreeType=0x4000) returned 0
	[0154.316] VirtualFree (lpAddress=0xc000702000, dwSize=0x10b000, dwFreeType=0x4000) returned 0
	[0154.316] VirtualFree (lpAddress=0xc000702000, dwSize=0x85000, dwFreeType=0x4000) returned 1
	[0154.328] VirtualFree (lpAddress=0xc000787000, dwSize=0x7d9000, dwFreeType=0x4000) returned 0
	[0154.328] VirtualFree (lpAddress=0xc000787000, dwSize=0x3ec000, dwFreeType=0x4000) returned 0
	[0154.328] VirtualFree (lpAddress=0xc000787000, dwSize=0x1f6000, dwFreeType=0x4000) returned 0
	[0154.328] VirtualFree (lpAddress=0xc000787000, dwSize=0xfb000, dwFreeType=0x4000) returned 0
	[0154.328] VirtualFree (lpAddress=0xc000787000, dwSize=0x7d000, dwFreeType=0x4000) returned 0
	[0154.328] VirtualFree (lpAddress=0xc000787000, dwSize=0x3e000, dwFreeType=0x4000) returned 1
	[0154.334] VirtualFree (lpAddress=0xc0007c5000, dwSize=0x79b000, dwFreeType=0x4000) returned 0
	[0154.334] VirtualFree (lpAddress=0xc0007c5000, dwSize=0x3cd000, dwFreeType=0x4000) returned 0
	[0154.334] VirtualFree (lpAddress=0xc0007c5000, dwSize=0x1e6000, dwFreeType=0x4000) returned 0
	[0154.335] VirtualFree (lpAddress=0xc0007c5000, dwSize=0xf3000, dwFreeType=0x4000) returned 0
	[0154.335] VirtualFree (lpAddress=0xc0007c5000, dwSize=0x79000, dwFreeType=0x4000) returned 0
	[0154.335] VirtualFree (lpAddress=0xc0007c5000, dwSize=0x3c000, dwFreeType=0x4000) returned 0
	[0154.335] VirtualFree (lpAddress=0xc0007c5000, dwSize=0x1e000, dwFreeType=0x4000) returned 1
	[0154.338] VirtualFree (lpAddress=0xc0007e3000, dwSize=0x77d000, dwFreeType=0x4000) returned 0
	[0154.338] VirtualFree (lpAddress=0xc0007e3000, dwSize=0x3be000, dwFreeType=0x4000) returned 0
	[0154.338] VirtualFree (lpAddress=0xc0007e3000, dwSize=0x1df000, dwFreeType=0x4000) returned 0
	[0154.338] VirtualFree (lpAddress=0xc0007e3000, dwSize=0xef000, dwFreeType=0x4000) returned 0
	[0154.339] VirtualFree (lpAddress=0xc0007e3000, dwSize=0x77000, dwFreeType=0x4000) returned 0
	[0154.339] VirtualFree (lpAddress=0xc0007e3000, dwSize=0x3b000, dwFreeType=0x4000) returned 0
	[0154.339] VirtualFree (lpAddress=0xc0007e3000, dwSize=0x1d000, dwFreeType=0x4000) returned 1
	[0154.341] VirtualFree (lpAddress=0xc000800000, dwSize=0x760000, dwFreeType=0x4000) returned 0
	[0154.341] VirtualFree (lpAddress=0xc000800000, dwSize=0x3b0000, dwFreeType=0x4000) returned 1
	[0155.610] VirtualFree (lpAddress=0xc000bb0000, dwSize=0x3b0000, dwFreeType=0x4000) returned 0
	[0155.610] VirtualFree (lpAddress=0xc000bb0000, dwSize=0x1d8000, dwFreeType=0x4000) returned 0
	[0155.610] VirtualFree (lpAddress=0xc000bb0000, dwSize=0xec000, dwFreeType=0x4000) returned 0
	[0155.610] VirtualFree (lpAddress=0xc000bb0000, dwSize=0x76000, dwFreeType=0x4000) returned 0
	[0155.610] VirtualFree (lpAddress=0xc000bb0000, dwSize=0x3b000, dwFreeType=0x4000) returned 1
	[0155.615] VirtualFree (lpAddress=0xc000beb000, dwSize=0x375000, dwFreeType=0x4000) returned 0
	[0155.615] VirtualFree (lpAddress=0xc000beb000, dwSize=0x1ba000, dwFreeType=0x4000) returned 0
	[0155.615] VirtualFree (lpAddress=0xc000beb000, dwSize=0xdd000, dwFreeType=0x4000) returned 0
	[0155.616] VirtualFree (lpAddress=0xc000beb000, dwSize=0x6e000, dwFreeType=0x4000) returned 0
	[0155.616] VirtualFree (lpAddress=0xc000beb000, dwSize=0x37000, dwFreeType=0x4000) returned 0
	[0155.616] VirtualFree (lpAddress=0xc000beb000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0155.616] VirtualFree (lpAddress=0xc000beb000, dwSize=0xd000, dwFreeType=0x4000) returned 1
	[0155.618] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x368000, dwFreeType=0x4000) returned 0
	[0155.618] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x1b4000, dwFreeType=0x4000) returned 0
	[0155.618] VirtualFree (lpAddress=0xc000bf8000, dwSize=0xda000, dwFreeType=0x4000) returned 0
	[0155.618] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x6d000, dwFreeType=0x4000) returned 0
	[0155.618] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x36000, dwFreeType=0x4000) returned 0
	[0155.619] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0155.619] VirtualFree (lpAddress=0xc000bf8000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0155.619] VirtualFree (lpAddress=0xc000bf8000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0155.620] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x362000, dwFreeType=0x4000) returned 0
	[0155.620] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x1b1000, dwFreeType=0x4000) returned 0
	[0155.620] VirtualFree (lpAddress=0xc000bfe000, dwSize=0xd8000, dwFreeType=0x4000) returned 0
	[0155.620] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x6c000, dwFreeType=0x4000) returned 0
	[0155.620] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x36000, dwFreeType=0x4000) returned 0
	[0155.620] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0155.621] VirtualFree (lpAddress=0xc000bfe000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0155.621] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0155.621] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0155.621] VirtualFree (lpAddress=0xc000bfe000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0x361000, dwFreeType=0x4000) returned 0
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0x1b0000, dwFreeType=0x4000) returned 0
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0xd8000, dwFreeType=0x4000) returned 0
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0x6c000, dwFreeType=0x4000) returned 0
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0x36000, dwFreeType=0x4000) returned 0
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0x1b000, dwFreeType=0x4000) returned 0
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0xd000, dwFreeType=0x4000) returned 0
	[0155.622] VirtualFree (lpAddress=0xc000bff000, dwSize=0x6000, dwFreeType=0x4000) returned 0
	[0155.623] VirtualFree (lpAddress=0xc000bff000, dwSize=0x3000, dwFreeType=0x4000) returned 0
	[0155.623] VirtualFree (lpAddress=0xc000bff000, dwSize=0x1000, dwFreeType=0x4000) returned 1
	[0155.623] VirtualFree (lpAddress=0xc000c00000, dwSize=0x360000, dwFreeType=0x4000) returned 1
	[0155.757] SetEvent (hEvent=0x144) returned 1
	[0155.833] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0156.013] SetEvent (hEvent=0x144) returned 1
	[0156.013] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0156.016] SetEvent (hEvent=0x144) returned 1
	[0156.016] SetEvent (hEvent=0xac) returned 1
	[0156.016] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x2ac99, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000173cec*=0x2ac99, lpOverlapped=0x0) returned 1
	[0156.050] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101b0 | out: pbBuffer=0xc0000101b0) returned 1
	[0156.050] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000101ca | out: pbBuffer=0xc0000101ca) returned 1
	[0156.051] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215702 | out: pbBuffer=0xc000215702) returned 1
	[0156.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021571b | out: pbBuffer=0xc00021571b) returned 1
	[0156.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215739 | out: pbBuffer=0xc000215739) returned 1
	[0156.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021579a | out: pbBuffer=0xc00021579a) returned 1
	[0156.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101f0 | out: pbBuffer=0xc0000101f0) returned 1
	[0156.066] GetFileType (hFile=0xe8) returned 0x1
	[0156.066] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc001099ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001099ca0*=175257) returned 1
	[0156.066] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002f2000*, nNumberOfBytesToWrite=0x2ac99, lpNumberOfBytesWritten=0xc001099ccc, lpOverlapped=0xc001099ce8 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesWritten=0xc001099ccc*=0x2ac99, lpOverlapped=0xc001099ce8) returned 1
	[0156.068] GetFileType (hFile=0xe8) returned 0x1
	[0156.069] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2ac99, lpNewFilePointer=0xc001099ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001099ca0*=175257) returned 1
	[0156.069] GetFileType (hFile=0xe8) returned 0x1
	[0156.069] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc001099ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001099ca0*=175257) returned 1
	[0156.069] WriteFile (in: hFile=0xe8, lpBuffer=0xc000098c00*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0xc001099ccc, lpOverlapped=0xc001099ce8 | out: lpBuffer=0xc000098c00*, lpNumberOfBytesWritten=0xc001099ccc*=0x24b, lpOverlapped=0xc001099ce8) returned 1
	[0156.101] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0158.817] GetFileType (hFile=0xe8) returned 0x1
	[0158.817] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2ac99, lpNewFilePointer=0xc001099ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001099ca0*=175257) returned 1
	[0158.818] CloseHandle (hObject=0xe8) returned 1
	[0160.781] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.egmwv")) returned 0x2020
	[0160.988] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0163.821] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0175.614] SetEvent (hEvent=0x124) returned 1
	[0175.614] SetEvent (hEvent=0xc4) returned 1
	[0175.614] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0182.258] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0190.634] SwitchToThread () returned 1
	[0190.841] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0190.972] SetEvent (hEvent=0x144) returned 1
	[0190.972] SetEvent (hEvent=0xac) returned 1
	[0190.972] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0194.075] SetEvent (hEvent=0xc8) returned 1
	[0194.075] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0194.257] SetEvent (hEvent=0xc4) returned 1
	[0194.257] SetEvent (hEvent=0xc8) returned 1
	[0194.257] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0194.315] SetEvent (hEvent=0xc4) returned 1
	[0194.316] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0194.401] SetEvent (hEvent=0xc4) returned 1
	[0194.401] SwitchToThread () returned 1
	[0194.426] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0201.525] SetEvent (hEvent=0x120) returned 1
	[0201.525] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0201.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20
	[0201.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x20) returned 1
	[0201.533] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0201.536] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0201.718] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0201.718] ReadFile (in: hFile=0xe0, lpBuffer=0xc000202800, nNumberOfBytesToRead=0x728, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc000202800*, lpNumberOfBytesRead=0xc000173cec*=0x728, lpOverlapped=0x0) returned 1
	[0201.725] SetEvent (hEvent=0x120) returned 1
	[0201.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6a70 | out: pbBuffer=0xc0002b6a70) returned 1
	[0201.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b6a8a | out: pbBuffer=0xc0002b6a8a) returned 1
	[0201.726] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001e9702 | out: pbBuffer=0xc0001e9702) returned 1
	[0201.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001e973a | out: pbBuffer=0xc0001e973a) returned 1
	[0201.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001e9796 | out: pbBuffer=0xc0001e9796) returned 1
	[0201.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001e97a3 | out: pbBuffer=0xc0001e97a3) returned 1
	[0201.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6ab0 | out: pbBuffer=0xc0002b6ab0) returned 1
	[0201.727] GetFileType (hFile=0xe0) returned 0x1
	[0201.727] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=1832) returned 1
	[0201.727] WriteFile (in: hFile=0xe0, lpBuffer=0xc000312000*, nNumberOfBytesToWrite=0x728, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc000312000*, lpNumberOfBytesWritten=0xc0003f5ccc*=0x728, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.728] GetFileType (hFile=0xe0) returned 0x1
	[0201.728] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x728, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=1832) returned 1
	[0201.728] GetFileType (hFile=0xe0) returned 0x1
	[0201.728] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=1832) returned 1
	[0201.728] WriteFile (in: hFile=0xe0, lpBuffer=0xc00030ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc00030ca80*, lpNumberOfBytesWritten=0xc0003f5ccc*=0x227, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.728] GetFileType (hFile=0xe0) returned 0x1
	[0201.729] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x728, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=1832) returned 1
	[0201.729] CloseHandle (hObject=0xe0) returned 1
	[0201.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.egmwv")) returned 0x20
	[0201.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.747] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0201.765] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0212.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf")) returned 0x20
	[0212.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF", dwFileAttributes=0x20) returned 1
	[0212.595] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0212.853] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0212.853] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x614c, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000429cec*=0x614c, lpOverlapped=0x0) returned 1
	[0212.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065e0 | out: pbBuffer=0xc0002065e0) returned 1
	[0212.864] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039802 | out: pbBuffer=0xc000039802) returned 1
	[0212.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206620 | out: pbBuffer=0xc000206620) returned 1
	[0212.864] GetFileType (hFile=0xcc) returned 0x1
	[0212.865] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24908) returned 1
	[0212.865] WriteFile (in: hFile=0xcc, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x614c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc000155ccc*=0x614c, lpOverlapped=0xc000155ce8) returned 1
	[0212.865] GetFileType (hFile=0xcc) returned 0x1
	[0212.866] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x614c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24908) returned 1
	[0212.866] GetFileType (hFile=0xcc) returned 0x1
	[0212.866] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24908) returned 1
	[0212.866] WriteFile (in: hFile=0xcc, lpBuffer=0xc00041f180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00041f180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0212.867] GetFileType (hFile=0xcc) returned 0x1
	[0212.867] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x614c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24908) returned 1
	[0212.867] CloseHandle (hObject=0xcc) returned 1
	[0212.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf.egmwv")) returned 0x20
	[0212.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.873] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.553] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.555] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.575] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf")) returned 0x20
	[0213.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF", dwFileAttributes=0x20) returned 1
	[0213.592] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0213.612] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0213.612] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002b0000, nNumberOfBytesToRead=0x1788, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002b0000*, lpNumberOfBytesRead=0xc00016dcec*=0x1788, lpOverlapped=0x0) returned 1
	[0213.637] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.653] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068d0 | out: pbBuffer=0xc0002068d0) returned 1
	[0213.653] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000338502 | out: pbBuffer=0xc000338502) returned 1
	[0213.653] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003385ab | out: pbBuffer=0xc0003385ab) returned 1
	[0213.653] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206910 | out: pbBuffer=0xc000206910) returned 1
	[0213.653] GetFileType (hFile=0xe8) returned 0x1
	[0213.653] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=6024) returned 1
	[0213.654] WriteFile (in: hFile=0xe8, lpBuffer=0xc000344000*, nNumberOfBytesToWrite=0x1788, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000344000*, lpNumberOfBytesWritten=0xc00022dccc*=0x1788, lpOverlapped=0xc00022dce8) returned 1
	[0213.654] GetFileType (hFile=0xe8) returned 0x1
	[0213.654] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1788, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=6024) returned 1
	[0213.654] GetFileType (hFile=0xe8) returned 0x1
	[0213.654] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=6024) returned 1
	[0213.655] WriteFile (in: hFile=0xe8, lpBuffer=0xc000337180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000337180*, lpNumberOfBytesWritten=0xc00022dccc*=0x22a, lpOverlapped=0xc00022dce8) returned 1
	[0213.655] GetFileType (hFile=0xe8) returned 0x1
	[0213.655] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1788, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=6024) returned 1
	[0213.656] CloseHandle (hObject=0xe8) returned 1
	[0213.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf.egmwv")) returned 0x20
	[0213.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.663] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.666] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.677] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.683] SetEvent (hEvent=0x90) returned 1
	[0213.683] SetEvent (hEvent=0xe4) returned 1
	[0213.683] SetEvent (hEvent=0xac) returned 1
	[0213.683] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0213.686] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.686] SetEvent (hEvent=0xac) returned 1
	[0213.686] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0213.710] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.711] SwitchToThread () returned 1
	[0213.713] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.760] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.780] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.856] SetEvent (hEvent=0xac) returned 1
	[0213.856] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf")) returned 0x20
	[0213.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF", dwFileAttributes=0x20) returned 1
	[0213.866] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.875] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0213.917] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0213.917] ReadFile (in: hFile=0xa8, lpBuffer=0xc00017f000, nNumberOfBytesToRead=0x2fac, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017f000*, lpNumberOfBytesRead=0xc000169cec*=0x2fac, lpOverlapped=0x0) returned 1
	[0213.933] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070590 | out: pbBuffer=0xc000070590) returned 1
	[0213.933] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003bba02 | out: pbBuffer=0xc0003bba02) returned 1
	[0213.933] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bba25 | out: pbBuffer=0xc0003bba25) returned 1
	[0213.934] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000705d0 | out: pbBuffer=0xc0000705d0) returned 1
	[0213.934] GetFileType (hFile=0xa8) returned 0x1
	[0213.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12204) returned 1
	[0213.934] WriteFile (in: hFile=0xa8, lpBuffer=0xc000438000*, nNumberOfBytesToWrite=0x2fac, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000438000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2fac, lpOverlapped=0xc000155ce8) returned 1
	[0213.934] GetFileType (hFile=0xa8) returned 0x1
	[0213.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2fac, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12204) returned 1
	[0213.935] GetFileType (hFile=0xa8) returned 0x1
	[0213.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12204) returned 1
	[0213.935] WriteFile (in: hFile=0xa8, lpBuffer=0xc000432380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000432380*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0213.935] GetFileType (hFile=0xa8) returned 0x1
	[0213.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2fac, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12204) returned 1
	[0213.936] CloseHandle (hObject=0xa8) returned 1
	[0213.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf.egmwv")) returned 0x20
	[0213.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.943] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0213.949] SetEvent (hEvent=0x120) returned 1
	[0213.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf")) returned 0x20
	[0213.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF", dwFileAttributes=0x20) returned 1
	[0213.952] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.014] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00014bcc4 | out: lpMode=0xc00014bcc4) returned 0
	[0214.014] ReadFile (in: hFile=0xa8, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0xed8, lpNumberOfBytesRead=0xc00014bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc00014bcec*=0xed8, lpOverlapped=0x0) returned 1
	[0214.023] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0214.023] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0214.023] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000010ba | out: pbBuffer=0xc0000010ba) returned 1
	[0214.023] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0214.023] GetFileType (hFile=0xa8) returned 0x1
	[0214.024] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=3800) returned 1
	[0214.024] WriteFile (in: hFile=0xa8, lpBuffer=0xc00010c000*, nNumberOfBytesToWrite=0xed8, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc00010c000*, lpNumberOfBytesWritten=0xc00030dccc*=0xed8, lpOverlapped=0xc00030dce8) returned 1
	[0214.024] GetFileType (hFile=0xa8) returned 0x1
	[0214.024] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xed8, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=3800) returned 1
	[0214.025] GetFileType (hFile=0xa8) returned 0x1
	[0214.025] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=3800) returned 1
	[0214.025] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004a7500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0004a7500*, lpNumberOfBytesWritten=0xc00030dccc*=0x22d, lpOverlapped=0xc00030dce8) returned 1
	[0214.025] GetFileType (hFile=0xa8) returned 0x1
	[0214.026] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xed8, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=3800) returned 1
	[0214.026] CloseHandle (hObject=0xa8) returned 1
	[0214.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf.egmwv")) returned 0x20
	[0214.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.030] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf")) returned 0x20
	[0214.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF", dwFileAttributes=0x20) returned 1
	[0214.043] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.077] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000149cc4 | out: lpMode=0xc000149cc4) returned 0
	[0214.077] ReadFile (in: hFile=0xcc, lpBuffer=0xc000358000, nNumberOfBytesToRead=0x1574, lpNumberOfBytesRead=0xc000149cec, lpOverlapped=0x0 | out: lpBuffer=0xc000358000*, lpNumberOfBytesRead=0xc000149cec*=0x1574, lpOverlapped=0x0) returned 1
	[0214.083] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062b0 | out: pbBuffer=0xc0002062b0) returned 1
	[0214.083] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ca | out: pbBuffer=0xc0002062ca) returned 1
	[0214.083] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0214.083] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001cb3 | out: pbBuffer=0xc000001cb3) returned 1
	[0214.083] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062f0 | out: pbBuffer=0xc0002062f0) returned 1
	[0214.083] GetFileType (hFile=0xcc) returned 0x1
	[0214.083] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=5492) returned 1
	[0214.083] WriteFile (in: hFile=0xcc, lpBuffer=0xc000232000*, nNumberOfBytesToWrite=0x1574, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000232000*, lpNumberOfBytesWritten=0xc00030dccc*=0x1574, lpOverlapped=0xc00030dce8) returned 1
	[0214.084] GetFileType (hFile=0xcc) returned 0x1
	[0214.084] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1574, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=5492) returned 1
	[0214.084] GetFileType (hFile=0xcc) returned 0x1
	[0214.084] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=5492) returned 1
	[0214.084] WriteFile (in: hFile=0xcc, lpBuffer=0xc00021ee00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc00021ee00*, lpNumberOfBytesWritten=0xc00030dccc*=0x22d, lpOverlapped=0xc00030dce8) returned 1
	[0214.085] GetFileType (hFile=0xcc) returned 0x1
	[0214.085] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1574, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=5492) returned 1
	[0214.085] CloseHandle (hObject=0xcc) returned 1
	[0214.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf.egmwv")) returned 0x20
	[0214.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.087] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.103] SetEvent (hEvent=0xac) returned 1
	[0214.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf")) returned 0x20
	[0214.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF", dwFileAttributes=0x20) returned 1
	[0214.113] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0214.141] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0214.141] ReadFile (in: hFile=0xd8, lpBuffer=0xc0000b4000, nNumberOfBytesToRead=0xe3c, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000b4000*, lpNumberOfBytesRead=0xc0002d5cec*=0xe3c, lpOverlapped=0x0) returned 1
	[0214.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0214.152] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ae902 | out: pbBuffer=0xc0001ae902) returned 1
	[0214.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001ae91b | out: pbBuffer=0xc0001ae91b) returned 1
	[0214.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206490 | out: pbBuffer=0xc000206490) returned 1
	[0214.153] GetFileType (hFile=0xd8) returned 0x1
	[0214.153] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=3644) returned 1
	[0214.153] WriteFile (in: hFile=0xd8, lpBuffer=0xc0000ca000*, nNumberOfBytesToWrite=0xe3c, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0000ca000*, lpNumberOfBytesWritten=0xc00030dccc*=0xe3c, lpOverlapped=0xc00030dce8) returned 1
	[0214.153] GetFileType (hFile=0xd8) returned 0x1
	[0214.153] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xe3c, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=3644) returned 1
	[0214.153] GetFileType (hFile=0xd8) returned 0x1
	[0214.154] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=3644) returned 1
	[0214.154] WriteFile (in: hFile=0xd8, lpBuffer=0xc0000c6700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0000c6700*, lpNumberOfBytesWritten=0xc00030dccc*=0x22d, lpOverlapped=0xc00030dce8) returned 1
	[0214.155] GetFileType (hFile=0xd8) returned 0x1
	[0214.155] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xe3c, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=3644) returned 1
	[0214.155] CloseHandle (hObject=0xd8) returned 1
	[0214.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf.egmwv")) returned 0x20
	[0214.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.167] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.187] SetEvent (hEvent=0x144) returned 1
	[0214.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf")) returned 0x20
	[0214.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF", dwFileAttributes=0x20) returned 1
	[0214.194] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.223] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0214.223] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002aec00, nNumberOfBytesToRead=0x126c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002aec00*, lpNumberOfBytesRead=0xc0002d7cec*=0x126c, lpOverlapped=0x0) returned 1
	[0214.230] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000705c0 | out: pbBuffer=0xc0000705c0) returned 1
	[0214.230] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b7702 | out: pbBuffer=0xc0000b7702) returned 1
	[0214.230] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000b7749 | out: pbBuffer=0xc0000b7749) returned 1
	[0214.231] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070600 | out: pbBuffer=0xc000070600) returned 1
	[0214.231] GetFileType (hFile=0xcc) returned 0x1
	[0214.231] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=4716) returned 1
	[0214.232] WriteFile (in: hFile=0xcc, lpBuffer=0xc000430000*, nNumberOfBytesToWrite=0x126c, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000430000*, lpNumberOfBytesWritten=0xc000309ccc*=0x126c, lpOverlapped=0xc000309ce8) returned 1
	[0214.232] GetFileType (hFile=0xcc) returned 0x1
	[0214.232] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x126c, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=4716) returned 1
	[0214.232] GetFileType (hFile=0xcc) returned 0x1
	[0214.232] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=4716) returned 1
	[0214.233] WriteFile (in: hFile=0xcc, lpBuffer=0xc000432000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000432000*, lpNumberOfBytesWritten=0xc000309ccc*=0x22a, lpOverlapped=0xc000309ce8) returned 1
	[0214.233] GetFileType (hFile=0xcc) returned 0x1
	[0214.233] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x126c, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=4716) returned 1
	[0214.234] CloseHandle (hObject=0xcc) returned 1
	[0214.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf.egmwv")) returned 0x20
	[0214.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.236] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.240] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.243] SetEvent (hEvent=0x124) returned 1
	[0214.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg")) returned 0x20
	[0214.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG", dwFileAttributes=0x20) returned 1
	[0214.244] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.275] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0214.275] ReadFile (in: hFile=0x118, lpBuffer=0xc0003ba000, nNumberOfBytesToRead=0x8379, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ba000*, lpNumberOfBytesRead=0xc0002d5cec*=0x8379, lpOverlapped=0x0) returned 1
	[0214.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070750 | out: pbBuffer=0xc000070750) returned 1
	[0214.281] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003cc302 | out: pbBuffer=0xc0003cc302) returned 1
	[0214.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003cc3bb | out: pbBuffer=0xc0003cc3bb) returned 1
	[0214.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003cc3c4 | out: pbBuffer=0xc0003cc3c4) returned 1
	[0214.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003cc3ea | out: pbBuffer=0xc0003cc3ea) returned 1
	[0214.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000707a0 | out: pbBuffer=0xc0000707a0) returned 1
	[0214.282] GetFileType (hFile=0x118) returned 0x1
	[0214.282] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=33657) returned 1
	[0214.282] WriteFile (in: hFile=0x118, lpBuffer=0xc000236000*, nNumberOfBytesToWrite=0x8379, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000236000*, lpNumberOfBytesWritten=0xc000309ccc*=0x8379, lpOverlapped=0xc000309ce8) returned 1
	[0214.283] GetFileType (hFile=0x118) returned 0x1
	[0214.283] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x8379, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=33657) returned 1
	[0214.283] GetFileType (hFile=0x118) returned 0x1
	[0214.283] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=33657) returned 1
	[0214.284] WriteFile (in: hFile=0x118, lpBuffer=0xc000433880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000433880*, lpNumberOfBytesWritten=0xc000309ccc*=0x233, lpOverlapped=0xc000309ce8) returned 1
	[0214.284] GetFileType (hFile=0x118) returned 0x1
	[0214.284] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x8379, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=33657) returned 1
	[0214.284] CloseHandle (hObject=0x118) returned 1
	[0214.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.egmwv")) returned 0x20
	[0214.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.295] SetEvent (hEvent=0x84) returned 1
	[0214.295] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0214.299] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.299] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x0
	[0214.301] SetEvent (hEvent=0x144) returned 1
	[0214.301] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x1) returned 0x102
	[0214.303] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.303] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.395] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg")) returned 0x20
	[0214.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG", dwFileAttributes=0x20) returned 1
	[0214.441] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0214.462] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0214.462] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003c4000, nNumberOfBytesToRead=0xb5ac, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesRead=0xc0002d3cec*=0xb5ac, lpOverlapped=0x0) returned 1
	[0214.508] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.514] SetEvent (hEvent=0x124) returned 1
	[0214.514] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) returned 0x0
	[0214.716] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0xffffffff) 

Thread:
	id = 38
	os_tid = 0xa4c

	[0118.796] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x525feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x525feb0*=0x11c) returned 1
	[0118.796] VirtualQuery (in: lpAddress=0x525fed0, lpBuffer=0x525fed0, dwLength=0x30 | out: lpBuffer=0x525fed0*(BaseAddress=0x525f000, AllocationBase=0x5060000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.796] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.egmwv"), dwFlags=0x1) returned 1
	[0127.738] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0127.739] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0127.739] ReadFile (in: hFile=0x120, lpBuffer=0xc0002a6000, nNumberOfBytesToRead=0x32b, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a6000*, lpNumberOfBytesRead=0xc00016fcec*=0x32b, lpOverlapped=0x0) returned 1
	[0131.893] VirtualAlloc (lpAddress=0xc00035a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035a000
	[0131.895] VirtualAlloc (lpAddress=0xc00035e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035e000
	[0131.896] VirtualAlloc (lpAddress=0xc000360000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000360000
	[0131.898] VirtualAlloc (lpAddress=0xc000d26000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d26000
	[0131.899] VirtualAlloc (lpAddress=0xc000d28000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d28000
	[0131.900] VirtualAlloc (lpAddress=0xc000d2a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d2a000
	[0131.901] VirtualAlloc (lpAddress=0xc000d2c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d2c000
	[0131.901] VirtualAlloc (lpAddress=0xc000d2e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d2e000
	[0131.902] VirtualAlloc (lpAddress=0xc000d30000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d30000
	[0131.904] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000521e0 | out: pbBuffer=0xc0000521e0) returned 1
	[0131.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000521fa | out: pbBuffer=0xc0000521fa) returned 1
	[0131.905] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0131.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000127a | out: pbBuffer=0xc00000127a) returned 1
	[0131.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052220 | out: pbBuffer=0xc000052220) returned 1
	[0131.905] GetFileType (hFile=0x120) returned 0x1
	[0131.906] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=811) returned 1
	[0131.906] WriteFile (in: hFile=0x120, lpBuffer=0xc00013c000*, nNumberOfBytesToWrite=0x32b, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc00013c000*, lpNumberOfBytesWritten=0xc000073ccc*=0x32b, lpOverlapped=0xc000073ce8) returned 1
	[0131.906] GetFileType (hFile=0x120) returned 0x1
	[0131.906] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x32b, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=811) returned 1
	[0131.907] GetFileType (hFile=0x120) returned 0x1
	[0131.907] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=811) returned 1
	[0131.907] WriteFile (in: hFile=0x120, lpBuffer=0xc0002a7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0002a7880*, lpNumberOfBytesWritten=0xc000073ccc*=0x22a, lpOverlapped=0xc000073ce8) returned 1
	[0131.907] GetFileType (hFile=0x120) returned 0x1
	[0131.907] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x32b, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=811) returned 1
	[0131.908] CloseHandle (hObject=0x120) returned 1
	[0131.909] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.egmwv")) returned 0x2020
	[0131.909] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0131.910] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x120
	[0131.910] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0133.298] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0133.298] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0135.262] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0136.339] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0142.570] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0143.916] SetEvent (hEvent=0x144) returned 1
	[0143.917] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0145.095] GetFileType (hFile=0xd8) returned 0x1
	[0145.095] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000199ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000199ca0*=1048576) returned 1
	[0145.095] WriteFile (in: hFile=0xd8, lpBuffer=0xc000438000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000199ccc, lpOverlapped=0xc000199ce8 | out: lpBuffer=0xc000438000*, lpNumberOfBytesWritten=0xc000199ccc*=0x100000, lpOverlapped=0xc000199ce8) returned 1
	[0145.108] GetFileType (hFile=0xd8) returned 0x1
	[0145.108] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000199ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000199ca0*=1048576) returned 1
	[0145.108] SetEvent (hEvent=0xc4) returned 1
	[0145.108] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0150.492] SetEvent (hEvent=0xc4) returned 1
	[0150.492] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0154.088] SetEvent (hEvent=0x144) returned 1
	[0154.088] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0158.816] SwitchToThread () returned 1
	[0158.945] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0159.037] SetEvent (hEvent=0xac) returned 1
	[0159.038] SetEvent (hEvent=0xc4) returned 1
	[0159.038] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi")) returned 0x2020
	[0159.038] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", dwFileAttributes=0x2020) returned 1
	[0159.039] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.egmwv"), dwFlags=0x1) returned 1
	[0169.392] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0169.466] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0169.466] ReadFile (in: hFile=0xe8, lpBuffer=0xc000216000, nNumberOfBytesToRead=0x2aed7, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000216000*, lpNumberOfBytesRead=0xc000387cec*=0x2aed7, lpOverlapped=0x0) returned 1
	[0169.524] SetEvent (hEvent=0x70) returned 1
	[0169.525] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0280 | out: pbBuffer=0xc0003a0280) returned 1
	[0169.525] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0302 | out: pbBuffer=0xc0002c0302) returned 1
	[0169.525] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0360 | out: pbBuffer=0xc0002c0360) returned 1
	[0169.525] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0368 | out: pbBuffer=0xc0002c0368) returned 1
	[0169.525] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c03ce | out: pbBuffer=0xc0002c03ce) returned 1
	[0169.525] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a02c0 | out: pbBuffer=0xc0003a02c0) returned 1
	[0169.527] VirtualAlloc (lpAddress=0xc0015e2000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0015e2000
	[0169.542] GetFileType (hFile=0xe8) returned 0x1
	[0169.542] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=175831) returned 1
	[0169.542] WriteFile (in: hFile=0xe8, lpBuffer=0xc0015e2000*, nNumberOfBytesToWrite=0x2aed7, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc0015e2000*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x2aed7, lpOverlapped=0xc0002b5ce8) returned 1
	[0169.544] GetFileType (hFile=0xe8) returned 0x1
	[0169.544] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2aed7, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=175831) returned 1
	[0169.544] GetFileType (hFile=0xe8) returned 0x1
	[0169.544] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=175831) returned 1
	[0169.544] WriteFile (in: hFile=0xe8, lpBuffer=0xc000099400*, nNumberOfBytesToWrite=0x254, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc000099400*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x254, lpOverlapped=0xc0002b5ce8) returned 1
	[0169.592] GetFileType (hFile=0xe8) returned 0x1
	[0169.593] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2aed7, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=175831) returned 1
	[0169.593] CloseHandle (hObject=0xe8) returned 1
	[0169.749] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.egmwv")) returned 0x2020
	[0169.750] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0169.840] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0170.349] SetEvent (hEvent=0xac) returned 1
	[0170.349] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 0x2020
	[0170.349] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", dwFileAttributes=0x2020) returned 1
	[0170.351] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.egmwv"), dwFlags=0x1) returned 1
	[0170.352] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0170.352] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0170.352] ReadFile (in: hFile=0x118, lpBuffer=0xc000099800, nNumberOfBytesToRead=0x391, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc000099800*, lpNumberOfBytesRead=0xc000175cec*=0x391, lpOverlapped=0x0) returned 1
	[0170.449] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0170.715] SetEvent (hEvent=0xac) returned 1
	[0170.715] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0175.241] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 0x2020
	[0175.241] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", dwFileAttributes=0x2020) returned 1
	[0175.242] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.egmwv"), dwFlags=0x1) returned 1
	[0175.243] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0175.243] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0175.243] ReadFile (in: hFile=0x118, lpBuffer=0xc0001da800, nNumberOfBytesToRead=0x741, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001da800*, lpNumberOfBytesRead=0xc000161cec*=0x741, lpOverlapped=0x0) returned 1
	[0175.477] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0175.615] SetEvent (hEvent=0x100) returned 1
	[0175.615] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0182.162] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0182.182] SetEvent (hEvent=0x54) returned 1
	[0182.182] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0182.184] SetEvent (hEvent=0x54) returned 1
	[0182.184] SwitchToThread () returned 1
	[0182.192] SetEvent (hEvent=0xc8) returned 1
	[0182.192] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0182.257] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0190.992] SetEvent (hEvent=0x54) returned 1
	[0190.992] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab")) returned 0x2020
	[0190.992] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", dwFileAttributes=0x2020) returned 1
	[0191.005] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0191.200] SwitchToThread () returned 1
	[0191.239] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0194.131] SetEvent (hEvent=0x54) returned 1
	[0194.131] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0194.178] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0194.204] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0194.204] SetEvent (hEvent=0x70) returned 1
	[0194.204] SetEvent (hEvent=0xc4) returned 1
	[0194.205] GetFileType (hFile=0xe0) returned 0x1
	[0194.205] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036dca0*=139453) returned 1
	[0194.206] WriteFile (in: hFile=0xe0, lpBuffer=0xc000458000*, nNumberOfBytesToWrite=0x220bd, lpNumberOfBytesWritten=0xc00036dccc, lpOverlapped=0xc00036dce8 | out: lpBuffer=0xc000458000*, lpNumberOfBytesWritten=0xc00036dccc*=0x220bd, lpOverlapped=0xc00036dce8) returned 1
	[0194.207] GetFileType (hFile=0xe0) returned 0x1
	[0194.207] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x220bd, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036dca0*=139453) returned 1
	[0194.207] GetFileType (hFile=0xe0) returned 0x1
	[0194.207] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036dca0*=139453) returned 1
	[0194.207] WriteFile (in: hFile=0xe0, lpBuffer=0xc000375500*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0xc00036dccc, lpOverlapped=0xc00036dce8 | out: lpBuffer=0xc000375500*, lpNumberOfBytesWritten=0xc00036dccc*=0x245, lpOverlapped=0xc00036dce8) returned 1
	[0194.225] GetFileType (hFile=0xe0) returned 0x1
	[0194.225] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x220bd, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036dca0*=139453) returned 1
	[0194.225] CloseHandle (hObject=0xe0) returned 1
	[0194.258] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv")) returned 0x2020
	[0194.258] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0194.397] ReadFile (in: hFile=0xcc, lpBuffer=0xc00040a000, nNumberOfBytesToRead=0x7976, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesRead=0xc000387cec*=0x7976, lpOverlapped=0x0) returned 1
	[0194.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052130 | out: pbBuffer=0xc000052130) returned 1
	[0194.429] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0194.429] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0984 | out: pbBuffer=0xc0002c0984) returned 1
	[0194.429] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052170 | out: pbBuffer=0xc000052170) returned 1
	[0194.430] GetFileType (hFile=0xcc) returned 0x1
	[0194.430] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036dca0*=31094) returned 1
	[0194.431] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002b2000*, nNumberOfBytesToWrite=0x7976, lpNumberOfBytesWritten=0xc00036dccc, lpOverlapped=0xc00036dce8 | out: lpBuffer=0xc0002b2000*, lpNumberOfBytesWritten=0xc00036dccc*=0x7976, lpOverlapped=0xc00036dce8) returned 1
	[0194.432] GetFileType (hFile=0xcc) returned 0x1
	[0194.432] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7976, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036dca0*=31094) returned 1
	[0194.432] GetFileType (hFile=0xcc) returned 0x1
	[0194.432] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036dca0*=31094) returned 1
	[0194.432] WriteFile (in: hFile=0xcc, lpBuffer=0xc000375880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00036dccc, lpOverlapped=0xc00036dce8 | out: lpBuffer=0xc000375880*, lpNumberOfBytesWritten=0xc00036dccc*=0x236, lpOverlapped=0xc00036dce8) returned 1
	[0194.433] GetFileType (hFile=0xcc) returned 0x1
	[0194.433] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7976, lpNewFilePointer=0xc00036dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036dca0*=31094) returned 1
	[0194.433] CloseHandle (hObject=0xcc) returned 1
	[0194.448] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0194.448] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0194.455] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0196.837] SetEvent (hEvent=0x124) returned 1
	[0196.837] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0196.840] SetEvent (hEvent=0x124) returned 1
	[0196.840] SetEvent (hEvent=0x100) returned 1
	[0196.840] GetFileType (hFile=0x118) returned 0x1
	[0196.841] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0196.841] WriteFile (in: hFile=0x118, lpBuffer=0xc0001fe000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000425ccc, lpOverlapped=0xc000425ce8 | out: lpBuffer=0xc0001fe000*, lpNumberOfBytesWritten=0xc000425ccc*=0x2d8, lpOverlapped=0xc000425ce8) returned 1
	[0196.853] GetFileType (hFile=0x118) returned 0x1
	[0196.853] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc000425ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000425ca0*=1048576) returned 1
	[0196.853] CloseHandle (hObject=0x118) returned 1
	[0197.808] SetEvent (hEvent=0x70) returned 1
	[0197.808] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.egmwv")) returned 0x2020
	[0197.808] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0198.101] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.228] SetEvent (hEvent=0x148) returned 1
	[0198.228] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.249] SetEvent (hEvent=0x148) returned 1
	[0198.249] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.394] SetEvent (hEvent=0x144) returned 1
	[0198.394] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0198.453] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.454] SwitchToThread () returned 1
	[0198.525] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0198.617] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.617] SetEvent (hEvent=0x100) returned 1
	[0198.617] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0198.650] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.651] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0198.651] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005213a | out: pbBuffer=0xc00005213a) returned 1
	[0198.651] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0198.652] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052160 | out: pbBuffer=0xc000052160) returned 1
	[0198.657] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0198.661] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.661] SetEvent (hEvent=0x70) returned 1
	[0198.662] SetEvent (hEvent=0x144) returned 1
	[0198.662] SetEvent (hEvent=0x148) returned 1
	[0198.666] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x0
	[0198.668] SetEvent (hEvent=0x100) returned 1
	[0198.668] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x0
	[0198.677] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x0
	[0198.679] SetEvent (hEvent=0x70) returned 1
	[0198.679] SetEvent (hEvent=0x148) returned 1
	[0198.680] SetEvent (hEvent=0x144) returned 1
	[0198.680] GetFileType (hFile=0xe8) returned 0x1
	[0198.680] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.680] WriteFile (in: hFile=0xe8, lpBuffer=0xc00076e000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000167ccc, lpOverlapped=0xc000167ce8 | out: lpBuffer=0xc00076e000*, lpNumberOfBytesWritten=0xc000167ccc*=0x100000, lpOverlapped=0xc000167ce8) returned 1
	[0198.690] GetFileType (hFile=0xe8) returned 0x1
	[0198.690] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.690] GetFileType (hFile=0xe8) returned 0x1
	[0198.690] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.690] WriteFile (in: hFile=0xe8, lpBuffer=0xc000080000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000167ccc, lpOverlapped=0xc000167ce8 | out: lpBuffer=0xc000080000*, lpNumberOfBytesWritten=0xc000167ccc*=0x2d8, lpOverlapped=0xc000167ce8) returned 1
	[0198.698] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.700] SetEvent (hEvent=0x148) returned 1
	[0198.700] GetFileType (hFile=0xe8) returned 0x1
	[0198.700] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.700] CloseHandle (hObject=0xe8) returned 1
	[0198.701] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.egmwv")) returned 0x2020
	[0198.701] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0198.701] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.703] SetEvent (hEvent=0x148) returned 1
	[0198.703] SetEvent (hEvent=0x100) returned 1
	[0198.703] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0198.708] SetEvent (hEvent=0x100) returned 1
	[0198.708] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0198.714] SetEvent (hEvent=0x54) returned 1
	[0198.714] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0198.958] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.963] SetEvent (hEvent=0x148) returned 1
	[0198.963] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0198.965] SetEvent (hEvent=0x148) returned 1
	[0198.965] SetEvent (hEvent=0x144) returned 1
	[0198.966] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400)) returned 1
	[0199.101] SetEvent (hEvent=0x148) returned 1
	[0199.101] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915)) returned 1
	[0199.131] SetEvent (hEvent=0x70) returned 1
	[0199.131] SetEvent (hEvent=0x54) returned 1
	[0199.131] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f)) returned 1
	[0199.157] SetEvent (hEvent=0x124) returned 1
	[0199.157] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b)) returned 1
	[0199.229] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.236] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.377] SetEvent (hEvent=0x124) returned 1
	[0199.377] SetEvent (hEvent=0x54) returned 1
	[0199.377] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.455] SetEvent (hEvent=0x148) returned 1
	[0199.455] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.497] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.506] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.577] SetEvent (hEvent=0x100) returned 1
	[0199.578] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.662] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.703] SetEvent (hEvent=0x124) returned 1
	[0199.706] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.751] SetEvent (hEvent=0xac) returned 1
	[0199.751] SetEvent (hEvent=0x54) returned 1
	[0199.751] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0199.820] SetEvent (hEvent=0x148) returned 1
	[0199.820] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.068] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.084] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20
	[0200.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl", dwFileAttributes=0x20) returned 1
	[0200.104] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.133] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0200.148] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x0
	[0200.151] SetEvent (hEvent=0x70) returned 1
	[0200.151] SetEvent (hEvent=0x100) returned 1
	[0200.151] ReadFile (in: hFile=0x118, lpBuffer=0xc00034c000, nNumberOfBytesToRead=0x4360, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034c000*, lpNumberOfBytesRead=0xc000387cec*=0x4360, lpOverlapped=0x0) returned 1
	[0200.157] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a120 | out: pbBuffer=0xc00041a120) returned 1
	[0200.157] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a13a | out: pbBuffer=0xc00041a13a) returned 1
	[0200.158] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0200.158] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039270 | out: pbBuffer=0xc000039270) returned 1
	[0200.158] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039296 | out: pbBuffer=0xc000039296) returned 1
	[0200.158] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a160 | out: pbBuffer=0xc00041a160) returned 1
	[0200.158] GetFileType (hFile=0x118) returned 0x1
	[0200.158] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=17248) returned 1
	[0200.158] WriteFile (in: hFile=0x118, lpBuffer=0xc0001f4000*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc0001f4000*, lpNumberOfBytesWritten=0xc00006fccc*=0x4360, lpOverlapped=0xc00006fce8) returned 1
	[0200.159] GetFileType (hFile=0x118) returned 0x1
	[0200.159] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x4360, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=17248) returned 1
	[0200.159] GetFileType (hFile=0x118) returned 0x1
	[0200.159] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=17248) returned 1
	[0200.159] WriteFile (in: hFile=0x118, lpBuffer=0xc000415500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc000415500*, lpNumberOfBytesWritten=0xc00006fccc*=0x227, lpOverlapped=0xc00006fce8) returned 1
	[0200.160] GetFileType (hFile=0x118) returned 0x1
	[0200.160] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x4360, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=17248) returned 1
	[0200.160] CloseHandle (hObject=0x118) returned 1
	[0200.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.egmwv")) returned 0x20
	[0200.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.163] SwitchToThread () returned 1
	[0200.164] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.172] SetEvent (hEvent=0xac) returned 1
	[0200.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20
	[0200.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl", dwFileAttributes=0x20) returned 1
	[0200.180] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.206] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0200.206] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0x851c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc000387cec*=0x851c, lpOverlapped=0x0) returned 1
	[0200.212] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000521a0 | out: pbBuffer=0xc0000521a0) returned 1
	[0200.212] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000521ba | out: pbBuffer=0xc0000521ba) returned 1
	[0200.213] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0200.213] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c09c0 | out: pbBuffer=0xc0002c09c0) returned 1
	[0200.213] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052250 | out: pbBuffer=0xc000052250) returned 1
	[0200.213] GetFileType (hFile=0xe8) returned 0x1
	[0200.213] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=34076) returned 1
	[0200.214] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000ea000*, nNumberOfBytesToWrite=0x851c, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0000ea000*, lpNumberOfBytesWritten=0xc000073ccc*=0x851c, lpOverlapped=0xc000073ce8) returned 1
	[0200.214] GetFileType (hFile=0xe8) returned 0x1
	[0200.214] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x851c, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=34076) returned 1
	[0200.214] GetFileType (hFile=0xe8) returned 0x1
	[0200.215] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=34076) returned 1
	[0200.215] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003eb500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0003eb500*, lpNumberOfBytesWritten=0xc000073ccc*=0x22d, lpOverlapped=0xc000073ce8) returned 1
	[0200.215] GetFileType (hFile=0xe8) returned 0x1
	[0200.215] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x851c, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=34076) returned 1
	[0200.215] CloseHandle (hObject=0xe8) returned 1
	[0200.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.egmwv")) returned 0x20
	[0200.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.219] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.221] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.276] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.435] SetEvent (hEvent=0x148) returned 1
	[0200.435] SetEvent (hEvent=0x124) returned 1
	[0200.435] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.446] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.505] SetEvent (hEvent=0x148) returned 1
	[0200.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20
	[0200.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x20) returned 1
	[0200.507] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0200.537] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.537] ReadFile (in: hFile=0x164, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x1c30, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc000389cec*=0x1c30, lpOverlapped=0x0) returned 1
	[0200.543] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b90 | out: pbBuffer=0xc000052b90) returned 1
	[0200.543] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1002 | out: pbBuffer=0xc0002c1002) returned 1
	[0200.543] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bd0 | out: pbBuffer=0xc000052bd0) returned 1
	[0200.543] GetFileType (hFile=0x164) returned 0x1
	[0200.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=7216) returned 1
	[0200.544] WriteFile (in: hFile=0x164, lpBuffer=0xc00040e000*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc00040e000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x1c30, lpOverlapped=0xc0003ddce8) returned 1
	[0200.544] GetFileType (hFile=0x164) returned 0x1
	[0200.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1c30, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=7216) returned 1
	[0200.545] GetFileType (hFile=0x164) returned 0x1
	[0200.545] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=7216) returned 1
	[0200.545] WriteFile (in: hFile=0x164, lpBuffer=0xc00037d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc00037d500*, lpNumberOfBytesWritten=0xc0003ddccc*=0x227, lpOverlapped=0xc0003ddce8) returned 1
	[0200.545] GetFileType (hFile=0x164) returned 0x1
	[0200.545] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1c30, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=7216) returned 1
	[0200.546] CloseHandle (hObject=0x164) returned 1
	[0200.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.egmwv")) returned 0x20
	[0200.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.550] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.554] SetEvent (hEvent=0x124) returned 1
	[0200.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20
	[0200.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x20) returned 1
	[0200.555] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.592] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.592] ReadFile (in: hFile=0xd4, lpBuffer=0xc000438000, nNumberOfBytesToRead=0xcb3, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000389cec*=0xcb3, lpOverlapped=0x0) returned 1
	[0200.598] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0200.598] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0200.598] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0200.599] GetFileType (hFile=0xd4) returned 0x1
	[0200.599] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=3251) returned 1
	[0200.599] WriteFile (in: hFile=0xd4, lpBuffer=0xc000456000*, nNumberOfBytesToWrite=0xcb3, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000456000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0xcb3, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.599] GetFileType (hFile=0xd4) returned 0x1
	[0200.600] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xcb3, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=3251) returned 1
	[0200.600] GetFileType (hFile=0xd4) returned 0x1
	[0200.600] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=3251) returned 1
	[0200.600] WriteFile (in: hFile=0xd4, lpBuffer=0xc000448e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000448e00*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22d, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.600] GetFileType (hFile=0xd4) returned 0x1
	[0200.601] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xcb3, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=3251) returned 1
	[0200.601] CloseHandle (hObject=0xd4) returned 1
	[0200.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.egmwv")) returned 0x20
	[0200.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.604] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.607] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.619] SetEvent (hEvent=0x124) returned 1
	[0200.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20
	[0200.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x20) returned 1
	[0200.620] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.641] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.641] ReadFile (in: hFile=0xd4, lpBuffer=0xc000475000, nNumberOfBytesToRead=0x2e73, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000475000*, lpNumberOfBytesRead=0xc000389cec*=0x2e73, lpOverlapped=0x0) returned 1
	[0200.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0200.646] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1f02 | out: pbBuffer=0xc0002c1f02) returned 1
	[0200.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1f09 | out: pbBuffer=0xc0002c1f09) returned 1
	[0200.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1fcc | out: pbBuffer=0xc0002c1fcc) returned 1
	[0200.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d60 | out: pbBuffer=0xc000052d60) returned 1
	[0200.646] GetFileType (hFile=0xd4) returned 0x1
	[0200.647] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=11891) returned 1
	[0200.647] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x2e73, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x2e73, lpOverlapped=0xc0003ddce8) returned 1
	[0200.647] GetFileType (hFile=0xd4) returned 0x1
	[0200.647] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2e73, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=11891) returned 1
	[0200.647] GetFileType (hFile=0xd4) returned 0x1
	[0200.647] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=11891) returned 1
	[0200.648] WriteFile (in: hFile=0xd4, lpBuffer=0xc0003d0e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0003d0e00*, lpNumberOfBytesWritten=0xc0003ddccc*=0x233, lpOverlapped=0xc0003ddce8) returned 1
	[0200.648] GetFileType (hFile=0xd4) returned 0x1
	[0200.648] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2e73, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=11891) returned 1
	[0200.649] CloseHandle (hObject=0xd4) returned 1
	[0200.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.egmwv")) returned 0x20
	[0200.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.654] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20
	[0200.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x20) returned 1
	[0200.661] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.699] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0200.699] ReadFile (in: hFile=0xe8, lpBuffer=0xc000120000, nNumberOfBytesToRead=0x319e, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc000120000*, lpNumberOfBytesRead=0xc000175cec*=0x319e, lpOverlapped=0x0) returned 1
	[0200.706] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0200.706] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ced02 | out: pbBuffer=0xc0001ced02) returned 1
	[0200.706] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001ced70 | out: pbBuffer=0xc0001ced70) returned 1
	[0200.707] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0200.707] GetFileType (hFile=0xe8) returned 0x1
	[0200.707] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=12702) returned 1
	[0200.707] WriteFile (in: hFile=0xe8, lpBuffer=0xc000148000*, nNumberOfBytesToWrite=0x319e, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc000148000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x319e, lpOverlapped=0xc0003ddce8) returned 1
	[0200.708] GetFileType (hFile=0xe8) returned 0x1
	[0200.708] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x319e, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=12702) returned 1
	[0200.708] GetFileType (hFile=0xe8) returned 0x1
	[0200.708] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=12702) returned 1
	[0200.709] WriteFile (in: hFile=0xe8, lpBuffer=0xc000138700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc000138700*, lpNumberOfBytesWritten=0xc0003ddccc*=0x230, lpOverlapped=0xc0003ddce8) returned 1
	[0200.709] GetFileType (hFile=0xe8) returned 0x1
	[0200.709] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x319e, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=12702) returned 1
	[0200.709] CloseHandle (hObject=0xe8) returned 1
	[0200.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.egmwv")) returned 0x20
	[0200.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.713] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.731] SetEvent (hEvent=0x124) returned 1
	[0200.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20
	[0200.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x20) returned 1
	[0200.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.762] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0200.762] ReadFile (in: hFile=0xe8, lpBuffer=0xc00032e000, nNumberOfBytesToRead=0x30c2, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc00032e000*, lpNumberOfBytesRead=0xc000175cec*=0x30c2, lpOverlapped=0x0) returned 1
	[0200.767] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0200.767] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b646a | out: pbBuffer=0xc0002b646a) returned 1
	[0200.767] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003c4e02 | out: pbBuffer=0xc0003c4e02) returned 1
	[0200.768] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6490 | out: pbBuffer=0xc0002b6490) returned 1
	[0200.768] GetFileType (hFile=0xe8) returned 0x1
	[0200.768] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=12482) returned 1
	[0200.768] WriteFile (in: hFile=0xe8, lpBuffer=0xc000236000*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000236000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x30c2, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.768] GetFileType (hFile=0xe8) returned 0x1
	[0200.768] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x30c2, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=12482) returned 1
	[0200.769] GetFileType (hFile=0xe8) returned 0x1
	[0200.769] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=12482) returned 1
	[0200.769] WriteFile (in: hFile=0xe8, lpBuffer=0xc000218700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000218700*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x227, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.769] GetFileType (hFile=0xe8) returned 0x1
	[0200.769] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x30c2, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=12482) returned 1
	[0200.770] CloseHandle (hObject=0xe8) returned 1
	[0200.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.egmwv")) returned 0x20
	[0200.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.771] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.781] SetEvent (hEvent=0x124) returned 1
	[0200.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20
	[0200.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x20) returned 1
	[0200.787] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.811] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0200.811] ReadFile (in: hFile=0x118, lpBuffer=0xc000274000, nNumberOfBytesToRead=0x296f, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000274000*, lpNumberOfBytesRead=0xc00038dcec*=0x296f, lpOverlapped=0x0) returned 1
	[0200.817] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0200.817] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003c5b02 | out: pbBuffer=0xc0003c5b02) returned 1
	[0200.817] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0200.817] SetEvent (hEvent=0x124) returned 1
	[0200.818] GetFileType (hFile=0x118) returned 0x1
	[0200.818] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=10607) returned 1
	[0200.818] WriteFile (in: hFile=0x118, lpBuffer=0xc0004c4000*, nNumberOfBytesToWrite=0x296f, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0004c4000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x296f, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.819] GetFileType (hFile=0x118) returned 0x1
	[0200.819] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x296f, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=10607) returned 1
	[0200.819] GetFileType (hFile=0x118) returned 0x1
	[0200.819] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=10607) returned 1
	[0200.819] WriteFile (in: hFile=0x118, lpBuffer=0xc0004c8000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0004c8000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x233, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.819] GetFileType (hFile=0x118) returned 0x1
	[0200.820] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x296f, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=10607) returned 1
	[0200.820] CloseHandle (hObject=0x118) returned 1
	[0200.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.egmwv")) returned 0x20
	[0200.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.826] SwitchToThread () returned 1
	[0200.828] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.834] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0200.996] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.006] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.033] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.040] SetEvent (hEvent=0x148) returned 1
	[0201.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20
	[0201.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x20) returned 1
	[0201.041] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0201.102] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0201.102] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000ae000, nNumberOfBytesToRead=0x1b48, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ae000*, lpNumberOfBytesRead=0xc00038dcec*=0x1b48, lpOverlapped=0x0) returned 1
	[0201.108] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0201.108] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ca | out: pbBuffer=0xc0004142ca) returned 1
	[0201.108] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215f02 | out: pbBuffer=0xc000215f02) returned 1
	[0201.108] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215fd5 | out: pbBuffer=0xc000215fd5) returned 1
	[0201.109] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215fd9 | out: pbBuffer=0xc000215fd9) returned 1
	[0201.109] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0201.109] GetFileType (hFile=0xe8) returned 0x1
	[0201.110] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=6984) returned 1
	[0201.110] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000c4000*, nNumberOfBytesToWrite=0x1b48, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc0000c4000*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x1b48, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.110] GetFileType (hFile=0xe8) returned 0x1
	[0201.110] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b48, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=6984) returned 1
	[0201.111] GetFileType (hFile=0xe8) returned 0x1
	[0201.111] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=6984) returned 1
	[0201.111] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000bae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc0000bae00*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x22a, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.111] GetFileType (hFile=0xe8) returned 0x1
	[0201.111] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b48, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=6984) returned 1
	[0201.112] CloseHandle (hObject=0xe8) returned 1
	[0201.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.egmwv")) returned 0x20
	[0201.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.117] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20
	[0201.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x20) returned 1
	[0201.124] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.157] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000397cc4 | out: lpMode=0xc000397cc4) returned 0
	[0201.158] ReadFile (in: hFile=0x118, lpBuffer=0xc000130000, nNumberOfBytesToRead=0x131e, lpNumberOfBytesRead=0xc000397cec, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesRead=0xc000397cec*=0x131e, lpOverlapped=0x0) returned 1
	[0201.164] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414440 | out: pbBuffer=0xc000414440) returned 1
	[0201.164] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000bee02 | out: pbBuffer=0xc0000bee02) returned 1
	[0201.164] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bee29 | out: pbBuffer=0xc0000bee29) returned 1
	[0201.164] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bee47 | out: pbBuffer=0xc0000bee47) returned 1
	[0201.165] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bee79 | out: pbBuffer=0xc0000bee79) returned 1
	[0201.165] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414480 | out: pbBuffer=0xc000414480) returned 1
	[0201.165] GetFileType (hFile=0x118) returned 0x1
	[0201.165] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=4894) returned 1
	[0201.165] WriteFile (in: hFile=0x118, lpBuffer=0xc000148000*, nNumberOfBytesToWrite=0x131e, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc000148000*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x131e, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.166] GetFileType (hFile=0x118) returned 0x1
	[0201.166] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x131e, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=4894) returned 1
	[0201.166] GetFileType (hFile=0x118) returned 0x1
	[0201.166] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=4894) returned 1
	[0201.166] WriteFile (in: hFile=0x118, lpBuffer=0xc000142700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc000142700*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x22d, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.166] GetFileType (hFile=0x118) returned 0x1
	[0201.166] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x131e, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=4894) returned 1
	[0201.166] CloseHandle (hObject=0x118) returned 1
	[0201.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.egmwv")) returned 0x20
	[0201.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.170] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20
	[0201.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x20) returned 1
	[0201.186] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.216] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000397cc4 | out: lpMode=0xc000397cc4) returned 0
	[0201.216] ReadFile (in: hFile=0xd4, lpBuffer=0xc0000d6a00, nNumberOfBytesToRead=0x1398, lpNumberOfBytesRead=0xc000397cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d6a00*, lpNumberOfBytesRead=0xc000397cec*=0x1398, lpOverlapped=0x0) returned 1
	[0201.223] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67a0 | out: pbBuffer=0xc0002b67a0) returned 1
	[0201.223] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f4302 | out: pbBuffer=0xc0001f4302) returned 1
	[0201.223] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67e0 | out: pbBuffer=0xc0002b67e0) returned 1
	[0201.223] GetFileType (hFile=0xd4) returned 0x1
	[0201.223] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=5016) returned 1
	[0201.224] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001fe000*, nNumberOfBytesToWrite=0x1398, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0001fe000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x1398, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.224] GetFileType (hFile=0xd4) returned 0x1
	[0201.224] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1398, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=5016) returned 1
	[0201.224] GetFileType (hFile=0xd4) returned 0x1
	[0201.224] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=5016) returned 1
	[0201.225] WriteFile (in: hFile=0xd4, lpBuffer=0xc000101880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000101880*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22a, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.225] GetFileType (hFile=0xd4) returned 0x1
	[0201.225] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x1398, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=5016) returned 1
	[0201.225] CloseHandle (hObject=0xd4) returned 1
	[0201.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.egmwv")) returned 0x20
	[0201.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.228] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.242] SetEvent (hEvent=0x148) returned 1
	[0201.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20
	[0201.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x20) returned 1
	[0201.244] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.275] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000175cc4 | out: lpMode=0xc000175cc4) returned 0
	[0201.275] ReadFile (in: hFile=0xd4, lpBuffer=0xc00026c000, nNumberOfBytesToRead=0xd32, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc00026c000*, lpNumberOfBytesRead=0xc000175cec*=0xd32, lpOverlapped=0x0) returned 1
	[0201.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053000 | out: pbBuffer=0xc000053000) returned 1
	[0201.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005301a | out: pbBuffer=0xc00005301a) returned 1
	[0201.282] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00014b902 | out: pbBuffer=0xc00014b902) returned 1
	[0201.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014b9e4 | out: pbBuffer=0xc00014b9e4) returned 1
	[0201.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053040 | out: pbBuffer=0xc000053040) returned 1
	[0201.282] GetFileType (hFile=0xd4) returned 0x1
	[0201.282] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=3378) returned 1
	[0201.282] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002fc000*, nNumberOfBytesToWrite=0xd32, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0002fc000*, lpNumberOfBytesWritten=0xc000411ccc*=0xd32, lpOverlapped=0xc000411ce8) returned 1
	[0201.283] GetFileType (hFile=0xd4) returned 0x1
	[0201.286] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xd32, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=3378) returned 1
	[0201.286] GetFileType (hFile=0xd4) returned 0x1
	[0201.286] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=3378) returned 1
	[0201.286] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002fe000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesWritten=0xc000411ccc*=0x22a, lpOverlapped=0xc000411ce8) returned 1
	[0201.286] GetFileType (hFile=0xd4) returned 0x1
	[0201.287] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xd32, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=3378) returned 1
	[0201.287] CloseHandle (hObject=0xd4) returned 1
	[0201.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.egmwv")) returned 0x20
	[0201.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.290] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.292] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.296] SetEvent (hEvent=0x148) returned 1
	[0201.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20
	[0201.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x20) returned 1
	[0201.298] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0201.327] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000171cc4 | out: lpMode=0xc000171cc4) returned 0
	[0201.328] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002c3300, nNumberOfBytesToRead=0x127e, lpNumberOfBytesRead=0xc000171cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c3300*, lpNumberOfBytesRead=0xc000171cec*=0x127e, lpOverlapped=0x0) returned 1
	[0201.334] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145f0 | out: pbBuffer=0xc0004145f0) returned 1
	[0201.349] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000bfa02 | out: pbBuffer=0xc0000bfa02) returned 1
	[0201.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bfa57 | out: pbBuffer=0xc0000bfa57) returned 1
	[0201.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bfaad | out: pbBuffer=0xc0000bfaad) returned 1
	[0201.350] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414630 | out: pbBuffer=0xc000414630) returned 1
	[0201.350] GetFileType (hFile=0xe8) returned 0x1
	[0201.350] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=4734) returned 1
	[0201.350] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004d6000*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc0004d6000*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x127e, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.350] GetFileType (hFile=0xe8) returned 0x1
	[0201.351] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x127e, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=4734) returned 1
	[0201.351] GetFileType (hFile=0xe8) returned 0x1
	[0201.351] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=4734) returned 1
	[0201.352] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004d8000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc0004d8000*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x230, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.352] GetFileType (hFile=0xe8) returned 0x1
	[0201.352] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x127e, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=4734) returned 1
	[0201.352] CloseHandle (hObject=0xe8) returned 1
	[0201.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.egmwv")) returned 0x20
	[0201.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.353] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.515] SetEvent (hEvent=0x124) returned 1
	[0201.516] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20
	[0201.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x20) returned 1
	[0201.523] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.528] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0201.694] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc00038fcc4 | out: lpMode=0xc00038fcc4) returned 0
	[0201.694] ReadFile (in: hFile=0x130, lpBuffer=0xc0003dc300, nNumberOfBytesToRead=0x63c, lpNumberOfBytesRead=0xc00038fcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003dc300*, lpNumberOfBytesRead=0xc00038fcec*=0x63c, lpOverlapped=0x0) returned 1
	[0201.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6750 | out: pbBuffer=0xc0002b6750) returned 1
	[0201.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b676a | out: pbBuffer=0xc0002b676a) returned 1
	[0201.700] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001e8202 | out: pbBuffer=0xc0001e8202) returned 1
	[0201.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6790 | out: pbBuffer=0xc0002b6790) returned 1
	[0201.700] GetFileType (hFile=0x130) returned 0x1
	[0201.700] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=1596) returned 1
	[0201.701] WriteFile (in: hFile=0x130, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x63c, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc000357ccc*=0x63c, lpOverlapped=0xc000357ce8) returned 1
	[0201.701] GetFileType (hFile=0x130) returned 0x1
	[0201.701] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x63c, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=1596) returned 1
	[0201.701] GetFileType (hFile=0x130) returned 0x1
	[0201.701] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=1596) returned 1
	[0201.702] WriteFile (in: hFile=0x130, lpBuffer=0xc0001db880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0001db880*, lpNumberOfBytesWritten=0xc000357ccc*=0x22a, lpOverlapped=0xc000357ce8) returned 1
	[0201.702] GetFileType (hFile=0x130) returned 0x1
	[0201.702] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x63c, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=1596) returned 1
	[0201.702] CloseHandle (hObject=0x130) returned 1
	[0201.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.egmwv")) returned 0x20
	[0201.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.704] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.731] SetEvent (hEvent=0xc4) returned 1
	[0201.731] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0201.739] SetEvent (hEvent=0xc4) returned 1
	[0201.739] SwitchToThread () returned 1
	[0201.745] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0212.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf")) returned 0x20
	[0212.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF", dwFileAttributes=0x20) returned 1
	[0212.598] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.875] SetEvent (hEvent=0x70) returned 1
	[0212.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0212.877] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000145cc4 | out: lpMode=0xc000145cc4) returned 0
	[0212.877] ReadFile (in: hFile=0xe8, lpBuffer=0xc00044a000, nNumberOfBytesToRead=0xbcfc, lpNumberOfBytesRead=0xc000145cec, lpOverlapped=0x0 | out: lpBuffer=0xc00044a000*, lpNumberOfBytesRead=0xc000145cec*=0xbcfc, lpOverlapped=0x0) returned 1
	[0212.883] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0212.883] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001b02 | out: pbBuffer=0xc000001b02) returned 1
	[0212.883] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001b3b | out: pbBuffer=0xc000001b3b) returned 1
	[0212.883] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0212.884] GetFileType (hFile=0xe8) returned 0x1
	[0212.884] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=48380) returned 1
	[0212.884] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001d6000*, nNumberOfBytesToWrite=0xbcfc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001d6000*, lpNumberOfBytesWritten=0xc000155ccc*=0xbcfc, lpOverlapped=0xc000155ce8) returned 1
	[0212.885] GetFileType (hFile=0xe8) returned 0x1
	[0212.885] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbcfc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=48380) returned 1
	[0212.885] GetFileType (hFile=0xe8) returned 0x1
	[0212.885] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=48380) returned 1
	[0212.885] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001a0e00*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001a0e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x23c, lpOverlapped=0xc000155ce8) returned 1
	[0212.885] GetFileType (hFile=0xe8) returned 0x1
	[0212.886] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbcfc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=48380) returned 1
	[0212.886] CloseHandle (hObject=0xe8) returned 1
	[0212.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf.egmwv")) returned 0x20
	[0212.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.918] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0212.978] SetEvent (hEvent=0x144) returned 1
	[0212.978] SetEvent (hEvent=0xc4) returned 1
	[0212.978] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.350] SetEvent (hEvent=0xc4) returned 1
	[0213.350] SetEvent (hEvent=0x144) returned 1
	[0213.350] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.423] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.478] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf")) returned 0x20
	[0213.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF", dwFileAttributes=0x20) returned 1
	[0213.554] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0213.593] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000149cc4 | out: lpMode=0xc000149cc4) returned 0
	[0213.593] ReadFile (in: hFile=0xd8, lpBuffer=0xc0002ae000, nNumberOfBytesToRead=0xdf0, lpNumberOfBytesRead=0xc000149cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ae000*, lpNumberOfBytesRead=0xc000149cec*=0xdf0, lpOverlapped=0x0) returned 1
	[0213.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000705d0 | out: pbBuffer=0xc0000705d0) returned 1
	[0213.625] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000312602 | out: pbBuffer=0xc000312602) returned 1
	[0213.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000312678 | out: pbBuffer=0xc000312678) returned 1
	[0213.625] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070610 | out: pbBuffer=0xc000070610) returned 1
	[0213.625] GetFileType (hFile=0xd8) returned 0x1
	[0213.625] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3568) returned 1
	[0213.625] WriteFile (in: hFile=0xd8, lpBuffer=0xc000372000*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000372000*, lpNumberOfBytesWritten=0xc000155ccc*=0xdf0, lpOverlapped=0xc000155ce8) returned 1
	[0213.625] GetFileType (hFile=0xd8) returned 0x1
	[0213.626] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xdf0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3568) returned 1
	[0213.626] GetFileType (hFile=0xd8) returned 0x1
	[0213.626] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3568) returned 1
	[0213.626] WriteFile (in: hFile=0xd8, lpBuffer=0xc0000f3880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f3880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0213.627] GetFileType (hFile=0xd8) returned 0x1
	[0213.627] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0xdf0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3568) returned 1
	[0213.627] CloseHandle (hObject=0xd8) returned 1
	[0213.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf.egmwv")) returned 0x20
	[0213.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf")) returned 0x20
	[0213.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF", dwFileAttributes=0x20) returned 1
	[0213.658] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.662] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0213.720] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0213.720] ReadFile (in: hFile=0xa8, lpBuffer=0xc000364000, nNumberOfBytesToRead=0xbe0, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc0002d7cec*=0xbe0, lpOverlapped=0x0) returned 1
	[0213.725] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070100 | out: pbBuffer=0xc000070100) returned 1
	[0213.725] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214e02 | out: pbBuffer=0xc000214e02) returned 1
	[0213.725] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214e15 | out: pbBuffer=0xc000214e15) returned 1
	[0213.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070140 | out: pbBuffer=0xc000070140) returned 1
	[0213.726] GetFileType (hFile=0xa8) returned 0x1
	[0213.726] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3040) returned 1
	[0213.726] WriteFile (in: hFile=0xa8, lpBuffer=0xc00020a000*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00020a000*, lpNumberOfBytesWritten=0xc000155ccc*=0xbe0, lpOverlapped=0xc000155ce8) returned 1
	[0213.726] GetFileType (hFile=0xa8) returned 0x1
	[0213.726] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xbe0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3040) returned 1
	[0213.727] GetFileType (hFile=0xa8) returned 0x1
	[0213.727] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3040) returned 1
	[0213.727] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003b7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003b7880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0213.727] GetFileType (hFile=0xa8) returned 0x1
	[0213.727] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xbe0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3040) returned 1
	[0213.727] CloseHandle (hObject=0xa8) returned 1
	[0213.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf.egmwv")) returned 0x20
	[0213.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.729] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.737] SetEvent (hEvent=0xe4) returned 1
	[0213.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf")) returned 0x20
	[0213.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF", dwFileAttributes=0x20) returned 1
	[0213.739] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.769] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0213.769] ReadFile (in: hFile=0x170, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0x1acc, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc0002d7cec*=0x1acc, lpOverlapped=0x0) returned 1
	[0213.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0213.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0213.782] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0e02 | out: pbBuffer=0xc0002c0e02) returned 1
	[0213.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0e15 | out: pbBuffer=0xc0002c0e15) returned 1
	[0213.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0e66 | out: pbBuffer=0xc0002c0e66) returned 1
	[0213.783] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0213.783] GetFileType (hFile=0x170) returned 0x1
	[0213.783] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015dca0*=6860) returned 1
	[0213.783] WriteFile (in: hFile=0x170, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0x1acc, lpNumberOfBytesWritten=0xc00015dccc, lpOverlapped=0xc00015dce8 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc00015dccc*=0x1acc, lpOverlapped=0xc00015dce8) returned 1
	[0213.784] GetFileType (hFile=0x170) returned 0x1
	[0213.784] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1acc, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015dca0*=6860) returned 1
	[0213.784] GetFileType (hFile=0x170) returned 0x1
	[0213.784] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015dca0*=6860) returned 1
	[0213.784] WriteFile (in: hFile=0x170, lpBuffer=0xc000163500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00015dccc, lpOverlapped=0xc00015dce8 | out: lpBuffer=0xc000163500*, lpNumberOfBytesWritten=0xc00015dccc*=0x22d, lpOverlapped=0xc00015dce8) returned 1
	[0213.785] GetFileType (hFile=0x170) returned 0x1
	[0213.785] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1acc, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015dca0*=6860) returned 1
	[0213.785] CloseHandle (hObject=0x170) returned 1
	[0213.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf.egmwv")) returned 0x20
	[0213.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.794] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.810] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf")) returned 0x20
	[0213.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF", dwFileAttributes=0x20) returned 1
	[0213.815] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0213.830] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0213.830] ReadFile (in: hFile=0xd8, lpBuffer=0xc000122000, nNumberOfBytesToRead=0x2c8c, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000122000*, lpNumberOfBytesRead=0xc00016bcec*=0x2c8c, lpOverlapped=0x0) returned 1
	[0213.840] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0213.840] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0213.840] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000000a02 | out: pbBuffer=0xc000000a02) returned 1
	[0213.840] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000000a54 | out: pbBuffer=0xc000000a54) returned 1
	[0213.840] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0213.841] GetFileType (hFile=0xd8) returned 0x1
	[0213.841] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ffca0*=11404) returned 1
	[0213.841] WriteFile (in: hFile=0xd8, lpBuffer=0xc000344000*, nNumberOfBytesToWrite=0x2c8c, lpNumberOfBytesWritten=0xc0001ffccc, lpOverlapped=0xc0001ffce8 | out: lpBuffer=0xc000344000*, lpNumberOfBytesWritten=0xc0001ffccc*=0x2c8c, lpOverlapped=0xc0001ffce8) returned 1
	[0213.842] GetFileType (hFile=0xd8) returned 0x1
	[0213.842] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x2c8c, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ffca0*=11404) returned 1
	[0213.842] GetFileType (hFile=0xd8) returned 0x1
	[0213.842] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ffca0*=11404) returned 1
	[0213.842] WriteFile (in: hFile=0xd8, lpBuffer=0xc0001c2e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001ffccc, lpOverlapped=0xc0001ffce8 | out: lpBuffer=0xc0001c2e00*, lpNumberOfBytesWritten=0xc0001ffccc*=0x22a, lpOverlapped=0xc0001ffce8) returned 1
	[0213.842] GetFileType (hFile=0xd8) returned 0x1
	[0213.842] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x2c8c, lpNewFilePointer=0xc0001ffca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ffca0*=11404) returned 1
	[0213.843] CloseHandle (hObject=0xd8) returned 1
	[0213.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf.egmwv")) returned 0x20
	[0213.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf")) returned 0x20
	[0213.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF", dwFileAttributes=0x20) returned 1
	[0213.844] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0213.897] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00014bcc4 | out: lpMode=0xc00014bcc4) returned 0
	[0213.897] ReadFile (in: hFile=0xd8, lpBuffer=0xc0000ea000, nNumberOfBytesToRead=0x1f0c, lpNumberOfBytesRead=0xc00014bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ea000*, lpNumberOfBytesRead=0xc00014bcec*=0x1f0c, lpOverlapped=0x0) returned 1
	[0213.929] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0213.929] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000cb102 | out: pbBuffer=0xc0000cb102) returned 1
	[0213.929] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000cb152 | out: pbBuffer=0xc0000cb152) returned 1
	[0213.929] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000cb1c1 | out: pbBuffer=0xc0000cb1c1) returned 1
	[0213.930] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b64b0 | out: pbBuffer=0xc0002b64b0) returned 1
	[0213.930] GetFileType (hFile=0xd8) returned 0x1
	[0213.930] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000159ca0*=7948) returned 1
	[0213.930] WriteFile (in: hFile=0xd8, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x1f0c, lpNumberOfBytesWritten=0xc000159ccc, lpOverlapped=0xc000159ce8 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc000159ccc*=0x1f0c, lpOverlapped=0xc000159ce8) returned 1
	[0213.931] GetFileType (hFile=0xd8) returned 0x1
	[0213.931] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x1f0c, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000159ca0*=7948) returned 1
	[0213.931] GetFileType (hFile=0xd8) returned 0x1
	[0213.931] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000159ca0*=7948) returned 1
	[0213.931] WriteFile (in: hFile=0xd8, lpBuffer=0xc0000fc700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000159ccc, lpOverlapped=0xc000159ce8 | out: lpBuffer=0xc0000fc700*, lpNumberOfBytesWritten=0xc000159ccc*=0x22d, lpOverlapped=0xc000159ce8) returned 1
	[0213.932] GetFileType (hFile=0xd8) returned 0x1
	[0213.932] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x1f0c, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000159ca0*=7948) returned 1
	[0213.932] CloseHandle (hObject=0xd8) returned 1
	[0213.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf.egmwv")) returned 0x20
	[0213.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.943] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.951] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.981] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0213.983] SetEvent (hEvent=0x124) returned 1
	[0213.984] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.440] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg")) returned 0x20
	[0214.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG", dwFileAttributes=0x20) returned 1
	[0214.453] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0214.589] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0214.589] ReadFile (in: hFile=0xe8, lpBuffer=0xc00038e000, nNumberOfBytesToRead=0xaa9a, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00038e000*, lpNumberOfBytesRead=0xc0002d5cec*=0xaa9a, lpOverlapped=0x0) returned 1
	[0214.638] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.640] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0214.640] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0214.641] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004d3202 | out: pbBuffer=0xc0004d3202) returned 1
	[0214.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004d325a | out: pbBuffer=0xc0004d325a) returned 1
	[0214.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004d3281 | out: pbBuffer=0xc0004d3281) returned 1
	[0214.641] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0214.641] GetFileType (hFile=0xe8) returned 0x1
	[0214.641] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000161ca0*=43674) returned 1
	[0214.642] WriteFile (in: hFile=0xe8, lpBuffer=0xc00030e000*, nNumberOfBytesToWrite=0xaa9a, lpNumberOfBytesWritten=0xc000161ccc, lpOverlapped=0xc000161ce8 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesWritten=0xc000161ccc*=0xaa9a, lpOverlapped=0xc000161ce8) returned 1
	[0214.642] GetFileType (hFile=0xe8) returned 0x1
	[0214.643] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xaa9a, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000161ca0*=43674) returned 1
	[0214.643] GetFileType (hFile=0xe8) returned 0x1
	[0214.643] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000161ca0*=43674) returned 1
	[0214.643] WriteFile (in: hFile=0xe8, lpBuffer=0xc000165500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000161ccc, lpOverlapped=0xc000161ce8 | out: lpBuffer=0xc000165500*, lpNumberOfBytesWritten=0xc000161ccc*=0x233, lpOverlapped=0xc000161ce8) returned 1
	[0214.643] GetFileType (hFile=0xe8) returned 0x1
	[0214.643] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xaa9a, lpNewFilePointer=0xc000161ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000161ca0*=43674) returned 1
	[0214.644] CloseHandle (hObject=0xe8) returned 1
	[0214.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.egmwv")) returned 0x20
	[0214.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.661] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.673] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.676] SetEvent (hEvent=0x104) returned 1
	[0214.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf")) returned 0x20
	[0214.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF", dwFileAttributes=0x20) returned 1
	[0214.678] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.743] SetEvent (hEvent=0x70) returned 1
	[0214.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0214.745] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0214.745] ReadFile (in: hFile=0xe8, lpBuffer=0xc000208000, nNumberOfBytesToRead=0x3c68, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000208000*, lpNumberOfBytesRead=0xc000429cec*=0x3c68, lpOverlapped=0x0) returned 1
	[0214.774] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6270 | out: pbBuffer=0xc0002b6270) returned 1
	[0214.774] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214902 | out: pbBuffer=0xc000214902) returned 1
	[0214.774] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0214.775] GetFileType (hFile=0xe8) returned 0x1
	[0214.775] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=15464) returned 1
	[0214.775] WriteFile (in: hFile=0xe8, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x3c68, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc000309ccc*=0x3c68, lpOverlapped=0xc000309ce8) returned 1
	[0214.776] GetFileType (hFile=0xe8) returned 0x1
	[0214.776] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3c68, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=15464) returned 1
	[0214.776] GetFileType (hFile=0xe8) returned 0x1
	[0214.776] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=15464) returned 1
	[0214.776] WriteFile (in: hFile=0xe8, lpBuffer=0xc000071180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000071180*, lpNumberOfBytesWritten=0xc000309ccc*=0x22d, lpOverlapped=0xc000309ce8) returned 1
	[0214.777] GetFileType (hFile=0xe8) returned 0x1
	[0214.777] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3c68, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=15464) returned 1
	[0214.777] CloseHandle (hObject=0xe8) returned 1
	[0214.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf.egmwv")) returned 0x20
	[0214.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.785] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.815] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.910] SetEvent (hEvent=0xe4) returned 1
	[0214.910] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.912] SetEvent (hEvent=0xe4) returned 1
	[0214.912] SwitchToThread () returned 1
	[0214.913] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.920] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.944] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.964] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.975] SetEvent (hEvent=0xc4) returned 1
	[0214.975] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.981] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0214.993] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.015] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.033] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.041] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.063] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.094] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.114] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.131] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.137] SetEvent (hEvent=0xc4) returned 1
	[0215.137] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf")) returned 0x20
	[0215.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF", dwFileAttributes=0x20) returned 1
	[0215.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.194] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0215.194] ReadFile (in: hFile=0xe8, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x1748, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc000169cec*=0x1748, lpOverlapped=0x0) returned 1
	[0215.200] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0215.200] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0215.200] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f0c | out: pbBuffer=0xc000214f0c) returned 1
	[0215.200] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f41 | out: pbBuffer=0xc000214f41) returned 1
	[0215.200] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214fdb | out: pbBuffer=0xc000214fdb) returned 1
	[0215.200] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0215.200] GetFileType (hFile=0xe8) returned 0x1
	[0215.200] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=5960) returned 1
	[0215.201] WriteFile (in: hFile=0xe8, lpBuffer=0xc000478000*, nNumberOfBytesToWrite=0x1748, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc000478000*, lpNumberOfBytesWritten=0xc000343ccc*=0x1748, lpOverlapped=0xc000343ce8) returned 1
	[0215.201] GetFileType (hFile=0xe8) returned 0x1
	[0215.201] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1748, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=5960) returned 1
	[0215.201] GetFileType (hFile=0xe8) returned 0x1
	[0215.201] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=5960) returned 1
	[0215.202] WriteFile (in: hFile=0xe8, lpBuffer=0xc00033f880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc00033f880*, lpNumberOfBytesWritten=0xc000343ccc*=0x22a, lpOverlapped=0xc000343ce8) returned 1
	[0215.202] GetFileType (hFile=0xe8) returned 0x1
	[0215.202] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1748, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=5960) returned 1
	[0215.202] CloseHandle (hObject=0xe8) returned 1
	[0215.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf.egmwv")) returned 0x20
	[0215.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.204] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.209] SetEvent (hEvent=0xc4) returned 1
	[0215.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf")) returned 0x20
	[0215.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF", dwFileAttributes=0x20) returned 1
	[0215.211] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.256] SetEvent (hEvent=0x70) returned 1
	[0215.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.258] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0215.258] ReadFile (in: hFile=0xa8, lpBuffer=0xc00038e000, nNumberOfBytesToRead=0x785c, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00038e000*, lpNumberOfBytesRead=0xc000169cec*=0x785c, lpOverlapped=0x0) returned 1
	[0215.264] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0215.264] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039802 | out: pbBuffer=0xc000039802) returned 1
	[0215.264] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000398bc | out: pbBuffer=0xc0000398bc) returned 1
	[0215.264] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0215.264] GetFileType (hFile=0xa8) returned 0x1
	[0215.264] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=30812) returned 1
	[0215.265] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003ae000*, nNumberOfBytesToWrite=0x785c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesWritten=0xc000155ccc*=0x785c, lpOverlapped=0xc000155ce8) returned 1
	[0215.265] GetFileType (hFile=0xa8) returned 0x1
	[0215.265] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x785c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=30812) returned 1
	[0215.266] GetFileType (hFile=0xa8) returned 0x1
	[0215.266] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=30812) returned 1
	[0215.266] WriteFile (in: hFile=0xa8, lpBuffer=0xc00006b500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00006b500*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0215.266] GetFileType (hFile=0xa8) returned 0x1
	[0215.266] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x785c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=30812) returned 1
	[0215.266] CloseHandle (hObject=0xa8) returned 1
	[0215.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf.egmwv")) returned 0x20
	[0215.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.270] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf")) returned 0x20
	[0215.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF", dwFileAttributes=0x20) returned 1
	[0215.276] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.311] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0215.312] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002ec000, nNumberOfBytesToRead=0x544, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesRead=0xc00038dcec*=0x544, lpOverlapped=0x0) returned 1
	[0215.318] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8430 | out: pbBuffer=0xc0001b8430) returned 1
	[0215.318] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000373d02 | out: pbBuffer=0xc000373d02) returned 1
	[0215.318] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000373d4d | out: pbBuffer=0xc000373d4d) returned 1
	[0215.318] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8470 | out: pbBuffer=0xc0001b8470) returned 1
	[0215.318] GetFileType (hFile=0xcc) returned 0x1
	[0215.318] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=1348) returned 1
	[0215.318] WriteFile (in: hFile=0xcc, lpBuffer=0xc000302000*, nNumberOfBytesToWrite=0x544, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc000302000*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x544, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.319] GetFileType (hFile=0xcc) returned 0x1
	[0215.319] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x544, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=1348) returned 1
	[0215.319] GetFileType (hFile=0xcc) returned 0x1
	[0215.319] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=1348) returned 1
	[0215.319] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002fe700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc0002fe700*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x224, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.319] GetFileType (hFile=0xcc) returned 0x1
	[0215.320] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x544, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=1348) returned 1
	[0215.320] CloseHandle (hObject=0xcc) returned 1
	[0215.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf.egmwv")) returned 0x20
	[0215.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.412] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.430] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.444] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.457] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.503] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.525] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.578] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.591] SetEvent (hEvent=0xe4) returned 1
	[0215.591] SetEvent (hEvent=0x90) returned 1
	[0215.592] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0215.594] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.595] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0215.596] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.597] SetEvent (hEvent=0xc4) returned 1
	[0215.597] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0215.599] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.599] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.902] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.905] SetEvent (hEvent=0xe4) returned 1
	[0215.905] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.907] SetEvent (hEvent=0xe4) returned 1
	[0215.907] SwitchToThread () returned 1
	[0215.909] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.913] SetEvent (hEvent=0x144) returned 1
	[0215.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf")) returned 0x20
	[0215.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF", dwFileAttributes=0x20) returned 1
	[0215.915] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.954] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0215.954] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003e6000, nNumberOfBytesToRead=0x7850, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesRead=0xc00038dcec*=0x7850, lpOverlapped=0x0) returned 1
	[0215.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0215.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0215.961] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0215.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0215.961] GetFileType (hFile=0xa8) returned 0x1
	[0215.961] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=30800) returned 1
	[0215.962] WriteFile (in: hFile=0xa8, lpBuffer=0xc000364000*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000364000*, lpNumberOfBytesWritten=0xc000155ccc*=0x7850, lpOverlapped=0xc000155ce8) returned 1
	[0215.962] GetFileType (hFile=0xa8) returned 0x1
	[0215.962] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7850, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=30800) returned 1
	[0215.963] GetFileType (hFile=0xa8) returned 0x1
	[0215.963] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=30800) returned 1
	[0215.963] WriteFile (in: hFile=0xa8, lpBuffer=0xc00028ce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00028ce00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0215.963] GetFileType (hFile=0xa8) returned 0x1
	[0215.964] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7850, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=30800) returned 1
	[0215.964] CloseHandle (hObject=0xa8) returned 1
	[0215.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf.egmwv")) returned 0x20
	[0215.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.968] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0215.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf")) returned 0x20
	[0215.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF", dwFileAttributes=0x20) returned 1
	[0215.974] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.008] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0216.008] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003fa000, nNumberOfBytesToRead=0x4238, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003fa000*, lpNumberOfBytesRead=0xc00038dcec*=0x4238, lpOverlapped=0x0) returned 1
	[0216.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0216.014] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001702 | out: pbBuffer=0xc000001702) returned 1
	[0216.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000017ac | out: pbBuffer=0xc0000017ac) returned 1
	[0216.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0216.014] GetFileType (hFile=0xe8) returned 0x1
	[0216.015] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000f9ca0*=16952) returned 1
	[0216.015] WriteFile (in: hFile=0xe8, lpBuffer=0xc00043e000*, nNumberOfBytesToWrite=0x4238, lpNumberOfBytesWritten=0xc0000f9ccc, lpOverlapped=0xc0000f9ce8 | out: lpBuffer=0xc00043e000*, lpNumberOfBytesWritten=0xc0000f9ccc*=0x4238, lpOverlapped=0xc0000f9ce8) returned 1
	[0216.015] GetFileType (hFile=0xe8) returned 0x1
	[0216.015] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4238, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000f9ca0*=16952) returned 1
	[0216.016] GetFileType (hFile=0xe8) returned 0x1
	[0216.016] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000f9ca0*=16952) returned 1
	[0216.016] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000ff500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000f9ccc, lpOverlapped=0xc0000f9ce8 | out: lpBuffer=0xc0000ff500*, lpNumberOfBytesWritten=0xc0000f9ccc*=0x227, lpOverlapped=0xc0000f9ce8) returned 1
	[0216.016] GetFileType (hFile=0xe8) returned 0x1
	[0216.016] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4238, lpNewFilePointer=0xc0000f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000f9ca0*=16952) returned 1
	[0216.016] CloseHandle (hObject=0xe8) returned 1
	[0216.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf.egmwv")) returned 0x20
	[0216.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.019] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf")) returned 0x20
	[0216.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF", dwFileAttributes=0x20) returned 1
	[0216.038] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.067] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0216.067] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002f0000, nNumberOfBytesToRead=0x31d0, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesRead=0xc0002d3cec*=0x31d0, lpOverlapped=0x0) returned 1
	[0216.072] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0216.072] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001d8c02 | out: pbBuffer=0xc0001d8c02) returned 1
	[0216.072] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d8c9d | out: pbBuffer=0xc0001d8c9d) returned 1
	[0216.073] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0216.073] GetFileType (hFile=0xcc) returned 0x1
	[0216.073] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12752) returned 1
	[0216.073] WriteFile (in: hFile=0xcc, lpBuffer=0xc000326000*, nNumberOfBytesToWrite=0x31d0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000326000*, lpNumberOfBytesWritten=0xc000155ccc*=0x31d0, lpOverlapped=0xc000155ce8) returned 1
	[0216.073] GetFileType (hFile=0xcc) returned 0x1
	[0216.073] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x31d0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12752) returned 1
	[0216.074] GetFileType (hFile=0xcc) returned 0x1
	[0216.074] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12752) returned 1
	[0216.074] WriteFile (in: hFile=0xcc, lpBuffer=0xc000308700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000308700*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0216.074] GetFileType (hFile=0xcc) returned 0x1
	[0216.074] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x31d0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12752) returned 1
	[0216.074] CloseHandle (hObject=0xcc) returned 1
	[0216.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf.egmwv")) returned 0x20
	[0216.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.076] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.085] SetEvent (hEvent=0x104) returned 1
	[0216.085] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.089] SetEvent (hEvent=0x144) returned 1
	[0216.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf")) returned 0x20
	[0216.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF", dwFileAttributes=0x20) returned 1
	[0216.091] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.093] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.132] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0216.132] ReadFile (in: hFile=0xa8, lpBuffer=0xc000210000, nNumberOfBytesToRead=0x560, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc000210000*, lpNumberOfBytesRead=0xc000167cec*=0x560, lpOverlapped=0x0) returned 1
	[0216.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0216.137] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00014d302 | out: pbBuffer=0xc00014d302) returned 1
	[0216.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014d394 | out: pbBuffer=0xc00014d394) returned 1
	[0216.138] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0216.138] GetFileType (hFile=0xa8) returned 0x1
	[0216.138] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=1376) returned 1
	[0216.138] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000b2000*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0000b2000*, lpNumberOfBytesWritten=0xc0004afccc*=0x560, lpOverlapped=0xc0004afce8) returned 1
	[0216.138] GetFileType (hFile=0xa8) returned 0x1
	[0216.138] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x560, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=1376) returned 1
	[0216.139] GetFileType (hFile=0xa8) returned 0x1
	[0216.139] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=1376) returned 1
	[0216.139] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004a5500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc0004a5500*, lpNumberOfBytesWritten=0xc0004afccc*=0x224, lpOverlapped=0xc0004afce8) returned 1
	[0216.139] GetFileType (hFile=0xa8) returned 0x1
	[0216.139] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x560, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=1376) returned 1
	[0216.139] CloseHandle (hObject=0xa8) returned 1
	[0216.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf.egmwv")) returned 0x20
	[0216.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.141] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf")) returned 0x20
	[0216.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF", dwFileAttributes=0x20) returned 1
	[0216.149] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.186] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000195cc4 | out: lpMode=0xc000195cc4) returned 0
	[0216.187] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002a2800, nNumberOfBytesToRead=0x45f8, lpNumberOfBytesRead=0xc000195cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a2800*, lpNumberOfBytesRead=0xc000195cec*=0x45f8, lpOverlapped=0x0) returned 1
	[0216.195] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0216.195] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000454002 | out: pbBuffer=0xc000454002) returned 1
	[0216.195] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000454096 | out: pbBuffer=0xc000454096) returned 1
	[0216.195] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004540a8 | out: pbBuffer=0xc0004540a8) returned 1
	[0216.195] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0216.196] GetFileType (hFile=0xcc) returned 0x1
	[0216.196] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17912) returned 1
	[0216.196] WriteFile (in: hFile=0xcc, lpBuffer=0xc000358000*, nNumberOfBytesToWrite=0x45f8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000358000*, lpNumberOfBytesWritten=0xc000155ccc*=0x45f8, lpOverlapped=0xc000155ce8) returned 1
	[0216.196] GetFileType (hFile=0xcc) returned 0x1
	[0216.197] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x45f8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17912) returned 1
	[0216.197] GetFileType (hFile=0xcc) returned 0x1
	[0216.197] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17912) returned 1
	[0216.197] WriteFile (in: hFile=0xcc, lpBuffer=0xc00036ce00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00036ce00*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0216.197] GetFileType (hFile=0xcc) returned 0x1
	[0216.197] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x45f8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17912) returned 1
	[0216.197] CloseHandle (hObject=0xcc) returned 1
	[0216.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf.egmwv")) returned 0x20
	[0216.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.205] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf")) returned 0x20
	[0216.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF", dwFileAttributes=0x20) returned 1
	[0216.212] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.253] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0216.253] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000bc800, nNumberOfBytesToRead=0x462e, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000bc800*, lpNumberOfBytesRead=0xc00038dcec*=0x462e, lpOverlapped=0x0) returned 1
	[0216.261] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0216.261] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1002 | out: pbBuffer=0xc0002c1002) returned 1
	[0216.261] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c10b0 | out: pbBuffer=0xc0002c10b0) returned 1
	[0216.261] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0216.261] GetFileType (hFile=0xe8) returned 0x1
	[0216.262] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=17966) returned 1
	[0216.262] WriteFile (in: hFile=0xe8, lpBuffer=0xc000270000*, nNumberOfBytesToWrite=0x462e, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc000270000*, lpNumberOfBytesWritten=0xc0004afccc*=0x462e, lpOverlapped=0xc0004afce8) returned 1
	[0216.263] GetFileType (hFile=0xe8) returned 0x1
	[0216.263] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x462e, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=17966) returned 1
	[0216.263] GetFileType (hFile=0xe8) returned 0x1
	[0216.263] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=17966) returned 1
	[0216.264] WriteFile (in: hFile=0xe8, lpBuffer=0xc000258700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc000258700*, lpNumberOfBytesWritten=0xc0004afccc*=0x22d, lpOverlapped=0xc0004afce8) returned 1
	[0216.264] GetFileType (hFile=0xe8) returned 0x1
	[0216.264] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x462e, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=17966) returned 1
	[0216.264] CloseHandle (hObject=0xe8) returned 1
	[0216.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf.egmwv")) returned 0x20
	[0216.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.269] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.283] SetEvent (hEvent=0x124) returned 1
	[0216.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf")) returned 0x20
	[0216.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF", dwFileAttributes=0x20) returned 1
	[0216.285] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.318] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000195cc4 | out: lpMode=0xc000195cc4) returned 0
	[0216.318] SetEvent (hEvent=0x124) returned 1
	[0216.319] ReadFile (in: hFile=0xa8, lpBuffer=0xc000300000, nNumberOfBytesToRead=0x51aa, lpNumberOfBytesRead=0xc000195cec, lpOverlapped=0x0 | out: lpBuffer=0xc000300000*, lpNumberOfBytesRead=0xc000195cec*=0x51aa, lpOverlapped=0x0) returned 1
	[0216.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8290 | out: pbBuffer=0xc0001b8290) returned 1
	[0216.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b82aa | out: pbBuffer=0xc0001b82aa) returned 1
	[0216.326] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000320002 | out: pbBuffer=0xc000320002) returned 1
	[0216.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003200bc | out: pbBuffer=0xc0003200bc) returned 1
	[0216.326] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b82d0 | out: pbBuffer=0xc0001b82d0) returned 1
	[0216.326] GetFileType (hFile=0xa8) returned 0x1
	[0216.326] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=20906) returned 1
	[0216.327] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004e8000*, nNumberOfBytesToWrite=0x51aa, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0004e8000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x51aa, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.327] GetFileType (hFile=0xa8) returned 0x1
	[0216.327] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x51aa, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=20906) returned 1
	[0216.327] GetFileType (hFile=0xa8) returned 0x1
	[0216.327] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=20906) returned 1
	[0216.328] WriteFile (in: hFile=0xa8, lpBuffer=0xc000326380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000326380*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22d, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.328] GetFileType (hFile=0xa8) returned 0x1
	[0216.328] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x51aa, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=20906) returned 1
	[0216.328] CloseHandle (hObject=0xa8) returned 1
	[0216.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf.egmwv")) returned 0x20
	[0216.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.333] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.340] SetEvent (hEvent=0x90) returned 1
	[0216.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf")) returned 0x20
	[0216.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x20) returned 1
	[0216.347] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.375] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0216.376] ReadFile (in: hFile=0xe8, lpBuffer=0xc00028c000, nNumberOfBytesToRead=0x1d18, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc00028c000*, lpNumberOfBytesRead=0xc000167cec*=0x1d18, lpOverlapped=0x0) returned 1
	[0216.387] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0216.387] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0216.387] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c095e | out: pbBuffer=0xc0002c095e) returned 1
	[0216.388] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0960 | out: pbBuffer=0xc0002c0960) returned 1
	[0216.388] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0216.388] GetFileType (hFile=0xe8) returned 0x1
	[0216.389] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7448) returned 1
	[0216.389] WriteFile (in: hFile=0xe8, lpBuffer=0xc000192000*, nNumberOfBytesToWrite=0x1d18, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000192000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1d18, lpOverlapped=0xc000155ce8) returned 1
	[0216.390] GetFileType (hFile=0xe8) returned 0x1
	[0216.390] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1d18, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7448) returned 1
	[0216.390] GetFileType (hFile=0xe8) returned 0x1
	[0216.390] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7448) returned 1
	[0216.391] WriteFile (in: hFile=0xe8, lpBuffer=0xc00038f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00038f500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0216.391] GetFileType (hFile=0xe8) returned 0x1
	[0216.391] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1d18, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7448) returned 1
	[0216.392] CloseHandle (hObject=0xe8) returned 1
	[0216.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf.egmwv")) returned 0x20
	[0216.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.395] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.400] SetEvent (hEvent=0x90) returned 1
	[0216.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf")) returned 0x20
	[0216.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x20) returned 1
	[0216.402] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.431] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0216.431] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x16e8, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc000167cec*=0x16e8, lpOverlapped=0x0) returned 1
	[0216.437] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0216.437] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020643a | out: pbBuffer=0xc00020643a) returned 1
	[0216.437] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215602 | out: pbBuffer=0xc000215602) returned 1
	[0216.438] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0216.438] GetFileType (hFile=0xcc) returned 0x1
	[0216.438] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=5864) returned 1
	[0216.438] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003d2000*, nNumberOfBytesToWrite=0x16e8, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0003d2000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x16e8, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.438] GetFileType (hFile=0xcc) returned 0x1
	[0216.439] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x16e8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=5864) returned 1
	[0216.439] GetFileType (hFile=0xcc) returned 0x1
	[0216.439] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=5864) returned 1
	[0216.439] WriteFile (in: hFile=0xcc, lpBuffer=0xc00036c000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00036c000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22d, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.439] GetFileType (hFile=0xcc) returned 0x1
	[0216.440] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x16e8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=5864) returned 1
	[0216.440] CloseHandle (hObject=0xcc) returned 1
	[0216.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf.egmwv")) returned 0x20
	[0216.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.445] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg")) returned 0x20
	[0216.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x20) returned 1
	[0216.451] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.507] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0216.507] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002e6000, nNumberOfBytesToRead=0x6196, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e6000*, lpNumberOfBytesRead=0xc000387cec*=0x6196, lpOverlapped=0x0) returned 1
	[0216.513] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0216.513] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002fe402 | out: pbBuffer=0xc0002fe402) returned 1
	[0216.514] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002fe462 | out: pbBuffer=0xc0002fe462) returned 1
	[0216.514] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0216.514] GetFileType (hFile=0xe8) returned 0x1
	[0216.514] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=24982) returned 1
	[0216.514] WriteFile (in: hFile=0xe8, lpBuffer=0xc000412000*, nNumberOfBytesToWrite=0x6196, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000412000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x6196, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.518] GetFileType (hFile=0xe8) returned 0x1
	[0216.518] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x6196, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=24982) returned 1
	[0216.519] GetFileType (hFile=0xe8) returned 0x1
	[0216.519] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=24982) returned 1
	[0216.519] WriteFile (in: hFile=0xe8, lpBuffer=0xc00036d880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00036d880*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22d, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.519] GetFileType (hFile=0xe8) returned 0x1
	[0216.519] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x6196, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=24982) returned 1
	[0216.519] CloseHandle (hObject=0xe8) returned 1
	[0216.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.egmwv")) returned 0x20
	[0216.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.524] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg")) returned 0x20
	[0216.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x20) returned 1
	[0216.544] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.594] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0216.595] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0xb12e, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc00038dcec*=0xb12e, lpOverlapped=0x0) returned 1
	[0216.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a90 | out: pbBuffer=0xc000206a90) returned 1
	[0216.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000206aaa | out: pbBuffer=0xc000206aaa) returned 1
	[0216.600] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000202402 | out: pbBuffer=0xc000202402) returned 1
	[0216.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020249a | out: pbBuffer=0xc00020249a) returned 1
	[0216.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206ad0 | out: pbBuffer=0xc000206ad0) returned 1
	[0216.601] GetFileType (hFile=0xa8) returned 0x1
	[0216.601] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=45358) returned 1
	[0216.601] WriteFile (in: hFile=0xa8, lpBuffer=0xc00022a000*, nNumberOfBytesToWrite=0xb12e, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00022a000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0xb12e, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.602] GetFileType (hFile=0xa8) returned 0x1
	[0216.602] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb12e, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=45358) returned 1
	[0216.602] GetFileType (hFile=0xa8) returned 0x1
	[0216.602] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=45358) returned 1
	[0216.602] WriteFile (in: hFile=0xa8, lpBuffer=0xc000116380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000116380*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x233, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.603] GetFileType (hFile=0xa8) returned 0x1
	[0216.603] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb12e, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=45358) returned 1
	[0216.603] CloseHandle (hObject=0xa8) returned 1
	[0216.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.egmwv")) returned 0x20
	[0216.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.605] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.608] SetEvent (hEvent=0x90) returned 1
	[0216.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg")) returned 0x20
	[0216.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x20) returned 1
	[0216.610] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.646] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0216.646] ReadFile (in: hFile=0xcc, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x7214, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc000387cec*=0x7214, lpOverlapped=0x0) returned 1
	[0216.652] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0216.652] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0216.652] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003949a | out: pbBuffer=0xc00003949a) returned 1
	[0216.652] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0216.652] GetFileType (hFile=0xcc) returned 0x1
	[0216.652] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=29204) returned 1
	[0216.653] WriteFile (in: hFile=0xcc, lpBuffer=0xc000164000*, nNumberOfBytesToWrite=0x7214, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000164000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x7214, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.653] GetFileType (hFile=0xcc) returned 0x1
	[0216.653] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7214, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=29204) returned 1
	[0216.654] GetFileType (hFile=0xcc) returned 0x1
	[0216.654] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=29204) returned 1
	[0216.654] WriteFile (in: hFile=0xcc, lpBuffer=0xc000189500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000189500*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22a, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.654] GetFileType (hFile=0xcc) returned 0x1
	[0216.654] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7214, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=29204) returned 1
	[0216.654] CloseHandle (hObject=0xcc) returned 1
	[0216.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.egmwv")) returned 0x20
	[0216.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.658] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg")) returned 0x20
	[0216.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x20) returned 1
	[0216.664] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.699] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038bcc4 | out: lpMode=0xc00038bcc4) returned 0
	[0216.699] ReadFile (in: hFile=0xe8, lpBuffer=0xc000410000, nNumberOfBytesToRead=0x5b2a, lpNumberOfBytesRead=0xc00038bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000410000*, lpNumberOfBytesRead=0xc00038bcec*=0x5b2a, lpOverlapped=0x0) returned 1
	[0216.704] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0216.704] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a4202 | out: pbBuffer=0xc0002a4202) returned 1
	[0216.704] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a420a | out: pbBuffer=0xc0002a420a) returned 1
	[0216.704] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0216.705] GetFileType (hFile=0xe8) returned 0x1
	[0216.705] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=23338) returned 1
	[0216.705] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003ac000*, nNumberOfBytesToWrite=0x5b2a, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0003ac000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x5b2a, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.706] GetFileType (hFile=0xe8) returned 0x1
	[0216.706] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5b2a, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=23338) returned 1
	[0216.706] GetFileType (hFile=0xe8) returned 0x1
	[0216.706] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=23338) returned 1
	[0216.706] WriteFile (in: hFile=0xe8, lpBuffer=0xc000350e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000350e00*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x230, lpOverlapped=0xc0004b3ce8) returned 1
	[0216.706] GetFileType (hFile=0xe8) returned 0x1
	[0216.707] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5b2a, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=23338) returned 1
	[0216.707] CloseHandle (hObject=0xe8) returned 1
	[0216.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.egmwv")) returned 0x20
	[0216.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.709] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg")) returned 0x20
	[0216.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x20) returned 1
	[0216.728] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.758] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038bcc4 | out: lpMode=0xc00038bcc4) returned 0
	[0216.758] ReadFile (in: hFile=0xa8, lpBuffer=0xc000526000, nNumberOfBytesToRead=0x7d6e, lpNumberOfBytesRead=0xc00038bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000526000*, lpNumberOfBytesRead=0xc00038bcec*=0x7d6e, lpOverlapped=0x0) returned 1
	[0216.763] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e70 | out: pbBuffer=0xc000052e70) returned 1
	[0216.763] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00027ea02 | out: pbBuffer=0xc00027ea02) returned 1
	[0216.763] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00027ea5c | out: pbBuffer=0xc00027ea5c) returned 1
	[0216.763] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00027ea7b | out: pbBuffer=0xc00027ea7b) returned 1
	[0216.764] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00027eac8 | out: pbBuffer=0xc00027eac8) returned 1
	[0216.764] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0216.764] SetEvent (hEvent=0x104) returned 1
	[0216.764] GetFileType (hFile=0xa8) returned 0x1
	[0216.764] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=32110) returned 1
	[0216.765] WriteFile (in: hFile=0xa8, lpBuffer=0xc00052e000*, nNumberOfBytesToWrite=0x7d6e, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc00052e000*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x7d6e, lpOverlapped=0xc0002b5ce8) returned 1
	[0216.765] GetFileType (hFile=0xa8) returned 0x1
	[0216.765] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7d6e, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=32110) returned 1
	[0216.766] GetFileType (hFile=0xa8) returned 0x1
	[0216.766] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=32110) returned 1
	[0216.766] WriteFile (in: hFile=0xa8, lpBuffer=0xc00042e700*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc00042e700*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x239, lpOverlapped=0xc0002b5ce8) returned 1
	[0216.766] GetFileType (hFile=0xa8) returned 0x1
	[0216.766] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7d6e, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=32110) returned 1
	[0216.766] CloseHandle (hObject=0xa8) returned 1
	[0216.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.egmwv")) returned 0x20
	[0216.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.771] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.772] SetEvent (hEvent=0x104) returned 1
	[0216.773] SetEvent (hEvent=0x90) returned 1
	[0216.773] SwitchToThread () returned 1
	[0216.774] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.784] SetEvent (hEvent=0x90) returned 1
	[0216.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf")) returned 0x20
	[0216.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x20) returned 1
	[0216.785] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.814] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.816] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0216.816] ReadFile (in: hFile=0xa8, lpBuffer=0xc0004a0000, nNumberOfBytesToRead=0x3b2e, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004a0000*, lpNumberOfBytesRead=0xc0002d7cec*=0x3b2e, lpOverlapped=0x0) returned 1
	[0216.823] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0216.823] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0216.823] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f8f | out: pbBuffer=0xc000214f8f) returned 1
	[0216.823] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0216.823] GetFileType (hFile=0xa8) returned 0x1
	[0216.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000385ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000385ca0*=15150) returned 1
	[0216.824] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001be000*, nNumberOfBytesToWrite=0x3b2e, lpNumberOfBytesWritten=0xc000385ccc, lpOverlapped=0xc000385ce8 | out: lpBuffer=0xc0001be000*, lpNumberOfBytesWritten=0xc000385ccc*=0x3b2e, lpOverlapped=0xc000385ce8) returned 1
	[0216.824] GetFileType (hFile=0xa8) returned 0x1
	[0216.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3b2e, lpNewFilePointer=0xc000385ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000385ca0*=15150) returned 1
	[0216.824] GetFileType (hFile=0xa8) returned 0x1
	[0216.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000385ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000385ca0*=15150) returned 1
	[0216.825] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003dd500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000385ccc, lpOverlapped=0xc000385ce8 | out: lpBuffer=0xc0003dd500*, lpNumberOfBytesWritten=0xc000385ccc*=0x233, lpOverlapped=0xc000385ce8) returned 1
	[0216.825] GetFileType (hFile=0xa8) returned 0x1
	[0216.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3b2e, lpNewFilePointer=0xc000385ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000385ca0*=15150) returned 1
	[0216.825] CloseHandle (hObject=0xa8) returned 1
	[0216.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf.egmwv")) returned 0x20
	[0216.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.827] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.831] SetEvent (hEvent=0x90) returned 1
	[0216.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf")) returned 0x20
	[0216.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x20) returned 1
	[0216.832] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.862] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0216.862] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x745c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc0002d7cec*=0x745c, lpOverlapped=0x0) returned 1
	[0216.869] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053010 | out: pbBuffer=0xc000053010) returned 1
	[0216.869] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000469502 | out: pbBuffer=0xc000469502) returned 1
	[0216.869] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000469512 | out: pbBuffer=0xc000469512) returned 1
	[0216.869] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053050 | out: pbBuffer=0xc000053050) returned 1
	[0216.869] GetFileType (hFile=0xcc) returned 0x1
	[0216.869] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=29788) returned 1
	[0216.869] WriteFile (in: hFile=0xcc, lpBuffer=0xc0004ac000*, nNumberOfBytesToWrite=0x745c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesWritten=0xc000155ccc*=0x745c, lpOverlapped=0xc000155ce8) returned 1
	[0216.870] GetFileType (hFile=0xcc) returned 0x1
	[0216.870] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x745c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=29788) returned 1
	[0216.870] GetFileType (hFile=0xcc) returned 0x1
	[0216.871] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=29788) returned 1
	[0216.871] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000ba380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000ba380*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0216.871] GetFileType (hFile=0xcc) returned 0x1
	[0216.871] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x745c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=29788) returned 1
	[0216.871] CloseHandle (hObject=0xcc) returned 1
	[0216.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf.egmwv")) returned 0x20
	[0216.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.876] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf")) returned 0x20
	[0216.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x20) returned 1
	[0216.883] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.913] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0216.913] ReadFile (in: hFile=0xe8, lpBuffer=0xc000100000, nNumberOfBytesToRead=0x4b4a, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000100000*, lpNumberOfBytesRead=0xc0002d7cec*=0x4b4a, lpOverlapped=0x0) returned 1
	[0216.924] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0216.925] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002ec602 | out: pbBuffer=0xc0002ec602) returned 1
	[0216.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0216.925] GetFileType (hFile=0xe8) returned 0x1
	[0216.925] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=19274) returned 1
	[0216.925] WriteFile (in: hFile=0xe8, lpBuffer=0xc000310000*, nNumberOfBytesToWrite=0x4b4a, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc000310000*, lpNumberOfBytesWritten=0xc000381ccc*=0x4b4a, lpOverlapped=0xc000381ce8) returned 1
	[0216.926] GetFileType (hFile=0xe8) returned 0x1
	[0216.926] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4b4a, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=19274) returned 1
	[0216.926] GetFileType (hFile=0xe8) returned 0x1
	[0216.926] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=19274) returned 1
	[0216.926] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002f8700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc0002f8700*, lpNumberOfBytesWritten=0xc000381ccc*=0x22d, lpOverlapped=0xc000381ce8) returned 1
	[0216.927] GetFileType (hFile=0xe8) returned 0x1
	[0216.927] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4b4a, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=19274) returned 1
	[0216.927] CloseHandle (hObject=0xe8) returned 1
	[0216.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf.egmwv")) returned 0x20
	[0216.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.934] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0216.946] SetEvent (hEvent=0xc4) returned 1
	[0216.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf")) returned 0x20
	[0216.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x20) returned 1
	[0216.950] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.984] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0216.984] ReadFile (in: hFile=0xcc, lpBuffer=0xc000226000, nNumberOfBytesToRead=0x69d8, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000226000*, lpNumberOfBytesRead=0xc0002d7cec*=0x69d8, lpOverlapped=0x0) returned 1
	[0216.990] SetEvent (hEvent=0xc4) returned 1
	[0216.990] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531b0 | out: pbBuffer=0xc0000531b0) returned 1
	[0216.990] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531ca | out: pbBuffer=0xc0000531ca) returned 1
	[0216.990] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00024c202 | out: pbBuffer=0xc00024c202) returned 1
	[0216.991] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531f0 | out: pbBuffer=0xc0000531f0) returned 1
	[0216.991] GetFileType (hFile=0xcc) returned 0x1
	[0216.991] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=27096) returned 1
	[0216.991] WriteFile (in: hFile=0xcc, lpBuffer=0xc00027c000*, nNumberOfBytesToWrite=0x69d8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00027c000*, lpNumberOfBytesWritten=0xc000155ccc*=0x69d8, lpOverlapped=0xc000155ce8) returned 1
	[0216.992] GetFileType (hFile=0xcc) returned 0x1
	[0216.992] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x69d8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=27096) returned 1
	[0216.992] GetFileType (hFile=0xcc) returned 0x1
	[0216.992] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=27096) returned 1
	[0216.992] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000bbc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000bbc00*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0216.993] GetFileType (hFile=0xcc) returned 0x1
	[0216.993] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x69d8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=27096) returned 1
	[0216.993] CloseHandle (hObject=0xcc) returned 1
	[0216.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf.egmwv")) returned 0x20
	[0216.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.998] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.000] SetEvent (hEvent=0xc4) returned 1
	[0217.000] SetEvent (hEvent=0x104) returned 1
	[0217.001] SwitchToThread () returned 1
	[0217.002] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.007] SetEvent (hEvent=0x104) returned 1
	[0217.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf")) returned 0x20
	[0217.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x20) returned 1
	[0217.008] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.050] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0217.050] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x99a2, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc0002d7cec*=0x99a2, lpOverlapped=0x0) returned 1
	[0217.058] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0217.058] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0217.058] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0217.059] GetFileType (hFile=0xe8) returned 0x1
	[0217.059] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=39330) returned 1
	[0217.059] WriteFile (in: hFile=0xe8, lpBuffer=0xc00012a000*, nNumberOfBytesToWrite=0x99a2, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc00012a000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x99a2, lpOverlapped=0xc0003ddce8) returned 1
	[0217.061] GetFileType (hFile=0xe8) returned 0x1
	[0217.061] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x99a2, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=39330) returned 1
	[0217.061] GetFileType (hFile=0xe8) returned 0x1
	[0217.061] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=39330) returned 1
	[0217.061] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000d8e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0000d8e00*, lpNumberOfBytesWritten=0xc0003ddccc*=0x230, lpOverlapped=0xc0003ddce8) returned 1
	[0217.062] GetFileType (hFile=0xe8) returned 0x1
	[0217.062] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x99a2, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=39330) returned 1
	[0217.062] CloseHandle (hObject=0xe8) returned 1
	[0217.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf.egmwv")) returned 0x20
	[0217.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.066] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf")) returned 0x20
	[0217.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x20) returned 1
	[0217.072] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.107] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0217.107] ReadFile (in: hFile=0xcc, lpBuffer=0xc00038c000, nNumberOfBytesToRead=0x8420, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00038c000*, lpNumberOfBytesRead=0xc000423cec*=0x8420, lpOverlapped=0x0) returned 1
	[0217.114] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0217.114] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001602 | out: pbBuffer=0xc000001602) returned 1
	[0217.114] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001692 | out: pbBuffer=0xc000001692) returned 1
	[0217.114] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0217.115] GetFileType (hFile=0xcc) returned 0x1
	[0217.115] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=33824) returned 1
	[0217.115] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003c0000*, nNumberOfBytesToWrite=0x8420, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0003c0000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x8420, lpOverlapped=0xc0003ddce8) returned 1
	[0217.115] GetFileType (hFile=0xcc) returned 0x1
	[0217.116] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x8420, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=33824) returned 1
	[0217.116] GetFileType (hFile=0xcc) returned 0x1
	[0217.116] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=33824) returned 1
	[0217.116] WriteFile (in: hFile=0xcc, lpBuffer=0xc000220700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc000220700*, lpNumberOfBytesWritten=0xc0003ddccc*=0x224, lpOverlapped=0xc0003ddce8) returned 1
	[0217.116] GetFileType (hFile=0xcc) returned 0x1
	[0217.116] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x8420, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=33824) returned 1
	[0217.117] CloseHandle (hObject=0xcc) returned 1
	[0217.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf.egmwv")) returned 0x20
	[0217.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.119] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf")) returned 0x20
	[0217.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x20) returned 1
	[0217.134] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.162] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0217.162] ReadFile (in: hFile=0xcc, lpBuffer=0xc000318000, nNumberOfBytesToRead=0x8b8e, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000318000*, lpNumberOfBytesRead=0xc000423cec*=0x8b8e, lpOverlapped=0x0) returned 1
	[0217.170] SetEvent (hEvent=0x104) returned 1
	[0217.170] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65b0 | out: pbBuffer=0xc0002b65b0) returned 1
	[0217.171] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ca | out: pbBuffer=0xc0002b65ca) returned 1
	[0217.171] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000334202 | out: pbBuffer=0xc000334202) returned 1
	[0217.171] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000334203 | out: pbBuffer=0xc000334203) returned 1
	[0217.171] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65f0 | out: pbBuffer=0xc0002b65f0) returned 1
	[0217.171] GetFileType (hFile=0xcc) returned 0x1
	[0217.171] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=35726) returned 1
	[0217.172] WriteFile (in: hFile=0xcc, lpBuffer=0xc0004c2000*, nNumberOfBytesToWrite=0x8b8e, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0004c2000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x8b8e, lpOverlapped=0xc0003ddce8) returned 1
	[0217.172] GetFileType (hFile=0xcc) returned 0x1
	[0217.173] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x8b8e, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=35726) returned 1
	[0217.173] GetFileType (hFile=0xcc) returned 0x1
	[0217.173] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=35726) returned 1
	[0217.173] WriteFile (in: hFile=0xcc, lpBuffer=0xc0004d2000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0004d2000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x233, lpOverlapped=0xc0003ddce8) returned 1
	[0217.173] GetFileType (hFile=0xcc) returned 0x1
	[0217.174] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x8b8e, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=35726) returned 1
	[0217.174] CloseHandle (hObject=0xcc) returned 1
	[0217.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf.egmwv")) returned 0x20
	[0217.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.182] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.183] SetEvent (hEvent=0x104) returned 1
	[0217.183] SetEvent (hEvent=0xc4) returned 1
	[0217.183] SwitchToThread () returned 1
	[0217.185] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.193] SetEvent (hEvent=0xc4) returned 1
	[0217.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf")) returned 0x20
	[0217.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x20) returned 1
	[0217.199] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.220] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0217.220] ReadFile (in: hFile=0xe8, lpBuffer=0xc00037c000, nNumberOfBytesToRead=0x37e4, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesRead=0xc000423cec*=0x37e4, lpOverlapped=0x0) returned 1
	[0217.226] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0217.226] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0217.226] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039477 | out: pbBuffer=0xc000039477) returned 1
	[0217.226] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0217.226] GetFileType (hFile=0xe8) returned 0x1
	[0217.227] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=14308) returned 1
	[0217.227] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000d4000*, nNumberOfBytesToWrite=0x37e4, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x37e4, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.228] GetFileType (hFile=0xe8) returned 0x1
	[0217.228] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x37e4, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=14308) returned 1
	[0217.228] GetFileType (hFile=0xe8) returned 0x1
	[0217.228] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=14308) returned 1
	[0217.228] WriteFile (in: hFile=0xe8, lpBuffer=0xc000297500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000297500*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x233, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.229] GetFileType (hFile=0xe8) returned 0x1
	[0217.229] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x37e4, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=14308) returned 1
	[0217.229] CloseHandle (hObject=0xe8) returned 1
	[0217.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf.egmwv")) returned 0x20
	[0217.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.231] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf")) returned 0x20
	[0217.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x20) returned 1
	[0217.236] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.270] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0217.270] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x44fe, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000423cec*=0x44fe, lpOverlapped=0x0) returned 1
	[0217.276] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0217.276] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0217.276] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000100202 | out: pbBuffer=0xc000100202) returned 1
	[0217.276] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000100256 | out: pbBuffer=0xc000100256) returned 1
	[0217.276] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0217.277] GetFileType (hFile=0xa8) returned 0x1
	[0217.277] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=17662) returned 1
	[0217.277] WriteFile (in: hFile=0xa8, lpBuffer=0xc000222000*, nNumberOfBytesToWrite=0x44fe, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000222000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x44fe, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.278] GetFileType (hFile=0xa8) returned 0x1
	[0217.278] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x44fe, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=17662) returned 1
	[0217.278] GetFileType (hFile=0xa8) returned 0x1
	[0217.278] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=17662) returned 1
	[0217.278] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000fee00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0000fee00*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x233, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.278] GetFileType (hFile=0xa8) returned 0x1
	[0217.278] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x44fe, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=17662) returned 1
	[0217.278] CloseHandle (hObject=0xa8) returned 1
	[0217.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf.egmwv")) returned 0x20
	[0217.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.282] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf")) returned 0x20
	[0217.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x20) returned 1
	[0217.290] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.327] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0217.327] ReadFile (in: hFile=0xe8, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1500, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000423cec*=0x1500, lpOverlapped=0x0) returned 1
	[0217.333] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053040 | out: pbBuffer=0xc000053040) returned 1
	[0217.333] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a3102 | out: pbBuffer=0xc0002a3102) returned 1
	[0217.334] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053080 | out: pbBuffer=0xc000053080) returned 1
	[0217.334] GetFileType (hFile=0xe8) returned 0x1
	[0217.334] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=5376) returned 1
	[0217.334] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003d0000*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0003d0000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x1500, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.335] GetFileType (hFile=0xe8) returned 0x1
	[0217.335] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1500, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=5376) returned 1
	[0217.335] GetFileType (hFile=0xe8) returned 0x1
	[0217.335] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=5376) returned 1
	[0217.335] WriteFile (in: hFile=0xe8, lpBuffer=0xc000436000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000436000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x221, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.335] GetFileType (hFile=0xe8) returned 0x1
	[0217.335] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1500, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=5376) returned 1
	[0217.336] CloseHandle (hObject=0xe8) returned 1
	[0217.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf.egmwv")) returned 0x20
	[0217.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.340] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.355] SetEvent (hEvent=0xc4) returned 1
	[0217.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf")) returned 0x20
	[0217.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x20) returned 1
	[0217.356] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.498] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0217.498] ReadFile (in: hFile=0xcc, lpBuffer=0xc000134000, nNumberOfBytesToRead=0x1d4c, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000134000*, lpNumberOfBytesRead=0xc0002d7cec*=0x1d4c, lpOverlapped=0x0) returned 1
	[0217.503] SetEvent (hEvent=0xc4) returned 1
	[0217.504] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6760 | out: pbBuffer=0xc0002b6760) returned 1
	[0217.504] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000101d02 | out: pbBuffer=0xc000101d02) returned 1
	[0217.504] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67a0 | out: pbBuffer=0xc0002b67a0) returned 1
	[0217.504] GetFileType (hFile=0xcc) returned 0x1
	[0217.504] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=7500) returned 1
	[0217.505] WriteFile (in: hFile=0xcc, lpBuffer=0xc000250000*, nNumberOfBytesToWrite=0x1d4c, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000250000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x1d4c, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.505] GetFileType (hFile=0xcc) returned 0x1
	[0217.505] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1d4c, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=7500) returned 1
	[0217.505] GetFileType (hFile=0xcc) returned 0x1
	[0217.505] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=7500) returned 1
	[0217.506] WriteFile (in: hFile=0xcc, lpBuffer=0xc000254000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000254000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x22d, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.506] GetFileType (hFile=0xcc) returned 0x1
	[0217.506] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1d4c, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=7500) returned 1
	[0217.506] CloseHandle (hObject=0xcc) returned 1
	[0217.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf.egmwv")) returned 0x20
	[0217.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.511] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.513] SetEvent (hEvent=0xc4) returned 1
	[0217.513] SetEvent (hEvent=0x104) returned 1
	[0217.514] SwitchToThread () returned 1
	[0217.516] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.525] SetEvent (hEvent=0x104) returned 1
	[0217.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf")) returned 0x20
	[0217.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x20) returned 1
	[0217.532] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.558] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0217.558] ReadFile (in: hFile=0xe8, lpBuffer=0xc00010a000, nNumberOfBytesToRead=0x3fe2, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00010a000*, lpNumberOfBytesRead=0xc0002d3cec*=0x3fe2, lpOverlapped=0x0) returned 1
	[0217.567] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8110 | out: pbBuffer=0xc0001d8110) returned 1
	[0217.567] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000100802 | out: pbBuffer=0xc000100802) returned 1
	[0217.567] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8150 | out: pbBuffer=0xc0001d8150) returned 1
	[0217.567] GetFileType (hFile=0xe8) returned 0x1
	[0217.567] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=16354) returned 1
	[0217.568] WriteFile (in: hFile=0xe8, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x3fe2, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc000469ccc*=0x3fe2, lpOverlapped=0xc000469ce8) returned 1
	[0217.568] GetFileType (hFile=0xe8) returned 0x1
	[0217.568] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3fe2, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=16354) returned 1
	[0217.568] GetFileType (hFile=0xe8) returned 0x1
	[0217.569] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=16354) returned 1
	[0217.569] WriteFile (in: hFile=0xe8, lpBuffer=0xc00013f500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc00013f500*, lpNumberOfBytesWritten=0xc000469ccc*=0x236, lpOverlapped=0xc000469ce8) returned 1
	[0217.570] GetFileType (hFile=0xe8) returned 0x1
	[0217.570] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3fe2, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=16354) returned 1
	[0217.570] CloseHandle (hObject=0xe8) returned 1
	[0217.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf.egmwv")) returned 0x20
	[0217.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.574] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.576] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.580] SetEvent (hEvent=0x104) returned 1
	[0217.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf")) returned 0x20
	[0217.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x20) returned 1
	[0217.582] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.657] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0217.657] ReadFile (in: hFile=0xa8, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x1d94, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000423cec*=0x1d94, lpOverlapped=0x0) returned 1
	[0217.682] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8730 | out: pbBuffer=0xc0001b8730) returned 1
	[0217.682] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b874a | out: pbBuffer=0xc0001b874a) returned 1
	[0217.682] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000356302 | out: pbBuffer=0xc000356302) returned 1
	[0217.682] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003563c8 | out: pbBuffer=0xc0003563c8) returned 1
	[0217.684] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8770 | out: pbBuffer=0xc0001b8770) returned 1
	[0217.684] GetFileType (hFile=0xa8) returned 0x1
	[0217.685] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7572) returned 1
	[0217.685] WriteFile (in: hFile=0xa8, lpBuffer=0xc000338000*, nNumberOfBytesToWrite=0x1d94, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000338000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1d94, lpOverlapped=0xc000155ce8) returned 1
	[0217.690] GetFileType (hFile=0xa8) returned 0x1
	[0217.691] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1d94, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7572) returned 1
	[0217.691] GetFileType (hFile=0xa8) returned 0x1
	[0217.691] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7572) returned 1
	[0217.691] WriteFile (in: hFile=0xa8, lpBuffer=0xc00035aa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00035aa80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0217.693] GetFileType (hFile=0xa8) returned 0x1
	[0217.693] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1d94, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7572) returned 1
	[0217.694] CloseHandle (hObject=0xa8) returned 1
	[0217.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf.egmwv")) returned 0x20
	[0217.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.713] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.731] SetEvent (hEvent=0x104) returned 1
	[0217.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf")) returned 0x20
	[0217.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x20) returned 1
	[0217.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.775] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0217.776] ReadFile (in: hFile=0xcc, lpBuffer=0xc000388000, nNumberOfBytesToRead=0x2394, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000388000*, lpNumberOfBytesRead=0xc000423cec*=0x2394, lpOverlapped=0x0) returned 1
	[0217.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0217.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d1a | out: pbBuffer=0xc000052d1a) returned 1
	[0217.782] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1c02 | out: pbBuffer=0xc0002c1c02) returned 1
	[0217.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1c65 | out: pbBuffer=0xc0002c1c65) returned 1
	[0217.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1cd1 | out: pbBuffer=0xc0002c1cd1) returned 1
	[0217.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0217.782] GetFileType (hFile=0xcc) returned 0x1
	[0217.783] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=9108) returned 1
	[0217.783] WriteFile (in: hFile=0xcc, lpBuffer=0xc000110000*, nNumberOfBytesToWrite=0x2394, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc000110000*, lpNumberOfBytesWritten=0xc000465ccc*=0x2394, lpOverlapped=0xc000465ce8) returned 1
	[0217.784] GetFileType (hFile=0xcc) returned 0x1
	[0217.784] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2394, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=9108) returned 1
	[0217.784] GetFileType (hFile=0xcc) returned 0x1
	[0217.784] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=9108) returned 1
	[0217.784] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001e0e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0001e0e00*, lpNumberOfBytesWritten=0xc000465ccc*=0x22a, lpOverlapped=0xc000465ce8) returned 1
	[0217.785] GetFileType (hFile=0xcc) returned 0x1
	[0217.785] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2394, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=9108) returned 1
	[0217.785] CloseHandle (hObject=0xcc) returned 1
	[0217.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf.egmwv")) returned 0x20
	[0217.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.792] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.799] SetEvent (hEvent=0x104) returned 1
	[0217.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf")) returned 0x20
	[0217.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x20) returned 1
	[0217.800] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.840] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.840] ReadFile (in: hFile=0xa8, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x834, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc0002d5cec*=0x834, lpOverlapped=0x0) returned 1
	[0217.847] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8bf0 | out: pbBuffer=0xc0001b8bf0) returned 1
	[0217.847] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000176902 | out: pbBuffer=0xc000176902) returned 1
	[0217.847] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8c30 | out: pbBuffer=0xc0001b8c30) returned 1
	[0217.847] GetFileType (hFile=0xa8) returned 0x1
	[0217.848] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2100) returned 1
	[0217.848] WriteFile (in: hFile=0xa8, lpBuffer=0xc000406000*, nNumberOfBytesToWrite=0x834, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000406000*, lpNumberOfBytesWritten=0xc000155ccc*=0x834, lpOverlapped=0xc000155ce8) returned 1
	[0217.848] GetFileType (hFile=0xa8) returned 0x1
	[0217.848] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x834, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2100) returned 1
	[0217.848] GetFileType (hFile=0xa8) returned 0x1
	[0217.848] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2100) returned 1
	[0217.849] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003f7500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003f7500*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0217.849] GetFileType (hFile=0xa8) returned 0x1
	[0217.849] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x834, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2100) returned 1
	[0217.849] CloseHandle (hObject=0xa8) returned 1
	[0217.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf.egmwv")) returned 0x20
	[0217.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.854] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.860] SetEvent (hEvent=0x104) returned 1
	[0217.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf")) returned 0x20
	[0217.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x20) returned 1
	[0217.862] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.899] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.899] ReadFile (in: hFile=0xe8, lpBuffer=0xc000262000, nNumberOfBytesToRead=0x1388, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000262000*, lpNumberOfBytesRead=0xc0002d5cec*=0x1388, lpOverlapped=0x0) returned 1
	[0217.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8760 | out: pbBuffer=0xc0001d8760) returned 1
	[0217.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d877a | out: pbBuffer=0xc0001d877a) returned 1
	[0217.905] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026a702 | out: pbBuffer=0xc00026a702) returned 1
	[0217.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d87a0 | out: pbBuffer=0xc0001d87a0) returned 1
	[0217.905] GetFileType (hFile=0xe8) returned 0x1
	[0217.905] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5000) returned 1
	[0217.905] WriteFile (in: hFile=0xe8, lpBuffer=0xc000284000*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000284000*, lpNumberOfBytesWritten=0xc000469ccc*=0x1388, lpOverlapped=0xc000469ce8) returned 1
	[0217.906] GetFileType (hFile=0xe8) returned 0x1
	[0217.906] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1388, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5000) returned 1
	[0217.906] GetFileType (hFile=0xe8) returned 0x1
	[0217.906] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5000) returned 1
	[0217.906] WriteFile (in: hFile=0xe8, lpBuffer=0xc000261880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000261880*, lpNumberOfBytesWritten=0xc000469ccc*=0x227, lpOverlapped=0xc000469ce8) returned 1
	[0217.907] GetFileType (hFile=0xe8) returned 0x1
	[0217.907] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1388, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5000) returned 1
	[0217.907] CloseHandle (hObject=0xe8) returned 1
	[0217.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf.egmwv")) returned 0x20
	[0217.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.910] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.925] SetEvent (hEvent=0x104) returned 1
	[0217.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf")) returned 0x20
	[0217.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x20) returned 1
	[0217.929] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.953] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.954] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x102
	[0217.957] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0217.957] SetEvent (hEvent=0x70) returned 1
	[0217.957] SetEvent (hEvent=0x104) returned 1
	[0217.958] ReadFile (in: hFile=0xcc, lpBuffer=0xc000308000, nNumberOfBytesToRead=0x16c0, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000308000*, lpNumberOfBytesRead=0xc0002d5cec*=0x16c0, lpOverlapped=0x0) returned 1
	[0217.964] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d88e0 | out: pbBuffer=0xc0001d88e0) returned 1
	[0217.964] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d88fa | out: pbBuffer=0xc0001d88fa) returned 1
	[0217.964] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026b602 | out: pbBuffer=0xc00026b602) returned 1
	[0217.964] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026b62d | out: pbBuffer=0xc00026b62d) returned 1
	[0217.964] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8920 | out: pbBuffer=0xc0001d8920) returned 1
	[0217.964] GetFileType (hFile=0xcc) returned 0x1
	[0217.964] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5824) returned 1
	[0217.965] WriteFile (in: hFile=0xcc, lpBuffer=0xc000320000*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000320000*, lpNumberOfBytesWritten=0xc000469ccc*=0x16c0, lpOverlapped=0xc000469ce8) returned 1
	[0217.965] GetFileType (hFile=0xcc) returned 0x1
	[0217.965] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x16c0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5824) returned 1
	[0217.965] GetFileType (hFile=0xcc) returned 0x1
	[0217.965] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5824) returned 1
	[0217.966] WriteFile (in: hFile=0xcc, lpBuffer=0xc000315180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000315180*, lpNumberOfBytesWritten=0xc000469ccc*=0x227, lpOverlapped=0xc000469ce8) returned 1
	[0217.966] GetFileType (hFile=0xcc) returned 0x1
	[0217.966] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x16c0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5824) returned 1
	[0217.966] CloseHandle (hObject=0xcc) returned 1
	[0217.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf.egmwv")) returned 0x20
	[0217.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.970] SwitchToThread () returned 1
	[0217.971] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.199] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.201] SetEvent (hEvent=0x104) returned 1
	[0218.201] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.205] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.220] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.236] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.255] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.264] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.290] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.295] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.336] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.345] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.363] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.392] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0218.414] SetEvent (hEvent=0x104) returned 1
	[0218.414] SetEvent (hEvent=0x144) returned 1
	[0218.414] SetEvent (hEvent=0xe4) returned 1
	[0218.414] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x0
	[0218.418] SetEvent (hEvent=0x104) returned 1
	[0218.418] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1) returned 0x0
	[0218.420] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0219.076] SetEvent (hEvent=0x124) returned 1
	[0219.076] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0219.213] SetEvent (hEvent=0xe4) returned 1
	[0219.214] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) returned 0x0
	[0220.535] SetEvent (hEvent=0x144) returned 1
	[0220.535] SetEvent (hEvent=0xe4) returned 1
	[0220.535] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) 

Thread:
	id = 39
	os_tid = 0xa5c

	[0118.799] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x545feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x545feb0*=0x110) returned 1
	[0118.799] VirtualQuery (in: lpAddress=0x545fed0, lpBuffer=0x545fed0, dwLength=0x30 | out: lpBuffer=0x545fed0*(BaseAddress=0x545f000, AllocationBase=0x5260000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.800] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 0x2020
	[0118.800] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", dwFileAttributes=0x2020) returned 1
	[0119.904] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.egmwv"), dwFlags=0x1) returned 1
	[0132.096] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x124
	[0132.096] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0132.633] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0132.634] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0132.634] SwitchToThread () returned 1
	[0132.859] VirtualAlloc (lpAddress=0xc00031e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00031e000
	[0132.860] ReadFile (in: hFile=0xa8, lpBuffer=0xc00031e000, nNumberOfBytesToRead=0x567, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00031e000*, lpNumberOfBytesRead=0xc000429cec*=0x567, lpOverlapped=0x0) returned 1
	[0134.920] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0137.671] SetEvent (hEvent=0x108) returned 1
	[0137.671] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0137.862] SetEvent (hEvent=0x108) returned 1
	[0137.863] SetEvent (hEvent=0x148) returned 1
	[0137.863] SetEvent (hEvent=0xac) returned 1
	[0137.863] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0159.399] SwitchToThread () returned 1
	[0159.436] SwitchToThread () returned 1
	[0159.437] SetEvent (hEvent=0x148) returned 1
	[0159.438] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0159.439] SetEvent (hEvent=0x148) returned 1
	[0159.439] SetEvent (hEvent=0x68) returned 1
	[0159.439] SwitchToThread () returned 1
	[0159.443] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0160.707] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0161.155] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0161.250] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0161.377] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0161.448] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0163.822] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0175.569] SetEvent (hEvent=0x108) returned 1
	[0175.570] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0175.616] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0175.616] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0175.658] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0175.658] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0175.754] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0175.754] SetEvent (hEvent=0xac) returned 1
	[0175.754] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0175.831] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0175.832] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 0x2020
	[0175.833] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", dwFileAttributes=0x2020) returned 1
	[0175.833] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.egmwv"), dwFlags=0x1) returned 1
	[0175.834] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0175.834] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0175.834] ReadFile (in: hFile=0x130, lpBuffer=0xc0003f8a80, nNumberOfBytesToRead=0x6a3b, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f8a80*, lpNumberOfBytesRead=0xc000193cec*=0x6a3b, lpOverlapped=0x0) returned 1
	[0175.908] VirtualAlloc (lpAddress=0xc0019fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0019fc000
	[0175.909] VirtualAlloc (lpAddress=0xc0019fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0019fe000
	[0175.910] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052140 | out: pbBuffer=0xc000052140) returned 1
	[0175.910] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005215a | out: pbBuffer=0xc00005215a) returned 1
	[0175.910] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0175.910] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d09 | out: pbBuffer=0xc000214d09) returned 1
	[0175.910] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052180 | out: pbBuffer=0xc000052180) returned 1
	[0175.911] GetFileType (hFile=0x130) returned 0x1
	[0175.911] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=27195) returned 1
	[0175.911] WriteFile (in: hFile=0x130, lpBuffer=0xc0002a0000*, nNumberOfBytesToWrite=0x6a3b, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x6a3b, lpOverlapped=0xc0000dbce8) returned 1
	[0175.912] GetFileType (hFile=0x130) returned 0x1
	[0175.912] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x6a3b, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=27195) returned 1
	[0175.912] GetFileType (hFile=0x130) returned 0x1
	[0175.912] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=27195) returned 1
	[0175.913] WriteFile (in: hFile=0x130, lpBuffer=0xc000182e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000182e00*, lpNumberOfBytesWritten=0xc0000dbccc*=0x233, lpOverlapped=0xc0000dbce8) returned 1
	[0175.913] GetFileType (hFile=0x130) returned 0x1
	[0175.913] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x6a3b, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=27195) returned 1
	[0175.913] CloseHandle (hObject=0x130) returned 1
	[0175.914] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.egmwv")) returned 0x2020
	[0175.914] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.egmwv", dwFileAttributes=0x2021) returned 1
	[0175.989] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0179.429] SetEvent (hEvent=0xac) returned 1
	[0179.429] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0179.487] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0179.596] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0179.665] SetEvent (hEvent=0x54) returned 1
	[0179.665] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0179.713] SetEvent (hEvent=0x54) returned 1
	[0179.713] SetEvent (hEvent=0x100) returned 1
	[0179.714] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 0x2020
	[0179.714] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", dwFileAttributes=0x2020) returned 1
	[0179.715] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.egmwv"), dwFlags=0x1) returned 1
	[0179.716] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0179.716] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0179.717] ReadFile (in: hFile=0x164, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x15366, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc00016fcec*=0x15366, lpOverlapped=0x0) returned 1
	[0179.774] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0179.839] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0182.083] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0182.135] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0182.141] SetEvent (hEvent=0x100) returned 1
	[0182.141] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 0x2020
	[0182.141] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", dwFileAttributes=0x2020) returned 1
	[0182.145] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.egmwv"), dwFlags=0x1) returned 1
	[0182.204] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0182.205] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0182.205] ReadFile (in: hFile=0xe0, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x545, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc00016bcec*=0x545, lpOverlapped=0x0) returned 1
	[0184.320] SetEvent (hEvent=0x70) returned 1
	[0184.321] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101a0 | out: pbBuffer=0xc0000101a0) returned 1
	[0184.321] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0184.321] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039227 | out: pbBuffer=0xc000039227) returned 1
	[0184.321] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101e0 | out: pbBuffer=0xc0000101e0) returned 1
	[0184.321] GetFileType (hFile=0xe0) returned 0x1
	[0184.321] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=1349) returned 1
	[0184.321] WriteFile (in: hFile=0xe0, lpBuffer=0xc000184000*, nNumberOfBytesToWrite=0x545, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000184000*, lpNumberOfBytesWritten=0xc00019dccc*=0x545, lpOverlapped=0xc00019dce8) returned 1
	[0184.322] GetFileType (hFile=0xe0) returned 0x1
	[0184.322] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x545, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=1349) returned 1
	[0184.322] GetFileType (hFile=0xe0) returned 0x1
	[0184.322] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=1349) returned 1
	[0184.322] WriteFile (in: hFile=0xe0, lpBuffer=0xc000191500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000191500*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0184.323] GetFileType (hFile=0xe0) returned 0x1
	[0184.323] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x545, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=1349) returned 1
	[0184.323] CloseHandle (hObject=0xe0) returned 1
	[0184.323] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.egmwv")) returned 0x2020
	[0184.323] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0184.324] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0184.493] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0186.201] SetEvent (hEvent=0xac) returned 1
	[0186.201] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0186.201] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", dwFileAttributes=0x2020) returned 1
	[0187.569] SetEvent (hEvent=0x54) returned 1
	[0187.569] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0187.645] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0187.645] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0187.663] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0187.664] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0187.670] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0187.670] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0187.680] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0187.680] SetEvent (hEvent=0x70) returned 1
	[0187.680] SetEvent (hEvent=0x100) returned 1
	[0187.680] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0187.721] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010190 | out: pbBuffer=0xc000010190) returned 1
	[0187.721] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0187.721] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003921e | out: pbBuffer=0xc00003921e) returned 1
	[0187.722] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101d0 | out: pbBuffer=0xc0000101d0) returned 1
	[0187.724] VirtualAlloc (lpAddress=0xc000538000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000538000
	[0187.802] VirtualAlloc (lpAddress=0xc0005b8000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0005b8000
	[0187.896] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 0x2020
	[0187.896] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", dwFileAttributes=0x2020) returned 1
	[0187.903] SetEvent (hEvent=0x54) returned 1
	[0187.903] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0187.906] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0187.907] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0187.910] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0187.910] SetEvent (hEvent=0xac) returned 1
	[0187.910] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0187.920] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0187.920] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.egmwv"), dwFlags=0x1) returned 1
	[0196.663] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0196.729] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000163cc4 | out: lpMode=0xc000163cc4) returned 0
	[0196.729] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0196.799] SetEvent (hEvent=0x100) returned 1
	[0196.799] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0196.819] SetEvent (hEvent=0x120) returned 1
	[0196.820] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0196.837] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0196.838] SetEvent (hEvent=0x120) returned 1
	[0196.838] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0196.851] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0198.990] SetEvent (hEvent=0x144) returned 1
	[0198.992] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.004] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.115] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.119] SetEvent (hEvent=0x148) returned 1
	[0199.119] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.128] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.134] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.198] SetEvent (hEvent=0x100) returned 1
	[0199.198] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.205] SetEvent (hEvent=0x100) returned 1
	[0199.205] SwitchToThread () returned 1
	[0199.206] SetEvent (hEvent=0x148) returned 1
	[0199.206] SetEvent (hEvent=0x100) returned 1
	[0199.206] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.209] SetEvent (hEvent=0x100) returned 1
	[0199.209] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.226] SetEvent (hEvent=0x144) returned 1
	[0199.226] SetEvent (hEvent=0xac) returned 1
	[0199.226] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.229] SetEvent (hEvent=0x148) returned 1
	[0199.230] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0199.234] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.235] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0199.235] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", dwFileAttributes=0x2020) returned 1
	[0199.244] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwFlags=0x1) returned 1
	[0199.292] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0199.292] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0199.292] ReadFile (in: hFile=0xd4, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x412b, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc00038dcec*=0x412b, lpOverlapped=0x0) returned 1
	[0199.334] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.366] SetEvent (hEvent=0x148) returned 1
	[0199.366] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.376] SetEvent (hEvent=0x148) returned 1
	[0199.376] SetEvent (hEvent=0x120) returned 1
	[0199.376] SetEvent (hEvent=0x100) returned 1
	[0199.377] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.378] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.412] SetEvent (hEvent=0x148) returned 1
	[0199.413] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.416] SetEvent (hEvent=0x54) returned 1
	[0199.416] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.442] SetEvent (hEvent=0x100) returned 1
	[0199.442] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.451] SetEvent (hEvent=0x120) returned 1
	[0199.452] SetEvent (hEvent=0xac) returned 1
	[0199.452] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.462] SetEvent (hEvent=0x148) returned 1
	[0199.462] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0199.470] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.470] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061)) returned 1
	[0199.470] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7)) returned 1
	[0199.504] SetEvent (hEvent=0x148) returned 1
	[0199.504] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800)) returned 1
	[0199.576] SwitchToThread () returned 1
	[0199.584] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.585] SetEvent (hEvent=0x100) returned 1
	[0199.586] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0199.627] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.627] SwitchToThread () returned 1
	[0199.631] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0199.634] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.635] SetEvent (hEvent=0x70) returned 1
	[0199.635] SetEvent (hEvent=0x100) returned 1
	[0199.636] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.637] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.639] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.639] SetEvent (hEvent=0x148) returned 1
	[0199.639] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.643] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0199.644] SetEvent (hEvent=0x54) returned 1
	[0199.644] SetEvent (hEvent=0x100) returned 1
	[0199.645] GetFileType (hFile=0xe8) returned 0x1
	[0199.645] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0199.645] WriteFile (in: hFile=0xe8, lpBuffer=0xc0007b2000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000423ccc, lpOverlapped=0xc000423ce8 | out: lpBuffer=0xc0007b2000*, lpNumberOfBytesWritten=0xc000423ccc*=0x100000, lpOverlapped=0xc000423ce8) returned 1
	[0199.655] GetFileType (hFile=0xe8) returned 0x1
	[0199.655] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0199.655] GetFileType (hFile=0xe8) returned 0x1
	[0199.655] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0199.656] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001ca000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000423ccc, lpOverlapped=0xc000423ce8 | out: lpBuffer=0xc0001ca000*, lpNumberOfBytesWritten=0xc000423ccc*=0x2d8, lpOverlapped=0xc000423ce8) returned 1
	[0199.661] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.663] SetEvent (hEvent=0x54) returned 1
	[0199.663] GetFileType (hFile=0xe8) returned 0x1
	[0199.664] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0199.664] CloseHandle (hObject=0xe8) returned 1
	[0199.664] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv")) returned 0x2020
	[0199.664] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.665] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.666] SetEvent (hEvent=0x54) returned 1
	[0199.666] SetEvent (hEvent=0x148) returned 1
	[0199.666] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0199.666] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0199.667] ReadFile (in: hFile=0xe8, lpBuffer=0xc0001ac000, nNumberOfBytesToRead=0x5061, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac000*, lpNumberOfBytesRead=0xc000389cec*=0x5061, lpOverlapped=0x0) returned 1
	[0199.694] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a120 | out: pbBuffer=0xc00041a120) returned 1
	[0199.694] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0199.695] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a160 | out: pbBuffer=0xc00041a160) returned 1
	[0199.695] GetFileType (hFile=0xe8) returned 0x1
	[0199.695] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=20577) returned 1
	[0199.695] WriteFile (in: hFile=0xe8, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0x5061, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x5061, lpOverlapped=0xc0000dbce8) returned 1
	[0199.696] GetFileType (hFile=0xe8) returned 0x1
	[0199.696] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5061, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=20577) returned 1
	[0199.696] GetFileType (hFile=0xe8) returned 0x1
	[0199.696] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=20577) returned 1
	[0199.696] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002bf500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0002bf500*, lpNumberOfBytesWritten=0xc0000dbccc*=0x227, lpOverlapped=0xc0000dbce8) returned 1
	[0199.697] GetFileType (hFile=0xe8) returned 0x1
	[0199.697] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5061, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=20577) returned 1
	[0199.697] CloseHandle (hObject=0xe8) returned 1
	[0199.697] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0199.698] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.698] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0199.698] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000163cc4 | out: lpMode=0xc000163cc4) returned 0
	[0199.699] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0199.747] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.747] SetEvent (hEvent=0x70) returned 1
	[0199.747] SetEvent (hEvent=0x120) returned 1
	[0199.747] ReadFile (in: hFile=0xe8, lpBuffer=0xc000638000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000163cec, lpOverlapped=0x0 | out: lpBuffer=0xc000638000*, lpNumberOfBytesRead=0xc000163cec*=0x100000, lpOverlapped=0x0) returned 1
	[0199.819] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.884] SetEvent (hEvent=0xac) returned 1
	[0199.884] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.916] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.936] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.937] SetEvent (hEvent=0x148) returned 1
	[0199.937] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0199.938] SetEvent (hEvent=0x148) returned 1
	[0199.938] SetEvent (hEvent=0x54) returned 1
	[0199.938] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0199.939] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000429a14 | out: lpMode=0xc000429a14) returned 0
	[0199.939] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6500*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004299b4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6500*, lpNumberOfBytesWritten=0xc0004299b4*=0x25d, lpOverlapped=0x0) returned 1
	[0199.942] CloseHandle (hObject=0xd4) returned 1
	[0199.942] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0xc000429990 | out: lpFileInformation=0xc000429990*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd5720df0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5720df0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0199.942] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0199.943] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000429b24 | out: lpMode=0xc000429b24) returned 0
	[0199.943] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6500*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc000429ac4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6500*, lpNumberOfBytesWritten=0xc000429ac4*=0x25d, lpOverlapped=0x0) returned 1
	[0199.955] CloseHandle (hObject=0xd4) returned 1
	[0199.956] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), fInfoLevelId=0x0, lpFileInformation=0xc000429aa0 | out: lpFileInformation=0xc000429aa0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5720df0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd5720df0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0199.956] CreateFileW (lpFileName="C:\\MSOCache\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0199.957] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000429c34 | out: lpMode=0xc000429c34) returned 0
	[0199.957] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000a6500*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc000429bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6500*, lpNumberOfBytesWritten=0xc000429bd4*=0x25d, lpOverlapped=0x0) returned 1
	[0199.960] CloseHandle (hObject=0xd4) returned 1
	[0199.961] GetFileAttributesExW (in: lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), fInfoLevelId=0x0, lpFileInformation=0xc000429bb0 | out: lpFileInformation=0xc000429bb0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd575f5f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xd575f5f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0199.961] CreateFileW (lpFileName="C:\\Program Files\\" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0199.961] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0xc000429928 | out: lpFindFileData=0xc000429928*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa36d330, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa36d330, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0199.962] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa36d330, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa36d330, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.962] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0199.962] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0199.962] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa3a185b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3a185b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1
	[0199.962] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3a185b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3a185b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0199.962] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0199.962] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa3d38290, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3d38290, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa3a64870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3a64870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa3cebfd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3cebfd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa3c53a50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3c53a50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa39f2450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa39f2450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa3c53a50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3c53a50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa25907f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa25907f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3c9fd10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3c9fd10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa264eed0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa264eed0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3d12130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3d12130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0199.963] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa3cebfd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3cebfd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1
	[0199.964] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0199.964] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0199.964] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004299c8 | out: lpFindFileData=0xc0004299c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.964] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0199.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\" (normalized: "c:\\program files\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0199.965] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0xc000429818 | out: lpFindFileData=0xc000429818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0199.965] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004298b8 | out: lpFindFileData=0xc0004298b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.965] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004298b8 | out: lpFindFileData=0xc0004298b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0199.965] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004298b8 | out: lpFindFileData=0xc0004298b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.965] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0199.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0199.966] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0xc000429708 | out: lpFindFileData=0xc000429708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0199.966] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.967] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0199.967] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc0004297a8 | out: lpFindFileData=0xc0004297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.967] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0199.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0199.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0xc0004295f8 | out: lpFindFileData=0xc0004295f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0199.988] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.988] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0199.988] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0199.988] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1
	[0199.988] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1
	[0199.989] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1
	[0199.989] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0199.989] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429698 | out: lpFindFileData=0xc000429698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.989] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0199.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0199.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0xc0004294e8 | out: lpFindFileData=0xc0004294e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x88e5a0
	[0200.017] SwitchToThread () returned 1
	[0200.018] SetEvent (hEvent=0x54) returned 1
	[0200.018] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.020] SetEvent (hEvent=0x54) returned 1
	[0200.020] SetEvent (hEvent=0x100) returned 1
	[0200.020] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.020] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0200.020] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0200.020] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1
	[0200.020] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0200.020] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0200.021] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0200.021] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0200.021] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1
	[0200.021] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000429588 | out: lpFindFileData=0xc000429588*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0200.021] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0200.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), fInfoLevelId=0x0, lpFileInformation=0xc000155660 | out: lpFileInformation=0xc000155660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4)) returned 1
	[0200.047] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.068] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.078] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.083] SetEvent (hEvent=0x120) returned 1
	[0200.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20
	[0200.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl", dwFileAttributes=0x20) returned 1
	[0200.085] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.114] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0200.114] ReadFile (in: hFile=0x118, lpBuffer=0xc00037e000, nNumberOfBytesToRead=0x745e, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00037e000*, lpNumberOfBytesRead=0xc000423cec*=0x745e, lpOverlapped=0x0) returned 1
	[0200.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000521a0 | out: pbBuffer=0xc0000521a0) returned 1
	[0200.121] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0200.121] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d8c | out: pbBuffer=0xc000214d8c) returned 1
	[0200.121] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214dbd | out: pbBuffer=0xc000214dbd) returned 1
	[0200.121] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214dc0 | out: pbBuffer=0xc000214dc0) returned 1
	[0200.121] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052250 | out: pbBuffer=0xc000052250) returned 1
	[0200.121] GetFileType (hFile=0x118) returned 0x1
	[0200.121] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=29790) returned 1
	[0200.122] WriteFile (in: hFile=0x118, lpBuffer=0xc000bb6000*, nNumberOfBytesToWrite=0x745e, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc000bb6000*, lpNumberOfBytesWritten=0xc000073ccc*=0x745e, lpOverlapped=0xc000073ce8) returned 1
	[0200.122] GetFileType (hFile=0x118) returned 0x1
	[0200.122] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x745e, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=29790) returned 1
	[0200.123] GetFileType (hFile=0x118) returned 0x1
	[0200.123] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=29790) returned 1
	[0200.123] WriteFile (in: hFile=0x118, lpBuffer=0xc0002c3500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0002c3500*, lpNumberOfBytesWritten=0xc000073ccc*=0x233, lpOverlapped=0xc000073ce8) returned 1
	[0200.123] GetFileType (hFile=0x118) returned 0x1
	[0200.124] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x745e, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=29790) returned 1
	[0200.124] CloseHandle (hObject=0x118) returned 1
	[0200.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.egmwv")) returned 0x20
	[0200.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.127] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20
	[0200.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl", dwFileAttributes=0x20) returned 1
	[0200.132] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.185] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0200.185] ReadFile (in: hFile=0xd4, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x712e, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc000423cec*=0x712e, lpOverlapped=0x0) returned 1
	[0200.191] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a430 | out: pbBuffer=0xc00041a430) returned 1
	[0200.191] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a44a | out: pbBuffer=0xc00041a44a) returned 1
	[0200.191] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0200.191] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d1c | out: pbBuffer=0xc000214d1c) returned 1
	[0200.192] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a470 | out: pbBuffer=0xc00041a470) returned 1
	[0200.192] GetFileType (hFile=0xd4) returned 0x1
	[0200.192] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=28974) returned 1
	[0200.192] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x712e, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc00006fccc*=0x712e, lpOverlapped=0xc00006fce8) returned 1
	[0200.193] GetFileType (hFile=0xd4) returned 0x1
	[0200.193] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x712e, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=28974) returned 1
	[0200.193] GetFileType (hFile=0xd4) returned 0x1
	[0200.193] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=28974) returned 1
	[0200.193] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002bc700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc0002bc700*, lpNumberOfBytesWritten=0xc00006fccc*=0x230, lpOverlapped=0xc00006fce8) returned 1
	[0200.194] GetFileType (hFile=0xd4) returned 0x1
	[0200.194] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x712e, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=28974) returned 1
	[0200.194] CloseHandle (hObject=0xd4) returned 1
	[0200.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.egmwv")) returned 0x20
	[0200.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.198] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20
	[0200.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl", dwFileAttributes=0x20) returned 1
	[0200.205] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.242] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0200.242] ReadFile (in: hFile=0xd4, lpBuffer=0xc0003d6000, nNumberOfBytesToRead=0x9a5b, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003d6000*, lpNumberOfBytesRead=0xc000423cec*=0x9a5b, lpOverlapped=0x0) returned 1
	[0200.262] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0220 | out: pbBuffer=0xc0003a0220) returned 1
	[0200.262] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a023a | out: pbBuffer=0xc0003a023a) returned 1
	[0200.262] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0200.262] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000010b8 | out: pbBuffer=0xc0000010b8) returned 1
	[0200.262] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0260 | out: pbBuffer=0xc0003a0260) returned 1
	[0200.263] GetFileType (hFile=0xd4) returned 0x1
	[0200.263] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=39515) returned 1
	[0200.264] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002ec000*, nNumberOfBytesToWrite=0x9a5b, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesWritten=0xc000151ccc*=0x9a5b, lpOverlapped=0xc000151ce8) returned 1
	[0200.264] GetFileType (hFile=0xd4) returned 0x1
	[0200.265] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x9a5b, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=39515) returned 1
	[0200.265] GetFileType (hFile=0xd4) returned 0x1
	[0200.265] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=39515) returned 1
	[0200.265] WriteFile (in: hFile=0xd4, lpBuffer=0xc000119500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000119500*, lpNumberOfBytesWritten=0xc000151ccc*=0x236, lpOverlapped=0xc000151ce8) returned 1
	[0200.265] GetFileType (hFile=0xd4) returned 0x1
	[0200.265] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x9a5b, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=39515) returned 1
	[0200.265] CloseHandle (hObject=0xd4) returned 1
	[0200.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.egmwv")) returned 0x20
	[0200.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20
	[0200.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll", dwFileAttributes=0x20) returned 1
	[0200.267] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.egmwv"), dwFlags=0x1) returned 1
	[0200.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.268] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0200.268] ReadFile (in: hFile=0xd4, lpBuffer=0xc0002fe000, nNumberOfBytesToRead=0x3a18, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesRead=0xc00038dcec*=0x3a18, lpOverlapped=0x0) returned 1
	[0200.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a03d0 | out: pbBuffer=0xc0003a03d0) returned 1
	[0200.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a03ea | out: pbBuffer=0xc0003a03ea) returned 1
	[0200.277] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001a02 | out: pbBuffer=0xc000001a02) returned 1
	[0200.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001a48 | out: pbBuffer=0xc000001a48) returned 1
	[0200.278] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0410 | out: pbBuffer=0xc0003a0410) returned 1
	[0200.278] GetFileType (hFile=0xd4) returned 0x1
	[0200.278] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=14872) returned 1
	[0200.278] WriteFile (in: hFile=0xd4, lpBuffer=0xc00032c000*, nNumberOfBytesToWrite=0x3a18, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00032c000*, lpNumberOfBytesWritten=0xc000151ccc*=0x3a18, lpOverlapped=0xc000151ce8) returned 1
	[0200.279] GetFileType (hFile=0xd4) returned 0x1
	[0200.279] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x3a18, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=14872) returned 1
	[0200.279] GetFileType (hFile=0xd4) returned 0x1
	[0200.279] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=14872) returned 1
	[0200.279] WriteFile (in: hFile=0xd4, lpBuffer=0xc00030ee00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00030ee00*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0200.279] GetFileType (hFile=0xd4) returned 0x1
	[0200.279] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x3a18, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=14872) returned 1
	[0200.280] CloseHandle (hObject=0xd4) returned 1
	[0200.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.egmwv")) returned 0x20
	[0200.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.egmwv", dwFileAttributes=0x21) returned 1
	[0200.287] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.435] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.438] SetEvent (hEvent=0x148) returned 1
	[0200.438] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.441] SetEvent (hEvent=0x148) returned 1
	[0200.441] SetEvent (hEvent=0x120) returned 1
	[0200.441] SwitchToThread () returned 1
	[0200.446] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.504] SetEvent (hEvent=0x120) returned 1
	[0200.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20
	[0200.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 1
	[0200.506] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.518] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.526] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000163cc4 | out: lpMode=0xc000163cc4) returned 0
	[0200.526] ReadFile (in: hFile=0xd4, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x2340, lpNumberOfBytesRead=0xc000163cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc000163cec*=0x2340, lpOverlapped=0x0) returned 1
	[0200.532] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0200.532] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0200.532] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0200.532] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003943e | out: pbBuffer=0xc00003943e) returned 1
	[0200.532] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003945c | out: pbBuffer=0xc00003945c) returned 1
	[0200.532] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394b9 | out: pbBuffer=0xc0000394b9) returned 1
	[0200.533] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0200.533] GetFileType (hFile=0xd4) returned 0x1
	[0200.533] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=9024) returned 1
	[0200.533] WriteFile (in: hFile=0xd4, lpBuffer=0xc0004a2000*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004a2000*, lpNumberOfBytesWritten=0xc000151ccc*=0x2340, lpOverlapped=0xc000151ce8) returned 1
	[0200.534] GetFileType (hFile=0xd4) returned 0x1
	[0200.534] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2340, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=9024) returned 1
	[0200.534] GetFileType (hFile=0xd4) returned 0x1
	[0200.534] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=9024) returned 1
	[0200.534] WriteFile (in: hFile=0xd4, lpBuffer=0xc00019d500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00019d500*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0200.534] GetFileType (hFile=0xd4) returned 0x1
	[0200.534] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2340, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=9024) returned 1
	[0200.535] CloseHandle (hObject=0xd4) returned 1
	[0200.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.egmwv")) returned 0x20
	[0200.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.546] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.554] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.590] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.620] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.652] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.670] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.691] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.710] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.733] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.741] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.761] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.785] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.801] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.810] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.821] SetEvent (hEvent=0x100) returned 1
	[0200.821] SetEvent (hEvent=0x144) returned 1
	[0200.822] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0200.824] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.824] SetEvent (hEvent=0x144) returned 1
	[0200.824] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0200.827] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0200.827] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0201.362] SetEvent (hEvent=0x144) returned 1
	[0201.362] SetEvent (hEvent=0x148) returned 1
	[0201.363] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0201.372] SetEvent (hEvent=0x144) returned 1
	[0201.373] SetEvent (hEvent=0x148) returned 1
	[0201.373] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0201.383] SetEvent (hEvent=0x148) returned 1
	[0201.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20
	[0201.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x20) returned 1
	[0201.395] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0201.396] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0201.396] ReadFile (in: hFile=0xe8, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x5062, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc000387cec*=0x5062, lpOverlapped=0x0) returned 1
	[0201.427] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0201.427] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0201.428] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0201.428] GetFileType (hFile=0xe8) returned 0x1
	[0201.428] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00035bca0*=20578) returned 1
	[0201.428] WriteFile (in: hFile=0xe8, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x5062, lpNumberOfBytesWritten=0xc00035bccc, lpOverlapped=0xc00035bce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc00035bccc*=0x5062, lpOverlapped=0xc00035bce8) returned 1
	[0201.429] GetFileType (hFile=0xe8) returned 0x1
	[0201.429] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5062, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00035bca0*=20578) returned 1
	[0201.429] GetFileType (hFile=0xe8) returned 0x1
	[0201.429] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00035bca0*=20578) returned 1
	[0201.429] WriteFile (in: hFile=0xe8, lpBuffer=0xc00014b500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00035bccc, lpOverlapped=0xc00035bce8 | out: lpBuffer=0xc00014b500*, lpNumberOfBytesWritten=0xc00035bccc*=0x227, lpOverlapped=0xc00035bce8) returned 1
	[0201.429] GetFileType (hFile=0xe8) returned 0x1
	[0201.430] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5062, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00035bca0*=20578) returned 1
	[0201.430] CloseHandle (hObject=0xe8) returned 1
	[0201.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.egmwv")) returned 0x20
	[0201.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1
	[0201.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf")) returned 0x20
	[0201.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x20) returned 1
	[0201.433] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0201.434] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0201.434] ReadFile (in: hFile=0xe8, lpBuffer=0xc000376000, nNumberOfBytesToRead=0xc48, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc000387cec*=0xc48, lpOverlapped=0x0) returned 1
	[0201.479] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ce0 | out: pbBuffer=0xc000052ce0) returned 1
	[0201.479] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1a02 | out: pbBuffer=0xc0002c1a02) returned 1
	[0201.479] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0201.479] GetFileType (hFile=0xe8) returned 0x1
	[0201.479] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00035bca0*=3144) returned 1
	[0201.479] WriteFile (in: hFile=0xe8, lpBuffer=0xc000132000*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0xc00035bccc, lpOverlapped=0xc00035bce8 | out: lpBuffer=0xc000132000*, lpNumberOfBytesWritten=0xc00035bccc*=0xc48, lpOverlapped=0xc00035bce8) returned 1
	[0201.480] GetFileType (hFile=0xe8) returned 0x1
	[0201.480] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xc48, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00035bca0*=3144) returned 1
	[0201.480] GetFileType (hFile=0xe8) returned 0x1
	[0201.480] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00035bca0*=3144) returned 1
	[0201.480] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000b0e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00035bccc, lpOverlapped=0xc00035bce8 | out: lpBuffer=0xc0000b0e00*, lpNumberOfBytesWritten=0xc00035bccc*=0x224, lpOverlapped=0xc00035bce8) returned 1
	[0201.481] GetFileType (hFile=0xe8) returned 0x1
	[0201.481] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xc48, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00035bca0*=3144) returned 1
	[0201.481] CloseHandle (hObject=0xe8) returned 1
	[0201.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf.egmwv")) returned 0x20
	[0201.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1
	[0201.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf")) returned 0x20
	[0201.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x20) returned 1
	[0201.483] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0201.484] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0201.484] ReadFile (in: hFile=0xe8, lpBuffer=0xc000134000, nNumberOfBytesToRead=0x1e7c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000134000*, lpNumberOfBytesRead=0xc000387cec*=0x1e7c, lpOverlapped=0x0) returned 1
	[0201.507] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e60 | out: pbBuffer=0xc000052e60) returned 1
	[0201.507] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052e7a | out: pbBuffer=0xc000052e7a) returned 1
	[0201.507] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f2702 | out: pbBuffer=0xc0000f2702) returned 1
	[0201.508] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ea0 | out: pbBuffer=0xc000052ea0) returned 1
	[0201.508] GetFileType (hFile=0xe8) returned 0x1
	[0201.508] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00035bca0*=7804) returned 1
	[0201.508] WriteFile (in: hFile=0xe8, lpBuffer=0xc000264000*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0xc00035bccc, lpOverlapped=0xc00035bce8 | out: lpBuffer=0xc000264000*, lpNumberOfBytesWritten=0xc00035bccc*=0x1e7c, lpOverlapped=0xc00035bce8) returned 1
	[0201.508] GetFileType (hFile=0xe8) returned 0x1
	[0201.509] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1e7c, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00035bca0*=7804) returned 1
	[0201.509] GetFileType (hFile=0xe8) returned 0x1
	[0201.509] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00035bca0*=7804) returned 1
	[0201.509] WriteFile (in: hFile=0xe8, lpBuffer=0xc000100700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00035bccc, lpOverlapped=0xc00035bce8 | out: lpBuffer=0xc000100700*, lpNumberOfBytesWritten=0xc00035bccc*=0x233, lpOverlapped=0xc00035bce8) returned 1
	[0201.510] GetFileType (hFile=0xe8) returned 0x1
	[0201.510] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1e7c, lpNewFilePointer=0xc00035bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00035bca0*=7804) returned 1
	[0201.510] CloseHandle (hObject=0xe8) returned 1
	[0201.515] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0201.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf.egmwv")) returned 0x20
	[0201.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.524] SetEvent (hEvent=0x144) returned 1
	[0201.524] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0201.531] SetEvent (hEvent=0xc4) returned 1
	[0201.531] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0201.534] SetEvent (hEvent=0x108) returned 1
	[0201.534] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0201.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20
	[0201.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x20) returned 1
	[0201.541] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0201.751] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0201.751] ReadFile (in: hFile=0xd8, lpBuffer=0xc0004ac000, nNumberOfBytesToRead=0x66dc, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesRead=0xc000161cec*=0x66dc, lpOverlapped=0x0) returned 1
	[0201.758] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0201.758] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001a02 | out: pbBuffer=0xc000001a02) returned 1
	[0201.758] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0201.758] GetFileType (hFile=0xd8) returned 0x1
	[0201.758] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=26332) returned 1
	[0201.759] WriteFile (in: hFile=0xd8, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x66dc, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc000151ccc*=0x66dc, lpOverlapped=0xc000151ce8) returned 1
	[0201.759] GetFileType (hFile=0xd8) returned 0x1
	[0201.759] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x66dc, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=26332) returned 1
	[0201.759] GetFileType (hFile=0xd8) returned 0x1
	[0201.760] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=26332) returned 1
	[0201.760] WriteFile (in: hFile=0xd8, lpBuffer=0xc000142700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000142700*, lpNumberOfBytesWritten=0xc000151ccc*=0x233, lpOverlapped=0xc000151ce8) returned 1
	[0201.760] GetFileType (hFile=0xd8) returned 0x1
	[0201.760] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x66dc, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=26332) returned 1
	[0201.760] CloseHandle (hObject=0xd8) returned 1
	[0201.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.egmwv")) returned 0x20
	[0201.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.766] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0212.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf")) returned 0x20
	[0212.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF", dwFileAttributes=0x20) returned 1
	[0212.592] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0212.842] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000513cc4 | out: lpMode=0xc000513cc4) returned 0
	[0212.842] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x69cc, lpNumberOfBytesRead=0xc000513cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc000513cec*=0x69cc, lpOverlapped=0x0) returned 1
	[0212.849] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0212.849] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b7a | out: pbBuffer=0xc000052b7a) returned 1
	[0212.849] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0212.849] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001026 | out: pbBuffer=0xc000001026) returned 1
	[0212.849] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000010cf | out: pbBuffer=0xc0000010cf) returned 1
	[0212.850] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0212.850] GetFileType (hFile=0xcc) returned 0x1
	[0212.850] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=27084) returned 1
	[0212.850] WriteFile (in: hFile=0xcc, lpBuffer=0xc000226000*, nNumberOfBytesToWrite=0x69cc, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000226000*, lpNumberOfBytesWritten=0xc000183ccc*=0x69cc, lpOverlapped=0xc000183ce8) returned 1
	[0212.851] GetFileType (hFile=0xcc) returned 0x1
	[0212.851] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x69cc, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=27084) returned 1
	[0212.851] GetFileType (hFile=0xcc) returned 0x1
	[0212.852] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=27084) returned 1
	[0212.852] WriteFile (in: hFile=0xcc, lpBuffer=0xc000077500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000077500*, lpNumberOfBytesWritten=0xc000183ccc*=0x230, lpOverlapped=0xc000183ce8) returned 1
	[0212.852] GetFileType (hFile=0xcc) returned 0x1
	[0212.852] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x69cc, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=27084) returned 1
	[0212.852] CloseHandle (hObject=0xcc) returned 1
	[0212.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf.egmwv")) returned 0x20
	[0212.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.872] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0213.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf")) returned 0x20
	[0213.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF", dwFileAttributes=0x20) returned 1
	[0213.607] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0213.671] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0213.671] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003aa000, nNumberOfBytesToRead=0x1374, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003aa000*, lpNumberOfBytesRead=0xc000169cec*=0x1374, lpOverlapped=0x0) returned 1
	[0213.678] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0213.678] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1f02 | out: pbBuffer=0xc0002c1f02) returned 1
	[0213.678] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1f08 | out: pbBuffer=0xc0002c1f08) returned 1
	[0213.678] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1f6b | out: pbBuffer=0xc0002c1f6b) returned 1
	[0213.678] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0213.678] SetEvent (hEvent=0x108) returned 1
	[0213.678] GetFileType (hFile=0xa8) returned 0x1
	[0213.679] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=4980) returned 1
	[0213.679] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003ce000*, nNumberOfBytesToWrite=0x1374, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc0003ce000*, lpNumberOfBytesWritten=0xc000203ccc*=0x1374, lpOverlapped=0xc000203ce8) returned 1
	[0213.679] GetFileType (hFile=0xa8) returned 0x1
	[0213.679] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1374, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=4980) returned 1
	[0213.679] GetFileType (hFile=0xa8) returned 0x1
	[0213.680] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=4980) returned 1
	[0213.680] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003b6e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc0003b6e00*, lpNumberOfBytesWritten=0xc000203ccc*=0x22d, lpOverlapped=0xc000203ce8) returned 1
	[0213.680] GetFileType (hFile=0xa8) returned 0x1
	[0213.680] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1374, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=4980) returned 1
	[0213.680] CloseHandle (hObject=0xa8) returned 1
	[0213.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf.egmwv")) returned 0x20
	[0213.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.712] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0213.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf")) returned 0x20
	[0213.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF", dwFileAttributes=0x20) returned 1
	[0213.872] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0213.876] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.925] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0213.925] ReadFile (in: hFile=0x170, lpBuffer=0xc0000ec000, nNumberOfBytesToRead=0x1ba0, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ec000*, lpNumberOfBytesRead=0xc000429cec*=0x1ba0, lpOverlapped=0x0) returned 1
	[0213.962] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0213.962] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b662a | out: pbBuffer=0xc0002b662a) returned 1
	[0213.962] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000cbd02 | out: pbBuffer=0xc0000cbd02) returned 1
	[0213.962] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000cbd63 | out: pbBuffer=0xc0000cbd63) returned 1
	[0213.962] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6650 | out: pbBuffer=0xc0002b6650) returned 1
	[0213.963] GetFileType (hFile=0x170) returned 0x1
	[0213.963] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000159ca0*=7072) returned 1
	[0213.963] WriteFile (in: hFile=0x170, lpBuffer=0xc0002fa000*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0xc000159ccc, lpOverlapped=0xc000159ce8 | out: lpBuffer=0xc0002fa000*, lpNumberOfBytesWritten=0xc000159ccc*=0x1ba0, lpOverlapped=0xc000159ce8) returned 1
	[0213.963] GetFileType (hFile=0x170) returned 0x1
	[0213.963] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1ba0, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000159ca0*=7072) returned 1
	[0213.964] GetFileType (hFile=0x170) returned 0x1
	[0213.964] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000159ca0*=7072) returned 1
	[0213.964] WriteFile (in: hFile=0x170, lpBuffer=0xc0002fe000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000159ccc, lpOverlapped=0xc000159ce8 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesWritten=0xc000159ccc*=0x22a, lpOverlapped=0xc000159ce8) returned 1
	[0213.964] GetFileType (hFile=0x170) returned 0x1
	[0213.964] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1ba0, lpNewFilePointer=0xc000159ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000159ca0*=7072) returned 1
	[0213.964] CloseHandle (hObject=0x170) returned 1
	[0213.980] SetEvent (hEvent=0xe4) returned 1
	[0213.980] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0213.983] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0213.983] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0213.986] SetEvent (hEvent=0xac) returned 1
	[0213.986] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0213.991] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0213.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf.egmwv")) returned 0x20
	[0213.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.999] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.006] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.043] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf")) returned 0x20
	[0214.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF", dwFileAttributes=0x20) returned 1
	[0214.052] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.098] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0214.098] ReadFile (in: hFile=0xcc, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0xbf4, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc00038dcec*=0xbf4, lpOverlapped=0x0) returned 1
	[0214.105] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0214.105] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62aa | out: pbBuffer=0xc0002b62aa) returned 1
	[0214.105] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f4202 | out: pbBuffer=0xc0000f4202) returned 1
	[0214.105] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000f425e | out: pbBuffer=0xc0000f425e) returned 1
	[0214.105] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000f42a0 | out: pbBuffer=0xc0000f42a0) returned 1
	[0214.106] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0214.106] GetFileType (hFile=0xcc) returned 0x1
	[0214.106] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015fca0*=3060) returned 1
	[0214.106] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0xbf4, lpNumberOfBytesWritten=0xc00015fccc, lpOverlapped=0xc00015fce8 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc00015fccc*=0xbf4, lpOverlapped=0xc00015fce8) returned 1
	[0214.107] GetFileType (hFile=0xcc) returned 0x1
	[0214.107] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xbf4, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015fca0*=3060) returned 1
	[0214.107] GetFileType (hFile=0xcc) returned 0x1
	[0214.107] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015fca0*=3060) returned 1
	[0214.108] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000f2e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00015fccc, lpOverlapped=0xc00015fce8 | out: lpBuffer=0xc0000f2e00*, lpNumberOfBytesWritten=0xc00015fccc*=0x230, lpOverlapped=0xc00015fce8) returned 1
	[0214.108] GetFileType (hFile=0xcc) returned 0x1
	[0214.108] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xbf4, lpNewFilePointer=0xc00015fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015fca0*=3060) returned 1
	[0214.108] CloseHandle (hObject=0xcc) returned 1
	[0214.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf.egmwv")) returned 0x20
	[0214.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.115] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.125] SetEvent (hEvent=0xac) returned 1
	[0214.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf")) returned 0x20
	[0214.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF", dwFileAttributes=0x20) returned 1
	[0214.131] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.159] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0214.159] ReadFile (in: hFile=0x118, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x138c, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000169cec*=0x138c, lpOverlapped=0x0) returned 1
	[0214.181] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0214.181] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1d02 | out: pbBuffer=0xc0002c1d02) returned 1
	[0214.181] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1d19 | out: pbBuffer=0xc0002c1d19) returned 1
	[0214.181] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1d1f | out: pbBuffer=0xc0002c1d1f) returned 1
	[0214.181] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0214.181] GetFileType (hFile=0x118) returned 0x1
	[0214.181] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5004) returned 1
	[0214.182] WriteFile (in: hFile=0x118, lpBuffer=0xc0001f8000*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f8000*, lpNumberOfBytesWritten=0xc000155ccc*=0x138c, lpOverlapped=0xc000155ce8) returned 1
	[0214.182] GetFileType (hFile=0x118) returned 0x1
	[0214.182] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x138c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5004) returned 1
	[0214.182] GetFileType (hFile=0x118) returned 0x1
	[0214.182] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5004) returned 1
	[0214.183] WriteFile (in: hFile=0x118, lpBuffer=0xc0001ef180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001ef180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0214.183] GetFileType (hFile=0x118) returned 0x1
	[0214.183] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x138c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5004) returned 1
	[0214.183] CloseHandle (hObject=0x118) returned 1
	[0214.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf.egmwv")) returned 0x20
	[0214.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.193] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.207] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.222] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.244] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.270] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg")) returned 0x20
	[0214.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG", dwFileAttributes=0x20) returned 1
	[0214.296] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0214.332] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00014bcc4 | out: lpMode=0xc00014bcc4) returned 0
	[0214.332] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0xc056, lpNumberOfBytesRead=0xc00014bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc00014bcec*=0xc056, lpOverlapped=0x0) returned 1
	[0214.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206280 | out: pbBuffer=0xc000206280) returned 1
	[0214.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020629a | out: pbBuffer=0xc00020629a) returned 1
	[0214.353] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0214.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002159c9 | out: pbBuffer=0xc0002159c9) returned 1
	[0214.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0214.354] GetFileType (hFile=0xa8) returned 0x1
	[0214.354] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=49238) returned 1
	[0214.354] WriteFile (in: hFile=0xa8, lpBuffer=0xc00030e000*, nNumberOfBytesToWrite=0xc056, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesWritten=0xc000309ccc*=0xc056, lpOverlapped=0xc000309ce8) returned 1
	[0214.355] GetFileType (hFile=0xa8) returned 0x1
	[0214.355] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc056, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=49238) returned 1
	[0214.355] GetFileType (hFile=0xa8) returned 0x1
	[0214.355] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=49238) returned 1
	[0214.355] WriteFile (in: hFile=0xa8, lpBuffer=0xc0004a6e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc0004a6e00*, lpNumberOfBytesWritten=0xc000309ccc*=0x22d, lpOverlapped=0xc000309ce8) returned 1
	[0214.356] GetFileType (hFile=0xa8) returned 0x1
	[0214.356] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc056, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=49238) returned 1
	[0214.356] CloseHandle (hObject=0xa8) returned 1
	[0214.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.egmwv")) returned 0x20
	[0214.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.360] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.362] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.369] SetEvent (hEvent=0xac) returned 1
	[0214.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg")) returned 0x20
	[0214.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG", dwFileAttributes=0x20) returned 1
	[0214.373] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.392] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0214.396] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0214.396] ReadFile (in: hFile=0x164, lpBuffer=0xc00033c000, nNumberOfBytesToRead=0x8fd4, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00033c000*, lpNumberOfBytesRead=0xc000387cec*=0x8fd4, lpOverlapped=0x0) returned 1
	[0214.501] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b80 | out: pbBuffer=0xc000052b80) returned 1
	[0214.501] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b9a | out: pbBuffer=0xc000052b9a) returned 1
	[0214.501] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039902 | out: pbBuffer=0xc000039902) returned 1
	[0214.501] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039939 | out: pbBuffer=0xc000039939) returned 1
	[0214.501] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bc0 | out: pbBuffer=0xc000052bc0) returned 1
	[0214.502] GetFileType (hFile=0x164) returned 0x1
	[0214.502] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=36820) returned 1
	[0214.502] WriteFile (in: hFile=0x164, lpBuffer=0xc000580000*, nNumberOfBytesToWrite=0x8fd4, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000580000*, lpNumberOfBytesWritten=0xc000309ccc*=0x8fd4, lpOverlapped=0xc000309ce8) returned 1
	[0214.503] GetFileType (hFile=0x164) returned 0x1
	[0214.503] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8fd4, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=36820) returned 1
	[0214.503] GetFileType (hFile=0x164) returned 0x1
	[0214.503] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=36820) returned 1
	[0214.503] WriteFile (in: hFile=0x164, lpBuffer=0xc000537500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc000537500*, lpNumberOfBytesWritten=0xc000309ccc*=0x236, lpOverlapped=0xc000309ce8) returned 1
	[0214.504] GetFileType (hFile=0x164) returned 0x1
	[0214.504] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8fd4, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=36820) returned 1
	[0214.504] CloseHandle (hObject=0x164) returned 1
	[0214.513] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.egmwv")) returned 0x20
	[0214.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.576] SetEvent (hEvent=0x84) returned 1
	[0214.576] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0214.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf")) returned 0x20
	[0214.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF", dwFileAttributes=0x20) returned 1
	[0214.652] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.680] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0214.680] ReadFile (in: hFile=0x118, lpBuffer=0xc0005b2000, nNumberOfBytesToRead=0x212e, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0005b2000*, lpNumberOfBytesRead=0xc000387cec*=0x212e, lpOverlapped=0x0) returned 1
	[0214.711] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053030 | out: pbBuffer=0xc000053030) returned 1
	[0214.712] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005304a | out: pbBuffer=0xc00005304a) returned 1
	[0214.712] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000c6002 | out: pbBuffer=0xc0000c6002) returned 1
	[0214.712] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000c606a | out: pbBuffer=0xc0000c606a) returned 1
	[0214.712] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053070 | out: pbBuffer=0xc000053070) returned 1
	[0214.712] GetFileType (hFile=0x118) returned 0x1
	[0214.712] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=8494) returned 1
	[0214.712] WriteFile (in: hFile=0x118, lpBuffer=0xc00022c000*, nNumberOfBytesToWrite=0x212e, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc00022c000*, lpNumberOfBytesWritten=0xc000411ccc*=0x212e, lpOverlapped=0xc000411ce8) returned 1
	[0214.713] GetFileType (hFile=0x118) returned 0x1
	[0214.713] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x212e, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=8494) returned 1
	[0214.713] GetFileType (hFile=0x118) returned 0x1
	[0214.713] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=8494) returned 1
	[0214.713] WriteFile (in: hFile=0x118, lpBuffer=0xc000224700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000224700*, lpNumberOfBytesWritten=0xc000411ccc*=0x22a, lpOverlapped=0xc000411ce8) returned 1
	[0214.714] GetFileType (hFile=0x118) returned 0x1
	[0214.714] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x212e, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=8494) returned 1
	[0214.714] CloseHandle (hObject=0x118) returned 1
	[0214.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf.egmwv")) returned 0x20
	[0214.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.736] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0215.160] SetEvent (hEvent=0xe4) returned 1
	[0215.160] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.093] SetEvent (hEvent=0x144) returned 1
	[0216.093] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.096] SetEvent (hEvent=0x144) returned 1
	[0216.096] SetEvent (hEvent=0x90) returned 1
	[0216.096] SwitchToThread () returned 1
	[0216.108] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.123] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.155] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.180] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.204] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.212] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.233] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.266] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.285] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.294] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.316] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.323] SetEvent (hEvent=0x90) returned 1
	[0216.324] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0216.329] SetEvent (hEvent=0x90) returned 1
	[0216.329] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0216.332] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.332] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.621] SetEvent (hEvent=0x90) returned 1
	[0216.622] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.625] SetEvent (hEvent=0x90) returned 1
	[0216.625] SwitchToThread () returned 1
	[0216.627] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.639] SetEvent (hEvent=0x104) returned 1
	[0216.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg")) returned 0x20
	[0216.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x20) returned 1
	[0216.640] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.665] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0216.665] ReadFile (in: hFile=0xa8, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x67a3, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc00038dcec*=0x67a3, lpOverlapped=0x0) returned 1
	[0216.672] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0216.672] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0216.672] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0216.672] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001065 | out: pbBuffer=0xc000001065) returned 1
	[0216.673] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0216.673] GetFileType (hFile=0xa8) returned 0x1
	[0216.673] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=26531) returned 1
	[0216.673] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003d6000*, nNumberOfBytesToWrite=0x67a3, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc0003d6000*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x67a3, lpOverlapped=0xc0002b5ce8) returned 1
	[0216.674] GetFileType (hFile=0xa8) returned 0x1
	[0216.674] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x67a3, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=26531) returned 1
	[0216.674] GetFileType (hFile=0xa8) returned 0x1
	[0216.675] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=26531) returned 1
	[0216.675] WriteFile (in: hFile=0xa8, lpBuffer=0xc0002c5500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc0002c5500*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x233, lpOverlapped=0xc0002b5ce8) returned 1
	[0216.675] GetFileType (hFile=0xa8) returned 0x1
	[0216.675] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x67a3, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=26531) returned 1
	[0216.675] CloseHandle (hObject=0xa8) returned 1
	[0216.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.egmwv")) returned 0x20
	[0216.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.678] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.681] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.683] SetEvent (hEvent=0x104) returned 1
	[0216.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg")) returned 0x20
	[0216.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x20) returned 1
	[0216.684] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.713] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0216.713] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003bc000, nNumberOfBytesToRead=0x7d26, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesRead=0xc000387cec*=0x7d26, lpOverlapped=0x0) returned 1
	[0216.720] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0216.720] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d0a | out: pbBuffer=0xc000052d0a) returned 1
	[0216.721] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001d02 | out: pbBuffer=0xc000001d02) returned 1
	[0216.721] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001d07 | out: pbBuffer=0xc000001d07) returned 1
	[0216.721] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0216.721] GetFileType (hFile=0xcc) returned 0x1
	[0216.721] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=32038) returned 1
	[0216.722] WriteFile (in: hFile=0xcc, lpBuffer=0xc0004b4000*, nNumberOfBytesToWrite=0x7d26, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc0004b4000*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x7d26, lpOverlapped=0xc0002b5ce8) returned 1
	[0216.722] GetFileType (hFile=0xcc) returned 0x1
	[0216.723] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7d26, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=32038) returned 1
	[0216.723] GetFileType (hFile=0xcc) returned 0x1
	[0216.723] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b5ca0*=32038) returned 1
	[0216.723] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003c8e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0002b5ccc, lpOverlapped=0xc0002b5ce8 | out: lpBuffer=0xc0003c8e00*, lpNumberOfBytesWritten=0xc0002b5ccc*=0x233, lpOverlapped=0xc0002b5ce8) returned 1
	[0216.724] GetFileType (hFile=0xcc) returned 0x1
	[0216.724] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x7d26, lpNewFilePointer=0xc0002b5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b5ca0*=32038) returned 1
	[0216.724] CloseHandle (hObject=0xcc) returned 1
	[0216.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.egmwv")) returned 0x20
	[0216.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.731] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg")) returned 0x20
	[0216.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x20) returned 1
	[0216.738] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.egmwv"), dwFlags=0x1) returned 1
	[0216.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0216.776] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0216.776] ReadFile (in: hFile=0xe8, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0x40e7, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc000387cec*=0x40e7, lpOverlapped=0x0) returned 1
	[0216.781] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0216.781] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0216.781] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039255 | out: pbBuffer=0xc000039255) returned 1
	[0216.781] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0216.781] GetFileType (hFile=0xe8) returned 0x1
	[0216.782] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16615) returned 1
	[0216.782] WriteFile (in: hFile=0xe8, lpBuffer=0xc00034a000*, nNumberOfBytesToWrite=0x40e7, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x40e7, lpOverlapped=0xc000155ce8) returned 1
	[0216.782] GetFileType (hFile=0xe8) returned 0x1
	[0216.782] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x40e7, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16615) returned 1
	[0216.783] GetFileType (hFile=0xe8) returned 0x1
	[0216.783] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16615) returned 1
	[0216.783] WriteFile (in: hFile=0xe8, lpBuffer=0xc00042f880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00042f880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0216.783] GetFileType (hFile=0xe8) returned 0x1
	[0216.783] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x40e7, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16615) returned 1
	[0216.783] CloseHandle (hObject=0xe8) returned 1
	[0216.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.egmwv")) returned 0x20
	[0216.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0216.788] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.803] SetEvent (hEvent=0x90) returned 1
	[0216.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf")) returned 0x20
	[0216.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x20) returned 1
	[0216.805] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.833] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0216.833] ReadFile (in: hFile=0xa8, lpBuffer=0xc00006c000, nNumberOfBytesToRead=0x1e8e, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00006c000*, lpNumberOfBytesRead=0xc0002d3cec*=0x1e8e, lpOverlapped=0x0) returned 1
	[0216.838] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6120 | out: pbBuffer=0xc0002b6120) returned 1
	[0216.838] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0216.838] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6160 | out: pbBuffer=0xc0002b6160) returned 1
	[0216.838] GetFileType (hFile=0xa8) returned 0x1
	[0216.838] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=7822) returned 1
	[0216.838] WriteFile (in: hFile=0xa8, lpBuffer=0xc000368000*, nNumberOfBytesToWrite=0x1e8e, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc000368000*, lpNumberOfBytesWritten=0xc000381ccc*=0x1e8e, lpOverlapped=0xc000381ce8) returned 1
	[0216.839] GetFileType (hFile=0xa8) returned 0x1
	[0216.839] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1e8e, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=7822) returned 1
	[0216.839] GetFileType (hFile=0xa8) returned 0x1
	[0216.839] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=7822) returned 1
	[0216.839] WriteFile (in: hFile=0xa8, lpBuffer=0xc000199500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc000199500*, lpNumberOfBytesWritten=0xc000381ccc*=0x230, lpOverlapped=0xc000381ce8) returned 1
	[0216.842] GetFileType (hFile=0xa8) returned 0x1
	[0216.842] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1e8e, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=7822) returned 1
	[0216.842] CloseHandle (hObject=0xa8) returned 1
	[0216.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf.egmwv")) returned 0x20
	[0216.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.844] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.855] SetEvent (hEvent=0x90) returned 1
	[0216.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf")) returned 0x20
	[0216.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x20) returned 1
	[0216.857] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0216.884] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0216.884] ReadFile (in: hFile=0xcc, lpBuffer=0xc000166000, nNumberOfBytesToRead=0x6fd2, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000166000*, lpNumberOfBytesRead=0xc000429cec*=0x6fd2, lpOverlapped=0x0) returned 1
	[0216.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0216.889] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1902 | out: pbBuffer=0xc0002c1902) returned 1
	[0216.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0216.889] GetFileType (hFile=0xcc) returned 0x1
	[0216.890] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=28626) returned 1
	[0216.890] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000ee000*, nNumberOfBytesToWrite=0x6fd2, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc0000ee000*, lpNumberOfBytesWritten=0xc000381ccc*=0x6fd2, lpOverlapped=0xc000381ce8) returned 1
	[0216.890] GetFileType (hFile=0xcc) returned 0x1
	[0216.890] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6fd2, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=28626) returned 1
	[0216.891] GetFileType (hFile=0xcc) returned 0x1
	[0216.891] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=28626) returned 1
	[0216.891] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003f6e00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc0003f6e00*, lpNumberOfBytesWritten=0xc000381ccc*=0x236, lpOverlapped=0xc000381ce8) returned 1
	[0216.891] GetFileType (hFile=0xcc) returned 0x1
	[0216.892] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6fd2, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=28626) returned 1
	[0216.892] CloseHandle (hObject=0xcc) returned 1
	[0216.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf.egmwv")) returned 0x20
	[0216.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.893] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf")) returned 0x20
	[0216.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x20) returned 1
	[0216.900] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf.egmwv"), dwFlags=0x1) returned 1
	[0216.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0216.938] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0216.938] ReadFile (in: hFile=0xa8, lpBuffer=0xc000318000, nNumberOfBytesToRead=0x1c88, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000318000*, lpNumberOfBytesRead=0xc000429cec*=0x1c88, lpOverlapped=0x0) returned 1
	[0216.944] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0216.944] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0216.944] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002ed202 | out: pbBuffer=0xc0002ed202) returned 1
	[0216.944] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002ed223 | out: pbBuffer=0xc0002ed223) returned 1
	[0216.944] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002ed260 | out: pbBuffer=0xc0002ed260) returned 1
	[0216.944] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0216.945] GetFileType (hFile=0xa8) returned 0x1
	[0216.945] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=7304) returned 1
	[0216.945] WriteFile (in: hFile=0xa8, lpBuffer=0xc00032a000*, nNumberOfBytesToWrite=0x1c88, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc00032a000*, lpNumberOfBytesWritten=0xc000381ccc*=0x1c88, lpOverlapped=0xc000381ce8) returned 1
	[0216.945] GetFileType (hFile=0xa8) returned 0x1
	[0216.945] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1c88, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=7304) returned 1
	[0216.945] GetFileType (hFile=0xa8) returned 0x1
	[0216.946] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000381ca0*=7304) returned 1
	[0216.946] WriteFile (in: hFile=0xa8, lpBuffer=0xc000330000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000381ccc, lpOverlapped=0xc000381ce8 | out: lpBuffer=0xc000330000*, lpNumberOfBytesWritten=0xc000381ccc*=0x227, lpOverlapped=0xc000381ce8) returned 1
	[0216.946] GetFileType (hFile=0xa8) returned 0x1
	[0216.946] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1c88, lpNewFilePointer=0xc000381ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000381ca0*=7304) returned 1
	[0216.946] CloseHandle (hObject=0xa8) returned 1
	[0216.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf.egmwv")) returned 0x20
	[0216.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0216.952] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0216.964] SetEvent (hEvent=0xc4) returned 1
	[0216.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf")) returned 0x20
	[0216.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x20) returned 1
	[0216.972] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.009] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0217.009] ReadFile (in: hFile=0xcc, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x62e0, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000429cec*=0x62e0, lpOverlapped=0x0) returned 1
	[0217.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0217.014] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000468802 | out: pbBuffer=0xc000468802) returned 1
	[0217.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0217.014] GetFileType (hFile=0xcc) returned 0x1
	[0217.015] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=25312) returned 1
	[0217.015] WriteFile (in: hFile=0xcc, lpBuffer=0xc00029e000*, nNumberOfBytesToWrite=0x62e0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesWritten=0xc000155ccc*=0x62e0, lpOverlapped=0xc000155ce8) returned 1
	[0217.015] GetFileType (hFile=0xcc) returned 0x1
	[0217.015] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x62e0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=25312) returned 1
	[0217.016] GetFileType (hFile=0xcc) returned 0x1
	[0217.016] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=25312) returned 1
	[0217.016] WriteFile (in: hFile=0xcc, lpBuffer=0xc00039ce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00039ce00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0217.016] GetFileType (hFile=0xcc) returned 0x1
	[0217.016] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x62e0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=25312) returned 1
	[0217.016] CloseHandle (hObject=0xcc) returned 1
	[0217.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf.egmwv")) returned 0x20
	[0217.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.018] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.034] SetEvent (hEvent=0x104) returned 1
	[0217.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf")) returned 0x20
	[0217.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x20) returned 1
	[0217.043] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.073] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.073] ReadFile (in: hFile=0xe8, lpBuffer=0xc00013a000, nNumberOfBytesToRead=0x50b6, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00013a000*, lpNumberOfBytesRead=0xc0002d5cec*=0x50b6, lpOverlapped=0x0) returned 1
	[0217.080] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0217.080] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000469402 | out: pbBuffer=0xc000469402) returned 1
	[0217.080] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000469466 | out: pbBuffer=0xc000469466) returned 1
	[0217.080] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0217.080] GetFileType (hFile=0xe8) returned 0x1
	[0217.080] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=20662) returned 1
	[0217.080] WriteFile (in: hFile=0xe8, lpBuffer=0xc00044c000*, nNumberOfBytesToWrite=0x50b6, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00044c000*, lpNumberOfBytesWritten=0xc000155ccc*=0x50b6, lpOverlapped=0xc000155ce8) returned 1
	[0217.081] GetFileType (hFile=0xe8) returned 0x1
	[0217.081] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x50b6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=20662) returned 1
	[0217.081] GetFileType (hFile=0xe8) returned 0x1
	[0217.081] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=20662) returned 1
	[0217.082] WriteFile (in: hFile=0xe8, lpBuffer=0xc000158700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000158700*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0217.082] GetFileType (hFile=0xe8) returned 0x1
	[0217.082] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x50b6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=20662) returned 1
	[0217.082] CloseHandle (hObject=0xe8) returned 1
	[0217.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf.egmwv")) returned 0x20
	[0217.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.085] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.089] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.092] SetEvent (hEvent=0x104) returned 1
	[0217.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf")) returned 0x20
	[0217.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x20) returned 1
	[0217.094] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.123] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0217.123] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x5eae, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc0002d7cec*=0x5eae, lpOverlapped=0x0) returned 1
	[0217.129] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0217.129] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214b02 | out: pbBuffer=0xc000214b02) returned 1
	[0217.129] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214b9f | out: pbBuffer=0xc000214b9f) returned 1
	[0217.129] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0217.129] GetFileType (hFile=0xa8) returned 0x1
	[0217.130] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24238) returned 1
	[0217.130] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000ea000*, nNumberOfBytesToWrite=0x5eae, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000ea000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5eae, lpOverlapped=0xc000155ce8) returned 1
	[0217.130] GetFileType (hFile=0xa8) returned 0x1
	[0217.130] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5eae, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24238) returned 1
	[0217.131] GetFileType (hFile=0xa8) returned 0x1
	[0217.131] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24238) returned 1
	[0217.131] WriteFile (in: hFile=0xa8, lpBuffer=0xc0000f2000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x236, lpOverlapped=0xc000155ce8) returned 1
	[0217.131] GetFileType (hFile=0xa8) returned 0x1
	[0217.131] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5eae, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24238) returned 1
	[0217.132] CloseHandle (hObject=0xa8) returned 1
	[0217.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf.egmwv")) returned 0x20
	[0217.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.136] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf")) returned 0x20
	[0217.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x20) returned 1
	[0217.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.187] SetEvent (hEvent=0x70) returned 1
	[0217.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.189] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0000f9cc4 | out: lpMode=0xc0000f9cc4) returned 0
	[0217.189] ReadFile (in: hFile=0xe8, lpBuffer=0xc000178000, nNumberOfBytesToRead=0x1e74, lpNumberOfBytesRead=0xc0000f9cec, lpOverlapped=0x0 | out: lpBuffer=0xc000178000*, lpNumberOfBytesRead=0xc0000f9cec*=0x1e74, lpOverlapped=0x0) returned 1
	[0217.194] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8100 | out: pbBuffer=0xc0001b8100) returned 1
	[0217.194] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001b811a | out: pbBuffer=0xc0001b811a) returned 1
	[0217.195] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001102 | out: pbBuffer=0xc000001102) returned 1
	[0217.195] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8140 | out: pbBuffer=0xc0001b8140) returned 1
	[0217.195] GetFileType (hFile=0xe8) returned 0x1
	[0217.195] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7796) returned 1
	[0217.195] WriteFile (in: hFile=0xe8, lpBuffer=0xc000188000*, nNumberOfBytesToWrite=0x1e74, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000188000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1e74, lpOverlapped=0xc000155ce8) returned 1
	[0217.196] GetFileType (hFile=0xe8) returned 0x1
	[0217.196] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1e74, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7796) returned 1
	[0217.196] GetFileType (hFile=0xe8) returned 0x1
	[0217.196] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7796) returned 1
	[0217.196] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004d2700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004d2700*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0217.197] GetFileType (hFile=0xe8) returned 0x1
	[0217.197] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1e74, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7796) returned 1
	[0217.197] CloseHandle (hObject=0xe8) returned 1
	[0217.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf.egmwv")) returned 0x20
	[0217.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.200] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.211] SetEvent (hEvent=0xc4) returned 1
	[0217.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf")) returned 0x20
	[0217.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x20) returned 1
	[0217.212] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.237] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0000f9cc4 | out: lpMode=0xc0000f9cc4) returned 0
	[0217.237] ReadFile (in: hFile=0xe8, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x21da, lpNumberOfBytesRead=0xc0000f9cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc0000f9cec*=0x21da, lpOverlapped=0x0) returned 1
	[0217.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0217.243] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000334f02 | out: pbBuffer=0xc000334f02) returned 1
	[0217.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000334f26 | out: pbBuffer=0xc000334f26) returned 1
	[0217.244] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0217.244] GetFileType (hFile=0xe8) returned 0x1
	[0217.244] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=8666) returned 1
	[0217.244] WriteFile (in: hFile=0xe8, lpBuffer=0xc00006e000*, nNumberOfBytesToWrite=0x21da, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00006e000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x21da, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.245] GetFileType (hFile=0xe8) returned 0x1
	[0217.245] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x21da, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=8666) returned 1
	[0217.245] GetFileType (hFile=0xe8) returned 0x1
	[0217.245] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=8666) returned 1
	[0217.245] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003a3500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0003a3500*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0217.245] GetFileType (hFile=0xe8) returned 0x1
	[0217.245] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x21da, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=8666) returned 1
	[0217.246] CloseHandle (hObject=0xe8) returned 1
	[0217.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf.egmwv")) returned 0x20
	[0217.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.247] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.257] SetEvent (hEvent=0xc4) returned 1
	[0217.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf")) returned 0x20
	[0217.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x20) returned 1
	[0217.265] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.291] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.291] ReadFile (in: hFile=0xcc, lpBuffer=0xc00022a000, nNumberOfBytesToRead=0x4724, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00022a000*, lpNumberOfBytesRead=0xc0002d5cec*=0x4724, lpOverlapped=0x0) returned 1
	[0217.300] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8420 | out: pbBuffer=0xc0001b8420) returned 1
	[0217.300] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1102 | out: pbBuffer=0xc0002c1102) returned 1
	[0217.300] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8460 | out: pbBuffer=0xc0001b8460) returned 1
	[0217.300] GetFileType (hFile=0xcc) returned 0x1
	[0217.300] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=18212) returned 1
	[0217.301] WriteFile (in: hFile=0xcc, lpBuffer=0xc000408000*, nNumberOfBytesToWrite=0x4724, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000408000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4724, lpOverlapped=0xc000155ce8) returned 1
	[0217.301] GetFileType (hFile=0xcc) returned 0x1
	[0217.301] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4724, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=18212) returned 1
	[0217.301] GetFileType (hFile=0xcc) returned 0x1
	[0217.301] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=18212) returned 1
	[0217.302] WriteFile (in: hFile=0xcc, lpBuffer=0xc00028f880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00028f880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0217.302] GetFileType (hFile=0xcc) returned 0x1
	[0217.302] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x4724, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=18212) returned 1
	[0217.302] CloseHandle (hObject=0xcc) returned 1
	[0217.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf.egmwv")) returned 0x20
	[0217.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.304] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.309] SetEvent (hEvent=0xc4) returned 1
	[0217.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf")) returned 0x20
	[0217.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x20) returned 1
	[0217.311] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.344] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.344] ReadFile (in: hFile=0xa8, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x2d7c, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc0002d5cec*=0x2d7c, lpOverlapped=0x0) returned 1
	[0217.350] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0217.351] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b646a | out: pbBuffer=0xc0002b646a) returned 1
	[0217.351] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000101102 | out: pbBuffer=0xc000101102) returned 1
	[0217.351] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6490 | out: pbBuffer=0xc0002b6490) returned 1
	[0217.352] GetFileType (hFile=0xa8) returned 0x1
	[0217.352] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=11644) returned 1
	[0217.352] WriteFile (in: hFile=0xa8, lpBuffer=0xc000456000*, nNumberOfBytesToWrite=0x2d7c, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000456000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x2d7c, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.353] GetFileType (hFile=0xa8) returned 0x1
	[0217.353] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2d7c, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=11644) returned 1
	[0217.353] GetFileType (hFile=0xa8) returned 0x1
	[0217.353] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=11644) returned 1
	[0217.354] WriteFile (in: hFile=0xa8, lpBuffer=0xc00044c700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc00044c700*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x233, lpOverlapped=0xc0004a7ce8) returned 1
	[0217.354] GetFileType (hFile=0xa8) returned 0x1
	[0217.354] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x2d7c, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=11644) returned 1
	[0217.354] CloseHandle (hObject=0xa8) returned 1
	[0217.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf.egmwv")) returned 0x20
	[0217.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.359] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf")) returned 0x20
	[0217.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x20) returned 1
	[0217.364] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.519] SetEvent (hEvent=0x70) returned 1
	[0217.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.521] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.521] ReadFile (in: hFile=0xe8, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x3040, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc0002d5cec*=0x3040, lpOverlapped=0x0) returned 1
	[0217.527] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8100 | out: pbBuffer=0xc0001b8100) returned 1
	[0217.527] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0217.527] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039360 | out: pbBuffer=0xc000039360) returned 1
	[0217.528] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003938f | out: pbBuffer=0xc00003938f) returned 1
	[0217.528] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8140 | out: pbBuffer=0xc0001b8140) returned 1
	[0217.528] GetFileType (hFile=0xe8) returned 0x1
	[0217.528] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12352) returned 1
	[0217.528] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000d4000*, nNumberOfBytesToWrite=0x3040, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3040, lpOverlapped=0xc000155ce8) returned 1
	[0217.529] GetFileType (hFile=0xe8) returned 0x1
	[0217.529] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3040, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12352) returned 1
	[0217.529] GetFileType (hFile=0xe8) returned 0x1
	[0217.529] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12352) returned 1
	[0217.529] WriteFile (in: hFile=0xe8, lpBuffer=0xc000254700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000254700*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0217.530] GetFileType (hFile=0xe8) returned 0x1
	[0217.530] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3040, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12352) returned 1
	[0217.530] CloseHandle (hObject=0xe8) returned 1
	[0217.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf.egmwv")) returned 0x20
	[0217.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.534] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.547] SetEvent (hEvent=0x104) returned 1
	[0217.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf")) returned 0x20
	[0217.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x20) returned 1
	[0217.549] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.583] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0217.583] ReadFile (in: hFile=0xe8, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x14fc, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc0002d5cec*=0x14fc, lpOverlapped=0x0) returned 1
	[0217.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b83f0 | out: pbBuffer=0xc0001b83f0) returned 1
	[0217.592] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214e02 | out: pbBuffer=0xc000214e02) returned 1
	[0217.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214e17 | out: pbBuffer=0xc000214e17) returned 1
	[0217.592] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8430 | out: pbBuffer=0xc0001b8430) returned 1
	[0217.592] GetFileType (hFile=0xe8) returned 0x1
	[0217.592] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5372) returned 1
	[0217.593] WriteFile (in: hFile=0xe8, lpBuffer=0xc00042a000*, nNumberOfBytesToWrite=0x14fc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x14fc, lpOverlapped=0xc000155ce8) returned 1
	[0217.593] GetFileType (hFile=0xe8) returned 0x1
	[0217.593] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x14fc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5372) returned 1
	[0217.593] GetFileType (hFile=0xe8) returned 0x1
	[0217.593] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5372) returned 1
	[0217.594] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002bf880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002bf880*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0217.631] GetFileType (hFile=0xe8) returned 0x1
	[0217.631] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x14fc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5372) returned 1
	[0217.631] CloseHandle (hObject=0xe8) returned 1
	[0217.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf.egmwv")) returned 0x20
	[0217.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.635] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf")) returned 0x20
	[0217.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x20) returned 1
	[0217.650] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.735] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0217.735] ReadFile (in: hFile=0xe8, lpBuffer=0xc000190500, nNumberOfBytesToRead=0x221c, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000190500*, lpNumberOfBytesRead=0xc000429cec*=0x221c, lpOverlapped=0x0) returned 1
	[0217.742] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82a0 | out: pbBuffer=0xc0001d82a0) returned 1
	[0217.742] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d82ba | out: pbBuffer=0xc0001d82ba) returned 1
	[0217.742] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000101702 | out: pbBuffer=0xc000101702) returned 1
	[0217.742] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000101717 | out: pbBuffer=0xc000101717) returned 1
	[0217.742] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82e0 | out: pbBuffer=0xc0001d82e0) returned 1
	[0217.742] GetFileType (hFile=0xe8) returned 0x1
	[0217.742] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=8732) returned 1
	[0217.743] WriteFile (in: hFile=0xe8, lpBuffer=0xc000372000*, nNumberOfBytesToWrite=0x221c, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000372000*, lpNumberOfBytesWritten=0xc000469ccc*=0x221c, lpOverlapped=0xc000469ce8) returned 1
	[0217.743] GetFileType (hFile=0xe8) returned 0x1
	[0217.743] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x221c, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=8732) returned 1
	[0217.743] GetFileType (hFile=0xe8) returned 0x1
	[0217.744] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=8732) returned 1
	[0217.744] WriteFile (in: hFile=0xe8, lpBuffer=0xc00036ce00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc00036ce00*, lpNumberOfBytesWritten=0xc000469ccc*=0x227, lpOverlapped=0xc000469ce8) returned 1
	[0217.744] GetFileType (hFile=0xe8) returned 0x1
	[0217.744] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x221c, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=8732) returned 1
	[0217.744] CloseHandle (hObject=0xe8) returned 1
	[0217.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf.egmwv")) returned 0x20
	[0217.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.747] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.751] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.765] SetEvent (hEvent=0x104) returned 1
	[0217.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf")) returned 0x20
	[0217.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x20) returned 1
	[0217.767] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.802] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0217.802] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001c0a80, nNumberOfBytesToRead=0x2a44, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001c0a80*, lpNumberOfBytesRead=0xc000429cec*=0x2a44, lpOverlapped=0x0) returned 1
	[0217.808] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b88d0 | out: pbBuffer=0xc0001b88d0) returned 1
	[0217.808] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000357302 | out: pbBuffer=0xc000357302) returned 1
	[0217.808] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00035738d | out: pbBuffer=0xc00035738d) returned 1
	[0217.808] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003573a4 | out: pbBuffer=0xc0003573a4) returned 1
	[0217.808] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8910 | out: pbBuffer=0xc0001b8910) returned 1
	[0217.809] GetFileType (hFile=0xcc) returned 0x1
	[0217.809] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10820) returned 1
	[0217.809] WriteFile (in: hFile=0xcc, lpBuffer=0xc000132000*, nNumberOfBytesToWrite=0x2a44, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000132000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2a44, lpOverlapped=0xc000155ce8) returned 1
	[0217.810] GetFileType (hFile=0xcc) returned 0x1
	[0217.810] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2a44, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10820) returned 1
	[0217.810] GetFileType (hFile=0xcc) returned 0x1
	[0217.810] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10820) returned 1
	[0217.810] WriteFile (in: hFile=0xcc, lpBuffer=0xc000122380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000122380*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0217.810] GetFileType (hFile=0xcc) returned 0x1
	[0217.811] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2a44, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10820) returned 1
	[0217.811] CloseHandle (hObject=0xcc) returned 1
	[0217.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf.egmwv")) returned 0x20
	[0217.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.813] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.830] SetEvent (hEvent=0x104) returned 1
	[0217.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf")) returned 0x20
	[0217.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x20) returned 1
	[0217.835] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0217.862] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0217.862] ReadFile (in: hFile=0xcc, lpBuffer=0xc00040a000, nNumberOfBytesToRead=0x15f4, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesRead=0xc000429cec*=0x15f4, lpOverlapped=0x0) returned 1
	[0217.868] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8440 | out: pbBuffer=0xc0001d8440) returned 1
	[0217.868] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b0f02 | out: pbBuffer=0xc0000b0f02) returned 1
	[0217.869] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8480 | out: pbBuffer=0xc0001d8480) returned 1
	[0217.869] GetFileType (hFile=0xcc) returned 0x1
	[0217.869] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5620) returned 1
	[0217.869] WriteFile (in: hFile=0xcc, lpBuffer=0xc00022e000*, nNumberOfBytesToWrite=0x15f4, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc00022e000*, lpNumberOfBytesWritten=0xc000469ccc*=0x15f4, lpOverlapped=0xc000469ce8) returned 1
	[0217.869] GetFileType (hFile=0xcc) returned 0x1
	[0217.869] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x15f4, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5620) returned 1
	[0217.870] GetFileType (hFile=0xcc) returned 0x1
	[0217.870] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5620) returned 1
	[0217.870] WriteFile (in: hFile=0xcc, lpBuffer=0xc00021a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc00021a700*, lpNumberOfBytesWritten=0xc000469ccc*=0x230, lpOverlapped=0xc000469ce8) returned 1
	[0217.870] GetFileType (hFile=0xcc) returned 0x1
	[0217.870] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x15f4, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5620) returned 1
	[0217.870] CloseHandle (hObject=0xcc) returned 1
	[0217.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf.egmwv")) returned 0x20
	[0217.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.873] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.878] SetEvent (hEvent=0x104) returned 1
	[0217.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf")) returned 0x20
	[0217.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x20) returned 1
	[0217.880] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0217.916] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0217.916] ReadFile (in: hFile=0xa8, lpBuffer=0xc0001c3500, nNumberOfBytesToRead=0x29dc, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001c3500*, lpNumberOfBytesRead=0xc000429cec*=0x29dc, lpOverlapped=0x0) returned 1
	[0217.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8d80 | out: pbBuffer=0xc0001b8d80) returned 1
	[0217.922] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000177802 | out: pbBuffer=0xc000177802) returned 1
	[0217.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00017782f | out: pbBuffer=0xc00017782f) returned 1
	[0217.922] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8dc0 | out: pbBuffer=0xc0001b8dc0) returned 1
	[0217.923] GetFileType (hFile=0xa8) returned 0x1
	[0217.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10716) returned 1
	[0217.923] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003be000*, nNumberOfBytesToWrite=0x29dc, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003be000*, lpNumberOfBytesWritten=0xc000155ccc*=0x29dc, lpOverlapped=0xc000155ce8) returned 1
	[0217.924] GetFileType (hFile=0xa8) returned 0x1
	[0217.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x29dc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10716) returned 1
	[0217.924] GetFileType (hFile=0xa8) returned 0x1
	[0217.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10716) returned 1
	[0217.924] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003b2e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003b2e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0217.925] GetFileType (hFile=0xa8) returned 0x1
	[0217.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x29dc, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10716) returned 1
	[0217.925] CloseHandle (hObject=0xa8) returned 1
	[0217.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf.egmwv")) returned 0x20
	[0217.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.928] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0217.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf")) returned 0x20
	[0217.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x20) returned 1
	[0217.935] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf.egmwv"), dwFlags=0x1) returned 1
	[0217.974] SetEvent (hEvent=0x70) returned 1
	[0217.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0217.976] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0217.976] ReadFile (in: hFile=0xe8, lpBuffer=0xc000470000, nNumberOfBytesToRead=0x3b5c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000470000*, lpNumberOfBytesRead=0xc0002d3cec*=0x3b5c, lpOverlapped=0x0) returned 1
	[0217.981] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8100 | out: pbBuffer=0xc0001d8100) returned 1
	[0217.981] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0217.982] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8140 | out: pbBuffer=0xc0001d8140) returned 1
	[0217.982] GetFileType (hFile=0xe8) returned 0x1
	[0217.982] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15196) returned 1
	[0217.982] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x3b5c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3b5c, lpOverlapped=0xc000155ce8) returned 1
	[0217.983] GetFileType (hFile=0xe8) returned 0x1
	[0217.983] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3b5c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15196) returned 1
	[0217.983] GetFileType (hFile=0xe8) returned 0x1
	[0217.983] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=15196) returned 1
	[0217.983] WriteFile (in: hFile=0xe8, lpBuffer=0xc000261500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000261500*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0217.984] GetFileType (hFile=0xe8) returned 0x1
	[0217.984] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3b5c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=15196) returned 1
	[0217.984] CloseHandle (hObject=0xe8) returned 1
	[0217.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf.egmwv")) returned 0x20
	[0217.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0217.988] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf")) returned 0x20
	[0218.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x20) returned 1
	[0218.005] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.035] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0218.035] ReadFile (in: hFile=0xcc, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x336a, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc0002d7cec*=0x336a, lpOverlapped=0x0) returned 1
	[0218.043] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0218.043] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215102 | out: pbBuffer=0xc000215102) returned 1
	[0218.043] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0218.044] GetFileType (hFile=0xcc) returned 0x1
	[0218.044] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=13162) returned 1
	[0218.044] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002c2000*, nNumberOfBytesToWrite=0x336a, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesWritten=0xc000465ccc*=0x336a, lpOverlapped=0xc000465ce8) returned 1
	[0218.044] GetFileType (hFile=0xcc) returned 0x1
	[0218.045] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x336a, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=13162) returned 1
	[0218.045] GetFileType (hFile=0xcc) returned 0x1
	[0218.045] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=13162) returned 1
	[0218.045] WriteFile (in: hFile=0xcc, lpBuffer=0xc00044d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc00044d500*, lpNumberOfBytesWritten=0xc000465ccc*=0x230, lpOverlapped=0xc000465ce8) returned 1
	[0218.045] GetFileType (hFile=0xcc) returned 0x1
	[0218.045] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x336a, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=13162) returned 1
	[0218.046] CloseHandle (hObject=0xcc) returned 1
	[0218.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf.egmwv")) returned 0x20
	[0218.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.048] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.063] SetEvent (hEvent=0x104) returned 1
	[0218.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf")) returned 0x20
	[0218.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x20) returned 1
	[0218.068] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.096] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0218.096] ReadFile (in: hFile=0xcc, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0x207a, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc0002d3cec*=0x207a, lpOverlapped=0x0) returned 1
	[0218.102] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0218.102] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026aa02 | out: pbBuffer=0xc00026aa02) returned 1
	[0218.102] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026aad3 | out: pbBuffer=0xc00026aad3) returned 1
	[0218.102] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0218.102] GetFileType (hFile=0xcc) returned 0x1
	[0218.103] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=8314) returned 1
	[0218.103] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000aa000*, nNumberOfBytesToWrite=0x207a, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x207a, lpOverlapped=0xc0003f9ce8) returned 1
	[0218.103] GetFileType (hFile=0xcc) returned 0x1
	[0218.103] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x207a, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=8314) returned 1
	[0218.103] GetFileType (hFile=0xcc) returned 0x1
	[0218.104] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=8314) returned 1
	[0218.104] WriteFile (in: hFile=0xcc, lpBuffer=0xc00042d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc00042d500*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x22a, lpOverlapped=0xc0003f9ce8) returned 1
	[0218.104] GetFileType (hFile=0xcc) returned 0x1
	[0218.104] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x207a, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=8314) returned 1
	[0218.105] CloseHandle (hObject=0xcc) returned 1
	[0218.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf.egmwv")) returned 0x20
	[0218.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.106] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf")) returned 0x20
	[0218.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x20) returned 1
	[0218.112] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0218.148] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0218.148] ReadFile (in: hFile=0xa8, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0x48be, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc0002d3cec*=0x48be, lpOverlapped=0x0) returned 1
	[0218.154] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d85f0 | out: pbBuffer=0xc0001d85f0) returned 1
	[0218.154] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001d02 | out: pbBuffer=0xc000001d02) returned 1
	[0218.154] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001d36 | out: pbBuffer=0xc000001d36) returned 1
	[0218.154] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001dce | out: pbBuffer=0xc000001dce) returned 1
	[0218.154] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8630 | out: pbBuffer=0xc0001d8630) returned 1
	[0218.155] GetFileType (hFile=0xa8) returned 0x1
	[0218.155] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=18622) returned 1
	[0218.155] WriteFile (in: hFile=0xa8, lpBuffer=0xc00022a000*, nNumberOfBytesToWrite=0x48be, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00022a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x48be, lpOverlapped=0xc000155ce8) returned 1
	[0218.156] GetFileType (hFile=0xa8) returned 0x1
	[0218.156] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48be, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=18622) returned 1
	[0218.156] GetFileType (hFile=0xa8) returned 0x1
	[0218.156] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=18622) returned 1
	[0218.156] WriteFile (in: hFile=0xa8, lpBuffer=0xc0001f3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f3880*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0218.156] GetFileType (hFile=0xa8) returned 0x1
	[0218.157] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48be, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=18622) returned 1
	[0218.157] CloseHandle (hObject=0xa8) returned 1
	[0218.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf.egmwv")) returned 0x20
	[0218.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.161] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf")) returned 0x20
	[0218.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x20) returned 1
	[0218.167] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.208] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0218.209] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x128e, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc0002d3cec*=0x128e, lpOverlapped=0x0) returned 1
	[0218.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8100 | out: pbBuffer=0xc0001b8100) returned 1
	[0218.214] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0218.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8140 | out: pbBuffer=0xc0001b8140) returned 1
	[0218.214] GetFileType (hFile=0xcc) returned 0x1
	[0218.215] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4750) returned 1
	[0218.215] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0x128e, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc000155ccc*=0x128e, lpOverlapped=0xc000155ce8) returned 1
	[0218.215] GetFileType (hFile=0xcc) returned 0x1
	[0218.215] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x128e, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4750) returned 1
	[0218.215] GetFileType (hFile=0xcc) returned 0x1
	[0218.216] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4750) returned 1
	[0218.216] WriteFile (in: hFile=0xcc, lpBuffer=0xc0003d3500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003d3500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0218.216] GetFileType (hFile=0xcc) returned 0x1
	[0218.216] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x128e, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4750) returned 1
	[0218.216] CloseHandle (hObject=0xcc) returned 1
	[0218.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf.egmwv")) returned 0x20
	[0218.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.221] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.235] SetEvent (hEvent=0x120) returned 1
	[0218.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf")) returned 0x20
	[0218.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x20) returned 1
	[0218.237] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.266] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0218.266] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001ba000, nNumberOfBytesToRead=0x3586, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesRead=0xc000425cec*=0x3586, lpOverlapped=0x0) returned 1
	[0218.286] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0218.287] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214402 | out: pbBuffer=0xc000214402) returned 1
	[0218.287] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0218.287] GetFileType (hFile=0xcc) returned 0x1
	[0218.287] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00012dca0*=13702) returned 1
	[0218.287] WriteFile (in: hFile=0xcc, lpBuffer=0xc000198000*, nNumberOfBytesToWrite=0x3586, lpNumberOfBytesWritten=0xc00012dccc, lpOverlapped=0xc00012dce8 | out: lpBuffer=0xc000198000*, lpNumberOfBytesWritten=0xc00012dccc*=0x3586, lpOverlapped=0xc00012dce8) returned 1
	[0218.288] GetFileType (hFile=0xcc) returned 0x1
	[0218.288] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x3586, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00012dca0*=13702) returned 1
	[0218.288] GetFileType (hFile=0xcc) returned 0x1
	[0218.288] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00012dca0*=13702) returned 1
	[0218.288] WriteFile (in: hFile=0xcc, lpBuffer=0xc000456e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00012dccc, lpOverlapped=0xc00012dce8 | out: lpBuffer=0xc000456e00*, lpNumberOfBytesWritten=0xc00012dccc*=0x22d, lpOverlapped=0xc00012dce8) returned 1
	[0218.288] GetFileType (hFile=0xcc) returned 0x1
	[0218.289] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x3586, lpNewFilePointer=0xc00012dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00012dca0*=13702) returned 1
	[0218.289] CloseHandle (hObject=0xcc) returned 1
	[0218.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf.egmwv")) returned 0x20
	[0218.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.292] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.294] SetEvent (hEvent=0x120) returned 1
	[0218.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf")) returned 0x20
	[0218.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x20) returned 1
	[0218.295] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0218.323] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0218.323] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002e4000, nNumberOfBytesToRead=0x9d26, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e4000*, lpNumberOfBytesRead=0xc000425cec*=0x9d26, lpOverlapped=0x0) returned 1
	[0218.331] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8110 | out: pbBuffer=0xc0001d8110) returned 1
	[0218.331] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000128b02 | out: pbBuffer=0xc000128b02) returned 1
	[0218.331] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000128b9e | out: pbBuffer=0xc000128b9e) returned 1
	[0218.331] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8150 | out: pbBuffer=0xc0001d8150) returned 1
	[0218.332] GetFileType (hFile=0xe8) returned 0x1
	[0218.332] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001e1ca0*=40230) returned 1
	[0218.332] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001ea000*, nNumberOfBytesToWrite=0x9d26, lpNumberOfBytesWritten=0xc0001e1ccc, lpOverlapped=0xc0001e1ce8 | out: lpBuffer=0xc0001ea000*, lpNumberOfBytesWritten=0xc0001e1ccc*=0x9d26, lpOverlapped=0xc0001e1ce8) returned 1
	[0218.333] GetFileType (hFile=0xe8) returned 0x1
	[0218.333] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x9d26, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001e1ca0*=40230) returned 1
	[0218.333] GetFileType (hFile=0xe8) returned 0x1
	[0218.333] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001e1ca0*=40230) returned 1
	[0218.334] WriteFile (in: hFile=0xe8, lpBuffer=0xc00042b500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0001e1ccc, lpOverlapped=0xc0001e1ce8 | out: lpBuffer=0xc00042b500*, lpNumberOfBytesWritten=0xc0001e1ccc*=0x233, lpOverlapped=0xc0001e1ce8) returned 1
	[0218.334] GetFileType (hFile=0xe8) returned 0x1
	[0218.334] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x9d26, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001e1ca0*=40230) returned 1
	[0218.334] CloseHandle (hObject=0xe8) returned 1
	[0218.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf.egmwv")) returned 0x20
	[0218.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.338] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf")) returned 0x20
	[0218.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x20) returned 1
	[0218.346] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0218.381] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002f5cc4 | out: lpMode=0xc0002f5cc4) returned 0
	[0218.382] ReadFile (in: hFile=0xa8, lpBuffer=0xc0003cc000, nNumberOfBytesToRead=0x5cae, lpNumberOfBytesRead=0xc0002f5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003cc000*, lpNumberOfBytesRead=0xc0002f5cec*=0x5cae, lpOverlapped=0x0) returned 1
	[0218.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8430 | out: pbBuffer=0xc0001d8430) returned 1
	[0218.389] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003fe202 | out: pbBuffer=0xc0003fe202) returned 1
	[0218.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fe2b0 | out: pbBuffer=0xc0003fe2b0) returned 1
	[0218.389] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8470 | out: pbBuffer=0xc0001d8470) returned 1
	[0218.389] GetFileType (hFile=0xa8) returned 0x1
	[0218.389] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001e1ca0*=23726) returned 1
	[0218.389] WriteFile (in: hFile=0xa8, lpBuffer=0xc000312000*, nNumberOfBytesToWrite=0x5cae, lpNumberOfBytesWritten=0xc0001e1ccc, lpOverlapped=0xc0001e1ce8 | out: lpBuffer=0xc000312000*, lpNumberOfBytesWritten=0xc0001e1ccc*=0x5cae, lpOverlapped=0xc0001e1ce8) returned 1
	[0218.390] GetFileType (hFile=0xa8) returned 0x1
	[0218.390] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5cae, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001e1ca0*=23726) returned 1
	[0218.390] GetFileType (hFile=0xa8) returned 0x1
	[0218.390] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001e1ca0*=23726) returned 1
	[0218.391] WriteFile (in: hFile=0xa8, lpBuffer=0xc000402700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0001e1ccc, lpOverlapped=0xc0001e1ce8 | out: lpBuffer=0xc000402700*, lpNumberOfBytesWritten=0xc0001e1ccc*=0x233, lpOverlapped=0xc0001e1ce8) returned 1
	[0218.391] GetFileType (hFile=0xa8) returned 0x1
	[0218.391] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x5cae, lpNewFilePointer=0xc0001e1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001e1ca0*=23726) returned 1
	[0218.392] CloseHandle (hObject=0xa8) returned 1
	[0218.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf.egmwv")) returned 0x20
	[0218.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.396] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.408] SetEvent (hEvent=0x90) returned 1
	[0218.408] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.413] SetEvent (hEvent=0x120) returned 1
	[0218.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf")) returned 0x20
	[0218.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x20) returned 1
	[0218.417] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0218.440] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002f1cc4 | out: lpMode=0xc0002f1cc4) returned 0
	[0218.440] ReadFile (in: hFile=0xa8, lpBuffer=0xc00006c000, nNumberOfBytesToRead=0x3cce, lpNumberOfBytesRead=0xc0002f1cec, lpOverlapped=0x0 | out: lpBuffer=0xc00006c000*, lpNumberOfBytesRead=0xc0002f1cec*=0x3cce, lpOverlapped=0x0) returned 1
	[0218.452] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8110 | out: pbBuffer=0xc0001d8110) returned 1
	[0218.452] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d812a | out: pbBuffer=0xc0001d812a) returned 1
	[0218.452] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0218.453] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8150 | out: pbBuffer=0xc0001d8150) returned 1
	[0218.453] GetFileType (hFile=0xa8) returned 0x1
	[0218.453] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=15566) returned 1
	[0218.453] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003e6000*, nNumberOfBytesToWrite=0x3cce, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x3cce, lpOverlapped=0xc0000dbce8) returned 1
	[0218.587] GetFileType (hFile=0xa8) returned 0x1
	[0218.588] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3cce, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=15566) returned 1
	[0218.588] GetFileType (hFile=0xa8) returned 0x1
	[0218.588] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=15566) returned 1
	[0218.588] WriteFile (in: hFile=0xa8, lpBuffer=0xc000465500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000465500*, lpNumberOfBytesWritten=0xc0000dbccc*=0x233, lpOverlapped=0xc0000dbce8) returned 1
	[0218.589] GetFileType (hFile=0xa8) returned 0x1
	[0218.589] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x3cce, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=15566) returned 1
	[0218.589] CloseHandle (hObject=0xa8) returned 1
	[0218.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf.egmwv")) returned 0x20
	[0218.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0218.592] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0218.603] SetEvent (hEvent=0x90) returned 1
	[0218.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf")) returned 0x20
	[0218.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x20) returned 1
	[0218.964] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf.egmwv"), dwFlags=0x1) returned 1
	[0218.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0218.996] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002efcc4 | out: lpMode=0xc0002efcc4) returned 0
	[0218.997] ReadFile (in: hFile=0xcc, lpBuffer=0xc00037c000, nNumberOfBytesToRead=0xa3b2, lpNumberOfBytesRead=0xc0002efcec, lpOverlapped=0x0 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesRead=0xc0002efcec*=0xa3b2, lpOverlapped=0x0) returned 1
	[0219.005] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0219.005] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039802 | out: pbBuffer=0xc000039802) returned 1
	[0219.006] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0219.006] GetFileType (hFile=0xcc) returned 0x1
	[0219.006] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=41906) returned 1
	[0219.006] WriteFile (in: hFile=0xcc, lpBuffer=0xc000404000*, nNumberOfBytesToWrite=0xa3b2, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc000404000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0xa3b2, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.007] GetFileType (hFile=0xcc) returned 0x1
	[0219.007] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xa3b2, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=41906) returned 1
	[0219.007] GetFileType (hFile=0xcc) returned 0x1
	[0219.008] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=41906) returned 1
	[0219.008] WriteFile (in: hFile=0xcc, lpBuffer=0xc00022b500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc00022b500*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x233, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.008] GetFileType (hFile=0xcc) returned 0x1
	[0219.008] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xa3b2, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=41906) returned 1
	[0219.008] CloseHandle (hObject=0xcc) returned 1
	[0219.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf.egmwv")) returned 0x20
	[0219.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.014] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.016] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.020] SetEvent (hEvent=0x90) returned 1
	[0219.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf")) returned 0x20
	[0219.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x20) returned 1
	[0219.021] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0219.061] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002f5cc4 | out: lpMode=0xc0002f5cc4) returned 0
	[0219.061] ReadFile (in: hFile=0xe8, lpBuffer=0xc000306000, nNumberOfBytesToRead=0x9d6c, lpNumberOfBytesRead=0xc0002f5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000306000*, lpNumberOfBytesRead=0xc0002f5cec*=0x9d6c, lpOverlapped=0x0) returned 1
	[0219.068] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8760 | out: pbBuffer=0xc0001b8760) returned 1
	[0219.068] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0219.068] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b7d | out: pbBuffer=0xc0002c1b7d) returned 1
	[0219.068] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b87a0 | out: pbBuffer=0xc0001b87a0) returned 1
	[0219.069] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0219.070] SetEvent (hEvent=0x70) returned 1
	[0219.070] SetEvent (hEvent=0xc4) returned 1
	[0219.070] SetEvent (hEvent=0x90) returned 1
	[0219.071] GetFileType (hFile=0xe8) returned 0x1
	[0219.071] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=40300) returned 1
	[0219.071] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004ac000*, nNumberOfBytesToWrite=0x9d6c, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x9d6c, lpOverlapped=0xc0000dbce8) returned 1
	[0219.072] GetFileType (hFile=0xe8) returned 0x1
	[0219.072] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x9d6c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=40300) returned 1
	[0219.072] GetFileType (hFile=0xe8) returned 0x1
	[0219.072] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=40300) returned 1
	[0219.072] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003bbc00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0003bbc00*, lpNumberOfBytesWritten=0xc0000dbccc*=0x236, lpOverlapped=0xc0000dbce8) returned 1
	[0219.073] GetFileType (hFile=0xe8) returned 0x1
	[0219.073] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x9d6c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=40300) returned 1
	[0219.073] CloseHandle (hObject=0xe8) returned 1
	[0219.075] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf.egmwv")) returned 0x20
	[0219.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.089] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.092] SetEvent (hEvent=0xe4) returned 1
	[0219.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf")) returned 0x20
	[0219.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF", dwFileAttributes=0x20) returned 1
	[0219.094] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.129] SetEvent (hEvent=0x70) returned 1
	[0219.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.131] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0219.131] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003bc000, nNumberOfBytesToRead=0xe17a, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesRead=0xc0002d5cec*=0xe17a, lpOverlapped=0x0) returned 1
	[0219.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0219.137] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215002 | out: pbBuffer=0xc000215002) returned 1
	[0219.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215032 | out: pbBuffer=0xc000215032) returned 1
	[0219.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0219.138] GetFileType (hFile=0xcc) returned 0x1
	[0219.138] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=57722) returned 1
	[0219.138] WriteFile (in: hFile=0xcc, lpBuffer=0xc00029e000*, nNumberOfBytesToWrite=0xe17a, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0xe17a, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.139] GetFileType (hFile=0xcc) returned 0x1
	[0219.139] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xe17a, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=57722) returned 1
	[0219.139] GetFileType (hFile=0xcc) returned 0x1
	[0219.139] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=57722) returned 1
	[0219.140] WriteFile (in: hFile=0xcc, lpBuffer=0xc000145500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc000145500*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x236, lpOverlapped=0xc0000d7ce8) returned 1
	[0219.140] GetFileType (hFile=0xcc) returned 0x1
	[0219.140] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xe17a, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=57722) returned 1
	[0219.140] CloseHandle (hObject=0xcc) returned 1
	[0219.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf.egmwv")) returned 0x20
	[0219.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.143] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf")) returned 0x20
	[0219.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF", dwFileAttributes=0x20) returned 1
	[0219.158] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.188] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002f3cc4 | out: lpMode=0xc0002f3cc4) returned 0
	[0219.188] ReadFile (in: hFile=0xcc, lpBuffer=0xc000110000, nNumberOfBytesToRead=0xc37e, lpNumberOfBytesRead=0xc0002f3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000110000*, lpNumberOfBytesRead=0xc0002f3cec*=0xc37e, lpOverlapped=0x0) returned 1
	[0219.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000172110 | out: pbBuffer=0xc000172110) returned 1
	[0219.194] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00017212a | out: pbBuffer=0xc00017212a) returned 1
	[0219.194] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0219.194] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000172150 | out: pbBuffer=0xc000172150) returned 1
	[0219.194] GetFileType (hFile=0xcc) returned 0x1
	[0219.194] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=50046) returned 1
	[0219.195] WriteFile (in: hFile=0xcc, lpBuffer=0xc000436000*, nNumberOfBytesToWrite=0xc37e, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc000436000*, lpNumberOfBytesWritten=0xc0000edccc*=0xc37e, lpOverlapped=0xc0000edce8) returned 1
	[0219.195] GetFileType (hFile=0xcc) returned 0x1
	[0219.195] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xc37e, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=50046) returned 1
	[0219.196] GetFileType (hFile=0xcc) returned 0x1
	[0219.196] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000edca0*=50046) returned 1
	[0219.196] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000f5500*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc0000edccc, lpOverlapped=0xc0000edce8 | out: lpBuffer=0xc0000f5500*, lpNumberOfBytesWritten=0xc0000edccc*=0x239, lpOverlapped=0xc0000edce8) returned 1
	[0219.196] GetFileType (hFile=0xcc) returned 0x1
	[0219.196] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0xc37e, lpNewFilePointer=0xc0000edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000edca0*=50046) returned 1
	[0219.196] CloseHandle (hObject=0xcc) returned 1
	[0219.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf.egmwv")) returned 0x20
	[0219.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.198] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.207] SetEvent (hEvent=0x104) returned 1
	[0219.207] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.210] SetEvent (hEvent=0xe4) returned 1
	[0219.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf")) returned 0x20
	[0219.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF", dwFileAttributes=0x20) returned 1
	[0219.214] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.238] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0219.238] ReadFile (in: hFile=0xcc, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x13c4, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc0002d5cec*=0x13c4, lpOverlapped=0x0) returned 1
	[0219.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000172110 | out: pbBuffer=0xc000172110) returned 1
	[0219.243] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0219.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214fcd | out: pbBuffer=0xc000214fcd) returned 1
	[0219.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214feb | out: pbBuffer=0xc000214feb) returned 1
	[0219.243] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000172150 | out: pbBuffer=0xc000172150) returned 1
	[0219.244] GetFileType (hFile=0xcc) returned 0x1
	[0219.244] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5060) returned 1
	[0219.244] WriteFile (in: hFile=0xcc, lpBuffer=0xc0000b4000*, nNumberOfBytesToWrite=0x13c4, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc0000b4000*, lpNumberOfBytesWritten=0xc000469ccc*=0x13c4, lpOverlapped=0xc000469ce8) returned 1
	[0219.244] GetFileType (hFile=0xcc) returned 0x1
	[0219.244] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x13c4, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5060) returned 1
	[0219.244] GetFileType (hFile=0xcc) returned 0x1
	[0219.245] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5060) returned 1
	[0219.245] WriteFile (in: hFile=0xcc, lpBuffer=0xc0004a1500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc0004a1500*, lpNumberOfBytesWritten=0xc000469ccc*=0x22a, lpOverlapped=0xc000469ce8) returned 1
	[0219.245] GetFileType (hFile=0xcc) returned 0x1
	[0219.245] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x13c4, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5060) returned 1
	[0219.245] CloseHandle (hObject=0xcc) returned 1
	[0219.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf.egmwv")) returned 0x20
	[0219.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.247] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf")) returned 0x20
	[0219.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF", dwFileAttributes=0x20) returned 1
	[0219.251] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0219.285] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0219.285] ReadFile (in: hFile=0xe8, lpBuffer=0xc000086a00, nNumberOfBytesToRead=0x1484, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000086a00*, lpNumberOfBytesRead=0xc0002d5cec*=0x1484, lpOverlapped=0x0) returned 1
	[0219.291] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001722a0 | out: pbBuffer=0xc0001722a0) returned 1
	[0219.291] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215d02 | out: pbBuffer=0xc000215d02) returned 1
	[0219.291] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215d35 | out: pbBuffer=0xc000215d35) returned 1
	[0219.291] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001722e0 | out: pbBuffer=0xc0001722e0) returned 1
	[0219.291] GetFileType (hFile=0xe8) returned 0x1
	[0219.291] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5252) returned 1
	[0219.292] WriteFile (in: hFile=0xe8, lpBuffer=0xc00019e000*, nNumberOfBytesToWrite=0x1484, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc00019e000*, lpNumberOfBytesWritten=0xc000469ccc*=0x1484, lpOverlapped=0xc000469ce8) returned 1
	[0219.292] GetFileType (hFile=0xe8) returned 0x1
	[0219.292] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1484, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5252) returned 1
	[0219.292] GetFileType (hFile=0xe8) returned 0x1
	[0219.293] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000469ca0*=5252) returned 1
	[0219.293] WriteFile (in: hFile=0xe8, lpBuffer=0xc000190e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000469ccc, lpOverlapped=0xc000469ce8 | out: lpBuffer=0xc000190e00*, lpNumberOfBytesWritten=0xc000469ccc*=0x224, lpOverlapped=0xc000469ce8) returned 1
	[0219.293] GetFileType (hFile=0xe8) returned 0x1
	[0219.293] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1484, lpNewFilePointer=0xc000469ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000469ca0*=5252) returned 1
	[0219.293] CloseHandle (hObject=0xe8) returned 1
	[0219.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf.egmwv")) returned 0x20
	[0219.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.309] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.323] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.338] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.360] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.375] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.385] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.403] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.765] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.774] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0220.436] SetEvent (hEvent=0xe4) returned 1
	[0220.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf")) returned 0x20
	[0220.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x20) returned 1
	[0220.475] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf.egmwv"), dwFlags=0x1) returned 1
	[0222.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0222.420] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002f3cc4 | out: lpMode=0xc0002f3cc4) returned 0
	[0222.420] ReadFile (in: hFile=0xe8, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x4f08, lpNumberOfBytesRead=0xc0002f3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc0002f3cec*=0x4f08, lpOverlapped=0x0) returned 1
	[0222.530] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0222.531] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b7a | out: pbBuffer=0xc000052b7a) returned 1
	[0222.531] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0222.531] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0222.532] GetFileType (hFile=0xe8) returned 0x1
	[0222.532] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a1ca0*=20232) returned 1
	[0222.532] WriteFile (in: hFile=0xe8, lpBuffer=0xc000462000*, nNumberOfBytesToWrite=0x4f08, lpNumberOfBytesWritten=0xc0002a1ccc, lpOverlapped=0xc0002a1ce8 | out: lpBuffer=0xc000462000*, lpNumberOfBytesWritten=0xc0002a1ccc*=0x4f08, lpOverlapped=0xc0002a1ce8) returned 1
	[0222.533] GetFileType (hFile=0xe8) returned 0x1
	[0222.533] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4f08, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a1ca0*=20232) returned 1
	[0222.533] GetFileType (hFile=0xe8) returned 0x1
	[0222.533] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a1ca0*=20232) returned 1
	[0222.533] WriteFile (in: hFile=0xe8, lpBuffer=0xc000133880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0002a1ccc, lpOverlapped=0xc0002a1ce8 | out: lpBuffer=0xc000133880*, lpNumberOfBytesWritten=0xc0002a1ccc*=0x22a, lpOverlapped=0xc0002a1ce8) returned 1
	[0222.535] GetFileType (hFile=0xe8) returned 0x1
	[0222.535] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4f08, lpNewFilePointer=0xc0002a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a1ca0*=20232) returned 1
	[0222.535] CloseHandle (hObject=0xe8) returned 1
	[0223.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf.egmwv")) returned 0x20
	[0223.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF.egmwv", dwFileAttributes=0x21) 

Thread:
	id = 40
	os_tid = 0xa6c

	[0118.803] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x565feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x565feb0*=0x128) returned 1
	[0118.803] VirtualQuery (in: lpAddress=0x565fed0, lpBuffer=0x565fed0, dwLength=0x30 | out: lpBuffer=0x565fed0*(BaseAddress=0x565f000, AllocationBase=0x5460000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.804] VirtualAlloc (lpAddress=0xc000294000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000294000
	[0118.805] VirtualAlloc (lpAddress=0xc0002b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b2000
	[0118.806] VirtualAlloc (lpAddress=0xc000378000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000378000
	[0118.807] VirtualAlloc (lpAddress=0xc00037c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00037c000
	[0118.808] VirtualAlloc (lpAddress=0xc00039e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00039e000
	[0118.809] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a110 | out: pbBuffer=0xc00041a110) returned 1
	[0118.809] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0118.809] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0910 | out: pbBuffer=0xc0002c0910) returned 1
	[0118.809] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c09e0 | out: pbBuffer=0xc0002c09e0) returned 1
	[0118.809] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a150 | out: pbBuffer=0xc00041a150) returned 1
	[0118.810] VirtualAlloc (lpAddress=0xc000188000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000188000
	[0118.812] VirtualAlloc (lpAddress=0xc00018e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018e000
	[0118.814] VirtualAlloc (lpAddress=0xc00019e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019e000
	[0118.815] VirtualAlloc (lpAddress=0xc00020e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020e000
	[0118.817] VirtualAlloc (lpAddress=0xc000288000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000288000
	[0118.818] VirtualAlloc (lpAddress=0xc00028e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028e000
	[0118.820] VirtualAlloc (lpAddress=0xc000298000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000298000
	[0118.821] VirtualAlloc (lpAddress=0xc0002a2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a2000
	[0118.822] VirtualAlloc (lpAddress=0xc0002aa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002aa000
	[0118.824] VirtualAlloc (lpAddress=0xc0002b6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b6000
	[0118.825] VirtualAlloc (lpAddress=0xc0002bc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002bc000
	[0118.827] VirtualAlloc (lpAddress=0xc00041c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00041c000
	[0118.828] VirtualAlloc (lpAddress=0xc00077c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00077c000
	[0118.830] VirtualAlloc (lpAddress=0xc000a82000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000a82000
	[0118.831] VirtualAlloc (lpAddress=0xc000180000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000180000
	[0118.833] VirtualAlloc (lpAddress=0xc000206000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000206000
	[0118.834] VirtualAlloc (lpAddress=0xc000638000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000638000
	[0118.836] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000
	[0118.840] VirtualAlloc (lpAddress=0xc0000d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d8000
	[0118.841] VirtualAlloc (lpAddress=0xc0001ac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ac000
	[0118.842] VirtualAlloc (lpAddress=0xc00042c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00042c000
	[0118.843] VirtualAlloc (lpAddress=0xc000430000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000430000
	[0118.845] VirtualAlloc (lpAddress=0xc000b10000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b10000
	[0118.846] VirtualAlloc (lpAddress=0xc00066e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00066e000
	[0118.847] VirtualAlloc (lpAddress=0xc000672000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000672000
	[0118.849] VirtualAlloc (lpAddress=0xc000676000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000676000
	[0118.850] VirtualAlloc (lpAddress=0xc000cac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000cac000
	[0118.851] VirtualAlloc (lpAddress=0xc0002c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c4000
	[0118.853] VirtualAlloc (lpAddress=0xc000d10000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d10000
	[0118.858] VirtualAlloc (lpAddress=0xc000130000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000130000
	[0118.859] VirtualAlloc (lpAddress=0xc000134000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000134000
	[0118.861] VirtualAlloc (lpAddress=0xc000138000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000138000
	[0118.862] VirtualAlloc (lpAddress=0xc00013c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013c000
	[0118.865] VirtualAlloc (lpAddress=0xc00094e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00094e000
	[0118.866] VirtualAlloc (lpAddress=0xc0003aa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003aa000
	[0118.868] VirtualAlloc (lpAddress=0xc000ac6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ac6000
	[0118.869] VirtualAlloc (lpAddress=0xc000aca000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000aca000
	[0118.871] VirtualAlloc (lpAddress=0xc000ace000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ace000
	[0118.879] VirtualAlloc (lpAddress=0xc001a00000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001a00000
	[0118.923] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 0x2020
	[0118.923] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", dwFileAttributes=0x2020) returned 1
	[0119.896] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.egmwv"), dwFlags=0x1) returned 1
	[0127.627] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0127.864] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0127.864] VirtualAlloc (lpAddress=0xc000796000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000796000
	[0127.869] ReadFile (in: hFile=0xd0, lpBuffer=0xc000796000, nNumberOfBytesToRead=0x15366, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000796000*, lpNumberOfBytesRead=0xc00016dcec*=0x15366, lpOverlapped=0x0) returned 1
	[0132.075] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x84
	[0132.075] SwitchToThread () returned 1
	[0132.490] VirtualAlloc (lpAddress=0xc0000ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ca000
	[0132.492] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f2000
	[0132.493] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2e0 | out: pbBuffer=0xc00041a2e0) returned 1
	[0132.493] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041a2fa | out: pbBuffer=0xc00041a2fa) returned 1
	[0132.493] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1602 | out: pbBuffer=0xc0002c1602) returned 1
	[0132.493] VirtualAlloc (lpAddress=0xc0003f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f4000
	[0132.494] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a320 | out: pbBuffer=0xc00041a320) returned 1
	[0132.495] VirtualAlloc (lpAddress=0xc0003f6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f6000
	[0132.496] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.496] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.496] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.497] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fa000
	[0132.497] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.497] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.497] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.498] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fe000
	[0132.498] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0xd000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.498] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.498] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0132.498] VirtualAlloc (lpAddress=0xc0003ff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ff000
	[0132.499] VirtualAlloc (lpAddress=0xc000400000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0132.502] VirtualAlloc (lpAddress=0xc00040c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00040c000
	[0132.504] VirtualAlloc (lpAddress=0xc000b1a000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b1a000
	[0132.508] VirtualAlloc (lpAddress=0xc000410000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000410000
	[0132.509] VirtualAlloc (lpAddress=0xc000414000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000414000
	[0132.511] VirtualAlloc (lpAddress=0xc0001ce000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ce000
	[0132.519] VirtualAlloc (lpAddress=0xc0001ec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ec000
	[0132.521] VirtualAlloc (lpAddress=0xc000418000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000418000
	[0132.523] VirtualAlloc (lpAddress=0xc0001f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f0000
	[0132.523] VirtualAlloc (lpAddress=0xc0001f2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f2000
	[0132.526] VirtualAlloc (lpAddress=0xc000952000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000952000
	[0132.528] VirtualAlloc (lpAddress=0xc00095a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00095a000
	[0132.634] SetEvent (hEvent=0xf8) returned 1
	[0132.638] VirtualAlloc (lpAddress=0xc00096a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00096a000
	[0132.640] VirtualAlloc (lpAddress=0xc00096e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00096e000
	[0132.642] VirtualAlloc (lpAddress=0xc0012be000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012be000
	[0132.650] VirtualAlloc (lpAddress=0xc000972000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000972000
	[0132.651] VirtualAlloc (lpAddress=0xc000976000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000976000
	[0132.653] VirtualAlloc (lpAddress=0xc00097a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00097a000
	[0132.654] VirtualAlloc (lpAddress=0xc0012dc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012dc000
	[0132.655] VirtualAlloc (lpAddress=0xc0002e0000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e0000
	[0132.669] VirtualAlloc (lpAddress=0xc0012e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012e0000
	[0132.869] VirtualAlloc (lpAddress=0xc000342000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000342000
	[0132.870] VirtualAlloc (lpAddress=0xc0012e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012e4000
	[0132.871] VirtualAlloc (lpAddress=0xc0012e8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012e8000
	[0132.873] VirtualAlloc (lpAddress=0xc000346000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000346000
	[0132.873] VirtualAlloc (lpAddress=0xc0012ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012ec000
	[0132.874] VirtualAlloc (lpAddress=0xc0012ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012ee000
	[0132.874] VirtualAlloc (lpAddress=0xc0012f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012f0000
	[0132.875] VirtualAlloc (lpAddress=0xc0012f4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0012f4000
	[0132.877] VirtualAlloc (lpAddress=0xc000216000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000216000
	[0132.880] VirtualAlloc (lpAddress=0xc000226000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000226000
	[0132.885] VirtualAlloc (lpAddress=0xc00130c000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00130c000
	[0132.894] GetFileType (hFile=0x118) returned 0x1
	[0132.895] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00094bca0*=205026) returned 1
	[0132.895] WriteFile (in: hFile=0x118, lpBuffer=0xc00130c000*, nNumberOfBytesToWrite=0x320e2, lpNumberOfBytesWritten=0xc00094bccc, lpOverlapped=0xc00094bce8 | out: lpBuffer=0xc00130c000*, lpNumberOfBytesWritten=0xc00094bccc*=0x320e2, lpOverlapped=0xc00094bce8) returned 1
	[0133.130] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0135.559] GetFileType (hFile=0x118) returned 0x1
	[0135.559] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x320e2, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00094bca0*=205026) returned 1
	[0135.559] VirtualAlloc (lpAddress=0xc000aea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000aea000
	[0135.560] GetFileType (hFile=0x118) returned 0x1
	[0135.560] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00094bca0*=205026) returned 1
	[0135.560] WriteFile (in: hFile=0x118, lpBuffer=0xc000ac6800*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0xc00094bccc, lpOverlapped=0xc00094bce8 | out: lpBuffer=0xc000ac6800*, lpNumberOfBytesWritten=0xc00094bccc*=0x24b, lpOverlapped=0xc00094bce8) returned 1
	[0136.447] GetFileType (hFile=0x118) returned 0x1
	[0136.447] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x320e2, lpNewFilePointer=0xc00094bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00094bca0*=205026) returned 1
	[0136.447] CloseHandle (hObject=0x118) returned 1
	[0137.505] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0138.290] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.egmwv")) returned 0x2020
	[0138.290] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0138.291] SwitchToThread () returned 1
	[0141.379] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0143.580] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0143.890] SetEvent (hEvent=0x120) returned 1
	[0143.890] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0159.331] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0159.368] SetEvent (hEvent=0x148) returned 1
	[0159.370] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101a0 | out: pbBuffer=0xc0000101a0) returned 1
	[0159.370] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000101ba | out: pbBuffer=0xc0000101ba) returned 1
	[0159.370] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0159.370] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101e0 | out: pbBuffer=0xc0000101e0) returned 1
	[0159.370] GetFileType (hFile=0xe0) returned 0x1
	[0159.370] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001095ca0*=1988) returned 1
	[0159.370] WriteFile (in: hFile=0xe0, lpBuffer=0xc00017f000*, nNumberOfBytesToWrite=0x7c4, lpNumberOfBytesWritten=0xc001095ccc, lpOverlapped=0xc001095ce8 | out: lpBuffer=0xc00017f000*, lpNumberOfBytesWritten=0xc001095ccc*=0x7c4, lpOverlapped=0xc001095ce8) returned 1
	[0160.827] GetFileType (hFile=0xe0) returned 0x1
	[0160.827] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7c4, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001095ca0*=1988) returned 1
	[0160.827] GetFileType (hFile=0xe0) returned 0x1
	[0160.828] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001095ca0*=1988) returned 1
	[0160.828] WriteFile (in: hFile=0xe0, lpBuffer=0xc00028e000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc001095ccc, lpOverlapped=0xc001095ce8 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesWritten=0xc001095ccc*=0x22a, lpOverlapped=0xc001095ce8) returned 1
	[0161.136] GetFileType (hFile=0xe0) returned 0x1
	[0161.136] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7c4, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001095ca0*=1988) returned 1
	[0161.137] CloseHandle (hObject=0xe0) returned 1
	[0161.422] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0161.422] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0165.539] SetEvent (hEvent=0x70) returned 1
	[0165.540] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0170.672] SetEvent (hEvent=0x120) returned 1
	[0170.673] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0175.472] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0175.570] SetEvent (hEvent=0xc8) returned 1
	[0175.570] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0201.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20
	[0201.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x20) returned 1
	[0201.543] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.770] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000171cc4 | out: lpMode=0xc000171cc4) returned 0
	[0201.770] ReadFile (in: hFile=0xd0, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x6cd2, lpNumberOfBytesRead=0xc000171cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc000171cec*=0x6cd2, lpOverlapped=0x0) returned 1
	[0201.776] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0201.776] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b7a | out: pbBuffer=0xc000052b7a) returned 1
	[0201.776] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0201.776] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394d5 | out: pbBuffer=0xc0000394d5) returned 1
	[0201.777] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0201.777] GetFileType (hFile=0xd0) returned 0x1
	[0201.777] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=27858) returned 1
	[0201.777] WriteFile (in: hFile=0xd0, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x6cd2, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc0003f5ccc*=0x6cd2, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.778] GetFileType (hFile=0xd0) returned 0x1
	[0201.778] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x6cd2, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=27858) returned 1
	[0201.779] GetFileType (hFile=0xd0) returned 0x1
	[0201.779] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=27858) returned 1
	[0201.779] WriteFile (in: hFile=0xd0, lpBuffer=0xc000121500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc000121500*, lpNumberOfBytesWritten=0xc0003f5ccc*=0x230, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.779] GetFileType (hFile=0xd0) returned 0x1
	[0201.779] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x6cd2, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=27858) returned 1
	[0201.780] CloseHandle (hObject=0xd0) returned 1
	[0201.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.egmwv")) returned 0x20
	[0201.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.799] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0212.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf")) returned 0x20
	[0212.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF", dwFileAttributes=0x20) returned 1
	[0212.590] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0212.823] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0212.823] ReadFile (in: hFile=0xcc, lpBuffer=0xc0004ce000, nNumberOfBytesToRead=0x2358, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ce000*, lpNumberOfBytesRead=0xc00038dcec*=0x2358, lpOverlapped=0x0) returned 1
	[0212.834] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0212.834] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215802 | out: pbBuffer=0xc000215802) returned 1
	[0212.834] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021580e | out: pbBuffer=0xc00021580e) returned 1
	[0212.834] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206300 | out: pbBuffer=0xc000206300) returned 1
	[0212.834] GetFileType (hFile=0xcc) returned 0x1
	[0212.834] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9048) returned 1
	[0212.834] WriteFile (in: hFile=0xcc, lpBuffer=0xc000296000*, nNumberOfBytesToWrite=0x2358, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000296000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2358, lpOverlapped=0xc000155ce8) returned 1
	[0212.835] GetFileType (hFile=0xcc) returned 0x1
	[0212.835] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2358, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9048) returned 1
	[0212.835] GetFileType (hFile=0xcc) returned 0x1
	[0212.835] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9048) returned 1
	[0212.836] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0212.836] GetFileType (hFile=0xcc) returned 0x1
	[0212.836] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x2358, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9048) returned 1
	[0212.836] CloseHandle (hObject=0xcc) returned 1
	[0212.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf.egmwv")) returned 0x20
	[0212.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.856] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0213.660] SetEvent (hEvent=0x90) returned 1
	[0213.660] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0213.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf")) returned 0x20
	[0213.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF", dwFileAttributes=0x20) returned 1
	[0213.872] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0213.882] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0213.955] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000145cc4 | out: lpMode=0xc000145cc4) returned 0
	[0213.955] ReadFile (in: hFile=0x164, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x36b8, lpNumberOfBytesRead=0xc000145cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc000145cec*=0x36b8, lpOverlapped=0x0) returned 1
	[0213.974] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6900 | out: pbBuffer=0xc0002b6900) returned 1
	[0213.974] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000305202 | out: pbBuffer=0xc000305202) returned 1
	[0213.974] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000305282 | out: pbBuffer=0xc000305282) returned 1
	[0213.974] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6940 | out: pbBuffer=0xc0002b6940) returned 1
	[0213.974] SetEvent (hEvent=0x120) returned 1
	[0213.975] GetFileType (hFile=0x164) returned 0x1
	[0213.976] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=14008) returned 1
	[0213.976] WriteFile (in: hFile=0x164, lpBuffer=0xc0004d0000*, nNumberOfBytesToWrite=0x36b8, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc0004d0000*, lpNumberOfBytesWritten=0xc000309ccc*=0x36b8, lpOverlapped=0xc000309ce8) returned 1
	[0213.976] GetFileType (hFile=0x164) returned 0x1
	[0213.976] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x36b8, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=14008) returned 1
	[0213.977] GetFileType (hFile=0x164) returned 0x1
	[0213.977] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000309ca0*=14008) returned 1
	[0213.977] WriteFile (in: hFile=0x164, lpBuffer=0xc00027d180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000309ccc, lpOverlapped=0xc000309ce8 | out: lpBuffer=0xc00027d180*, lpNumberOfBytesWritten=0xc000309ccc*=0x230, lpOverlapped=0xc000309ce8) returned 1
	[0213.977] GetFileType (hFile=0x164) returned 0x1
	[0213.977] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x36b8, lpNewFilePointer=0xc000309ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000309ca0*=14008) returned 1
	[0213.977] CloseHandle (hObject=0x164) returned 1
	[0213.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf.egmwv")) returned 0x20
	[0213.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.993] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.297] SetEvent (hEvent=0x108) returned 1
	[0214.298] SetEvent (hEvent=0x144) returned 1
	[0214.298] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.309] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.317] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg")) returned 0x20
	[0214.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG", dwFileAttributes=0x20) returned 1
	[0214.332] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.364] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000147cc4 | out: lpMode=0xc000147cc4) returned 0
	[0214.364] ReadFile (in: hFile=0x118, lpBuffer=0xc000333000, nNumberOfBytesToRead=0x45cb, lpNumberOfBytesRead=0xc000147cec, lpOverlapped=0x0 | out: lpBuffer=0xc000333000*, lpNumberOfBytesRead=0xc000147cec*=0x45cb, lpOverlapped=0x0) returned 1
	[0214.403] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0214.403] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62aa | out: pbBuffer=0xc0002b62aa) returned 1
	[0214.403] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1902 | out: pbBuffer=0xc0002c1902) returned 1
	[0214.404] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0214.404] GetFileType (hFile=0x118) returned 0x1
	[0214.404] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=17867) returned 1
	[0214.404] WriteFile (in: hFile=0x118, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0x45cb, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc00030dccc*=0x45cb, lpOverlapped=0xc00030dce8) returned 1
	[0214.405] GetFileType (hFile=0x118) returned 0x1
	[0214.405] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x45cb, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=17867) returned 1
	[0214.405] GetFileType (hFile=0x118) returned 0x1
	[0214.406] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=17867) returned 1
	[0214.406] WriteFile (in: hFile=0x118, lpBuffer=0xc0003ef180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0003ef180*, lpNumberOfBytesWritten=0xc00030dccc*=0x230, lpOverlapped=0xc00030dce8) returned 1
	[0214.406] GetFileType (hFile=0x118) returned 0x1
	[0214.406] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x45cb, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=17867) returned 1
	[0214.406] CloseHandle (hObject=0x118) returned 1
	[0214.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.egmwv")) returned 0x20
	[0214.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.414] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.422] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg")) returned 0x20
	[0214.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG", dwFileAttributes=0x20) returned 1
	[0214.427] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.446] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0214.446] ReadFile (in: hFile=0xcc, lpBuffer=0xc0003ba000, nNumberOfBytesToRead=0x9a76, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ba000*, lpNumberOfBytesRead=0xc00016bcec*=0x9a76, lpOverlapped=0x0) returned 1
	[0214.493] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b68d0 | out: pbBuffer=0xc0002b68d0) returned 1
	[0214.493] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b68ea | out: pbBuffer=0xc0002b68ea) returned 1
	[0214.494] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004d2602 | out: pbBuffer=0xc0004d2602) returned 1
	[0214.494] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004d26da | out: pbBuffer=0xc0004d26da) returned 1
	[0214.494] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6910 | out: pbBuffer=0xc0002b6910) returned 1
	[0214.495] GetFileType (hFile=0xcc) returned 0x1
	[0214.495] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015dca0*=39542) returned 1
	[0214.495] WriteFile (in: hFile=0xcc, lpBuffer=0xc000504000*, nNumberOfBytesToWrite=0x9a76, lpNumberOfBytesWritten=0xc00015dccc, lpOverlapped=0xc00015dce8 | out: lpBuffer=0xc000504000*, lpNumberOfBytesWritten=0xc00015dccc*=0x9a76, lpOverlapped=0xc00015dce8) returned 1
	[0214.496] GetFileType (hFile=0xcc) returned 0x1
	[0214.496] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x9a76, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015dca0*=39542) returned 1
	[0214.496] GetFileType (hFile=0xcc) returned 0x1
	[0214.496] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015dca0*=39542) returned 1
	[0214.496] WriteFile (in: hFile=0xcc, lpBuffer=0xc0004d1500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00015dccc, lpOverlapped=0xc00015dce8 | out: lpBuffer=0xc0004d1500*, lpNumberOfBytesWritten=0xc00015dccc*=0x236, lpOverlapped=0xc00015dce8) returned 1
	[0214.496] GetFileType (hFile=0xcc) returned 0x1
	[0214.497] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x9a76, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015dca0*=39542) returned 1
	[0214.497] CloseHandle (hObject=0xcc) returned 1
	[0214.505] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.egmwv")) returned 0x20
	[0214.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.572] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.581] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.616] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) returned 0x0
	[0214.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf")) returned 0x20
	[0214.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF", dwFileAttributes=0x20) returned 1
	[0214.627] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf.egmwv"), dwFlags=0x1) returned 1
	[0214.665] SetEvent (hEvent=0x70) returned 1
	[0214.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0214.667] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0214.667] ReadFile (in: hFile=0x164, lpBuffer=0xc000440000, nNumberOfBytesToRead=0xb544, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000440000*, lpNumberOfBytesRead=0xc00016dcec*=0xb544, lpOverlapped=0x0) returned 1
	[0214.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0214.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eda | out: pbBuffer=0xc000052eda) returned 1
	[0214.701] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038502 | out: pbBuffer=0xc000038502) returned 1
	[0214.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003850b | out: pbBuffer=0xc00003850b) returned 1
	[0214.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038541 | out: pbBuffer=0xc000038541) returned 1
	[0214.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000385b9 | out: pbBuffer=0xc0000385b9) returned 1
	[0214.701] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052f00 | out: pbBuffer=0xc000052f00) returned 1
	[0214.702] SetEvent (hEvent=0xac) returned 1
	[0214.702] GetFileType (hFile=0x164) returned 0x1
	[0214.702] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000415ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000415ca0*=46404) returned 1
	[0214.702] WriteFile (in: hFile=0x164, lpBuffer=0xc0005ea000*, nNumberOfBytesToWrite=0xb544, lpNumberOfBytesWritten=0xc000415ccc, lpOverlapped=0xc000415ce8 | out: lpBuffer=0xc0005ea000*, lpNumberOfBytesWritten=0xc000415ccc*=0xb544, lpOverlapped=0xc000415ce8) returned 1
	[0214.703] GetFileType (hFile=0x164) returned 0x1
	[0214.703] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xb544, lpNewFilePointer=0xc000415ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000415ca0*=46404) returned 1
	[0214.703] GetFileType (hFile=0x164) returned 0x1
	[0214.704] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000415ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000415ca0*=46404) returned 1
	[0214.704] WriteFile (in: hFile=0x164, lpBuffer=0xc000476e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000415ccc, lpOverlapped=0xc000415ce8 | out: lpBuffer=0xc000476e00*, lpNumberOfBytesWritten=0xc000415ccc*=0x230, lpOverlapped=0xc000415ce8) returned 1
	[0214.704] GetFileType (hFile=0x164) returned 0x1
	[0214.704] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xb544, lpNewFilePointer=0xc000415ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000415ca0*=46404) returned 1
	[0214.705] CloseHandle (hObject=0x164) returned 1
	[0214.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf.egmwv")) returned 0x20
	[0214.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0214.727] WaitForSingleObject (hHandle=0x84, dwMilliseconds=0xffffffff) 

Thread:
	id = 41
	os_tid = 0xa7c

	[0118.914] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x585feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x585feb0*=0x12c) returned 1
	[0118.914] VirtualQuery (in: lpAddress=0x585fed0, lpBuffer=0x585fed0, dwLength=0x30 | out: lpBuffer=0x585fed0*(BaseAddress=0x585f000, AllocationBase=0x5660000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.914] SwitchToThread () returned 1
	[0118.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002db180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134
	[0118.926] CloseHandle (hObject=0x134) returned 1
	[0118.926] VirtualAlloc (lpAddress=0xc001b00000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001b00000
	[0118.931] VirtualFree (lpAddress=0xc000f4e000, dwSize=0x70000, dwFreeType=0x4000) returned 1
	[0118.971] VirtualAlloc (lpAddress=0xc000d34000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000d34000
	[0118.981] VirtualFree (lpAddress=0xc000666000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0118.981] VirtualFree (lpAddress=0xc00130c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.982] VirtualFree (lpAddress=0xc00130c000, dwSize=0xf4000, dwFreeType=0x4000) returned 1
	[0118.982] VirtualFree (lpAddress=0xc000374000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0118.983] VirtualFree (lpAddress=0xc000ac4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.983] VirtualFree (lpAddress=0xc00094c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.983] VirtualFree (lpAddress=0xc000796000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0118.984] VirtualFree (lpAddress=0xc000796000, dwSize=0x2a000, dwFreeType=0x4000) returned 1
	[0118.984] VirtualFree (lpAddress=0xc00012e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0119.145] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x148
	[0119.146] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0119.153] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0119.153] SetEvent (hEvent=0x70) returned 1
	[0119.154] SetEvent (hEvent=0x14c) returned 1
	[0119.199] GetFileType (hFile=0xdc) returned 0x1
	[0119.199] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0119.200] WriteFile (in: hFile=0xdc, lpBuffer=0xc001e00000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000423ccc, lpOverlapped=0xc000423ce8 | out: lpBuffer=0xc001e00000*, lpNumberOfBytesWritten=0xc000423ccc*=0x100000, lpOverlapped=0xc000423ce8) returned 1
	[0119.839] GetFileType (hFile=0xdc) returned 0x1
	[0119.839] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x100000, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0119.839] GetFileType (hFile=0xdc) returned 0x1
	[0119.840] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0119.840] WriteFile (in: hFile=0xdc, lpBuffer=0xc000294500*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000423ccc, lpOverlapped=0xc000423ce8 | out: lpBuffer=0xc000294500*, lpNumberOfBytesWritten=0xc000423ccc*=0x2d8, lpOverlapped=0xc000423ce8) returned 1
	[0120.960] GetFileType (hFile=0xdc) returned 0x1
	[0120.961] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x100000, lpNewFilePointer=0xc000423ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000423ca0*=1048576) returned 1
	[0120.961] CloseHandle (hObject=0xdc) returned 1
	[0137.130] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0137.462] SetEvent (hEvent=0x108) returned 1
	[0137.462] SetEvent (hEvent=0x124) returned 1
	[0137.462] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0138.068] SetEvent (hEvent=0x84) returned 1
	[0138.068] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0143.891] SetEvent (hEvent=0x54) returned 1
	[0143.891] SetEvent (hEvent=0x100) returned 1
	[0143.892] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0143.917] SetEvent (hEvent=0x54) returned 1
	[0143.917] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0144.778] ReadFile (in: hFile=0xcc, lpBuffer=0xc001b00000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000175cec, lpOverlapped=0x0 | out: lpBuffer=0xc001b00000*, lpNumberOfBytesRead=0xc000175cec*=0x100000, lpOverlapped=0x0) returned 1
	[0144.896] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0145.109] SetEvent (hEvent=0x54) returned 1
	[0145.109] GetFileType (hFile=0x164) returned 0x1
	[0145.109] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000165ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000165ca0*=9503) returned 1
	[0145.109] WriteFile (in: hFile=0x164, lpBuffer=0xc000372000*, nNumberOfBytesToWrite=0x251f, lpNumberOfBytesWritten=0xc000165ccc, lpOverlapped=0xc000165ce8 | out: lpBuffer=0xc000372000*, lpNumberOfBytesWritten=0xc000165ccc*=0x251f, lpOverlapped=0xc000165ce8) returned 1
	[0145.110] GetFileType (hFile=0x164) returned 0x1
	[0145.110] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x251f, lpNewFilePointer=0xc000165ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000165ca0*=9503) returned 1
	[0145.110] VirtualAlloc (lpAddress=0xc00063c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00063c000
	[0145.111] GetFileType (hFile=0x164) returned 0x1
	[0145.112] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000165ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000165ca0*=9503) returned 1
	[0145.112] WriteFile (in: hFile=0x164, lpBuffer=0xc000376000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000165ccc, lpOverlapped=0xc000165ce8 | out: lpBuffer=0xc000376000*, lpNumberOfBytesWritten=0xc000165ccc*=0x230, lpOverlapped=0xc000165ce8) returned 1
	[0145.112] GetFileType (hFile=0x164) returned 0x1
	[0145.112] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x251f, lpNewFilePointer=0xc000165ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000165ca0*=9503) returned 1
	[0145.112] CloseHandle (hObject=0x164) returned 1
	[0145.113] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.egmwv")) returned 0x2020
	[0145.113] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0145.113] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0150.045] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.egmwv")) returned 0x2020
	[0150.046] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0150.047] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.egmwv")) returned 0x2020
	[0150.047] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0150.048] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0150.048] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0150.049] ReadFile (in: hFile=0x164, lpBuffer=0xc0002c4000, nNumberOfBytesToRead=0x1861, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c4000*, lpNumberOfBytesRead=0xc000387cec*=0x1861, lpOverlapped=0x0) returned 1
	[0150.091] VirtualAlloc (lpAddress=0xc000b9c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b9c000
	[0150.093] VirtualAlloc (lpAddress=0xc000b9e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b9e000
	[0150.095] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a150 | out: pbBuffer=0xc00041a150) returned 1
	[0150.095] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001102 | out: pbBuffer=0xc000001102) returned 1
	[0150.095] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001110 | out: pbBuffer=0xc000001110) returned 1
	[0150.096] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001154 | out: pbBuffer=0xc000001154) returned 1
	[0150.096] VirtualAlloc (lpAddress=0xc000ba0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000ba0000
	[0150.098] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a190 | out: pbBuffer=0xc00041a190) returned 1
	[0150.100] GetFileType (hFile=0x164) returned 0x1
	[0150.100] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003edca0*=6241) returned 1
	[0150.100] WriteFile (in: hFile=0x164, lpBuffer=0xc000412000*, nNumberOfBytesToWrite=0x1861, lpNumberOfBytesWritten=0xc0003edccc, lpOverlapped=0xc0003edce8 | out: lpBuffer=0xc000412000*, lpNumberOfBytesWritten=0xc0003edccc*=0x1861, lpOverlapped=0xc0003edce8) returned 1
	[0150.101] GetFileType (hFile=0x164) returned 0x1
	[0150.101] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1861, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003edca0*=6241) returned 1
	[0150.101] GetFileType (hFile=0x164) returned 0x1
	[0150.101] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003edca0*=6241) returned 1
	[0150.102] WriteFile (in: hFile=0x164, lpBuffer=0xc000377880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003edccc, lpOverlapped=0xc0003edce8 | out: lpBuffer=0xc000377880*, lpNumberOfBytesWritten=0xc0003edccc*=0x227, lpOverlapped=0xc0003edce8) returned 1
	[0150.102] GetFileType (hFile=0x164) returned 0x1
	[0150.102] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1861, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003edca0*=6241) returned 1
	[0150.103] CloseHandle (hObject=0x164) returned 1
	[0150.103] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.egmwv")) returned 0x2020
	[0150.103] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0150.104] SetEvent (hEvent=0x108) returned 1
	[0150.104] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0150.488] SetEvent (hEvent=0x144) returned 1
	[0150.489] SetEvent (hEvent=0xac) returned 1
	[0150.489] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0159.084] SetEvent (hEvent=0x54) returned 1
	[0159.092] VirtualAlloc (lpAddress=0xc0013e2000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.093] VirtualAlloc (lpAddress=0xc0013e2000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.093] VirtualAlloc (lpAddress=0xc0013e2000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.093] VirtualAlloc (lpAddress=0xc0013e2000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.093] VirtualAlloc (lpAddress=0xc0013e2000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.093] VirtualAlloc (lpAddress=0xc0013e2000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.094] VirtualAlloc (lpAddress=0xc0013e2000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0013e2000
	[0159.095] VirtualAlloc (lpAddress=0xc0013f2000, dwSize=0x1f0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.095] VirtualAlloc (lpAddress=0xc0013f2000, dwSize=0xf8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.095] VirtualAlloc (lpAddress=0xc0013f2000, dwSize=0x7c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.095] VirtualAlloc (lpAddress=0xc0013f2000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.095] VirtualAlloc (lpAddress=0xc0013f2000, dwSize=0x1f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.095] VirtualAlloc (lpAddress=0xc0013f2000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.095] VirtualAlloc (lpAddress=0xc0013f2000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0013f2000
	[0159.096] VirtualAlloc (lpAddress=0xc0013f9000, dwSize=0x1e9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.096] VirtualAlloc (lpAddress=0xc0013f9000, dwSize=0xf4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.096] VirtualAlloc (lpAddress=0xc0013f9000, dwSize=0x7a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.096] VirtualAlloc (lpAddress=0xc0013f9000, dwSize=0x3d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.096] VirtualAlloc (lpAddress=0xc0013f9000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.097] VirtualAlloc (lpAddress=0xc0013f9000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0159.097] VirtualAlloc (lpAddress=0xc0013f9000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0013f9000
	[0159.097] VirtualAlloc (lpAddress=0xc001400000, dwSize=0x1e2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001400000
	[0159.293] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0159.397] SetEvent (hEvent=0x124) returned 1
	[0159.397] SetEvent (hEvent=0x68) returned 1
	[0159.398] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0159.436] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0159.436] SwitchToThread () returned 1
	[0159.437] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0159.438] SetEvent (hEvent=0x124) returned 1
	[0159.438] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0159.440] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0159.440] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0110 | out: pbBuffer=0xc0003a0110) returned 1
	[0159.440] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a012a | out: pbBuffer=0xc0003a012a) returned 1
	[0159.440] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215802 | out: pbBuffer=0xc000215802) returned 1
	[0159.441] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0150 | out: pbBuffer=0xc0003a0150) returned 1
	[0159.441] GetFileType (hFile=0xd4) returned 0x1
	[0159.441] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b9ca0*=1606) returned 1
	[0159.441] WriteFile (in: hFile=0xd4, lpBuffer=0xc00018f000*, nNumberOfBytesToWrite=0x646, lpNumberOfBytesWritten=0xc0002b9ccc, lpOverlapped=0xc0002b9ce8 | out: lpBuffer=0xc00018f000*, lpNumberOfBytesWritten=0xc0002b9ccc*=0x646, lpOverlapped=0xc0002b9ce8) returned 1
	[0160.971] GetFileType (hFile=0xd4) returned 0x1
	[0160.971] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x646, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b9ca0*=1606) returned 1
	[0160.972] GetFileType (hFile=0xd4) returned 0x1
	[0160.972] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002b9ca0*=1606) returned 1
	[0160.972] WriteFile (in: hFile=0xd4, lpBuffer=0xc000188a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002b9ccc, lpOverlapped=0xc0002b9ce8 | out: lpBuffer=0xc000188a80*, lpNumberOfBytesWritten=0xc0002b9ccc*=0x227, lpOverlapped=0xc0002b9ce8) returned 1
	[0161.280] GetFileType (hFile=0xd4) returned 0x1
	[0161.280] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x646, lpNewFilePointer=0xc0002b9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002b9ca0*=1606) returned 1
	[0161.280] CloseHandle (hObject=0xd4) returned 1
	[0161.492] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.egmwv")) returned 0x2020
	[0161.492] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0165.594] SetEvent (hEvent=0x70) returned 1
	[0165.594] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0169.003] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0169.393] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0169.472] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0169.751] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0169.840] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0169.920] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0170.275] SetEvent (hEvent=0x120) returned 1
	[0170.275] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi")) returned 0x2020
	[0170.275] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", dwFileAttributes=0x2020) returned 1
	[0170.276] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.egmwv"), dwFlags=0x1) returned 1
	[0170.278] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0170.278] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0170.278] VirtualAlloc (lpAddress=0xc001688000, dwSize=0x2c000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001688000
	[0170.288] ReadFile (in: hFile=0x164, lpBuffer=0xc001688000, nNumberOfBytesToRead=0x2adb8, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc001688000*, lpNumberOfBytesRead=0xc000169cec*=0x2adb8, lpOverlapped=0x0) returned 1
	[0170.373] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000104c0 | out: pbBuffer=0xc0000104c0) returned 1
	[0170.373] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0170.373] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001cbe | out: pbBuffer=0xc000001cbe) returned 1
	[0170.374] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010510 | out: pbBuffer=0xc000010510) returned 1
	[0170.375] VirtualAlloc (lpAddress=0xc0016b4000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0016b4000
	[0170.402] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0170.449] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0170.449] SetEvent (hEvent=0x70) returned 1
	[0170.449] SetEvent (hEvent=0xac) returned 1
	[0170.449] SetEvent (hEvent=0x100) returned 1
	[0170.453] GetFileType (hFile=0x164) returned 0x1
	[0170.453] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001095ca0*=175544) returned 1
	[0170.453] WriteFile (in: hFile=0x164, lpBuffer=0xc000f60000*, nNumberOfBytesToWrite=0x2adb8, lpNumberOfBytesWritten=0xc001095ccc, lpOverlapped=0xc001095ce8 | out: lpBuffer=0xc000f60000*, lpNumberOfBytesWritten=0xc001095ccc*=0x2adb8, lpOverlapped=0xc001095ce8) returned 1
	[0170.456] GetFileType (hFile=0x164) returned 0x1
	[0170.456] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2adb8, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001095ca0*=175544) returned 1
	[0170.456] GetFileType (hFile=0x164) returned 0x1
	[0170.456] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc001095ca0*=175544) returned 1
	[0170.456] WriteFile (in: hFile=0x164, lpBuffer=0xc00109e800*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0xc001095ccc, lpOverlapped=0xc001095ce8 | out: lpBuffer=0xc00109e800*, lpNumberOfBytesWritten=0xc001095ccc*=0x24e, lpOverlapped=0xc001095ce8) returned 1
	[0170.595] GetFileType (hFile=0x164) returned 0x1
	[0170.595] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2adb8, lpNewFilePointer=0xc001095ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc001095ca0*=175544) returned 1
	[0170.595] CloseHandle (hObject=0x164) returned 1
	[0170.597] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.egmwv")) returned 0x2020
	[0170.597] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0170.597] SetEvent (hEvent=0x100) returned 1
	[0170.597] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0170.675] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0170.675] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0170.717] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0170.717] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0170.763] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0170.763] SetEvent (hEvent=0x70) returned 1
	[0170.763] SetEvent (hEvent=0xc8) returned 1
	[0170.763] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0170.800] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0170.800] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x88e5a0, lpFindFileData=0xc000425698 | out: lpFindFileData=0xc000425698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.801] FindClose (in: hFindFile=0x88e5a0 | out: hFindFile=0x88e5a0) returned 1
	[0170.801] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000425770 | out: lpFileInformation=0xc000425770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588)) returned 1
	[0170.802] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\DECRYPT_EGMWV_FILES.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\decrypt_egmwv_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0170.803] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000425904 | out: lpMode=0xc000425904) returned 0
	[0170.803] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000a6000*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0xc0004258a4, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesWritten=0xc0004258a4*=0x25d, lpOverlapped=0x0) returned 1
	[0170.806] CloseHandle (hObject=0xe0) returned 1
	[0170.806] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc4904ec0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xc4904ec0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.806] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88)) returned 1
	[0170.930] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), fInfoLevelId=0x0, lpFileInformation=0xc000425880 | out: lpFileInformation=0xc000425880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741)) returned 1
	[0171.062] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0171.411] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0175.042] SetEvent (hEvent=0xc8) returned 1
	[0175.049] GetFileType (hFile=0xe8) returned 0x1
	[0175.049] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038fca0*=413258) returned 1
	[0175.049] WriteFile (in: hFile=0xe8, lpBuffer=0xc000f60000*, nNumberOfBytesToWrite=0x64e4a, lpNumberOfBytesWritten=0xc00038fccc, lpOverlapped=0xc00038fce8 | out: lpBuffer=0xc000f60000*, lpNumberOfBytesWritten=0xc00038fccc*=0x64e4a, lpOverlapped=0xc00038fce8) returned 1
	[0175.054] GetFileType (hFile=0xe8) returned 0x1
	[0175.054] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x64e4a, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038fca0*=413258) returned 1
	[0175.055] GetFileType (hFile=0xe8) returned 0x1
	[0175.055] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00038fca0*=413258) returned 1
	[0175.055] WriteFile (in: hFile=0xe8, lpBuffer=0xc00109e000*, nNumberOfBytesToWrite=0x275, lpNumberOfBytesWritten=0xc00038fccc, lpOverlapped=0xc00038fce8 | out: lpBuffer=0xc00109e000*, lpNumberOfBytesWritten=0xc00038fccc*=0x275, lpOverlapped=0xc00038fce8) returned 1
	[0175.233] GetFileType (hFile=0xe8) returned 0x1
	[0175.234] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x64e4a, lpNewFilePointer=0xc00038fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00038fca0*=413258) returned 1
	[0175.234] CloseHandle (hObject=0xe8) returned 1
	[0175.234] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.egmwv")) returned 0x2020
	[0175.235] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0175.235] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 0x2020
	[0175.235] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", dwFileAttributes=0x2020) returned 1
	[0175.236] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.egmwv"), dwFlags=0x1) returned 1
	[0175.237] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0175.237] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000173cc4 | out: lpMode=0xc000173cc4) returned 0
	[0175.238] ReadFile (in: hFile=0xe8, lpBuffer=0xc000342000, nNumberOfBytesToRead=0xe00, lpNumberOfBytesRead=0xc000173cec, lpOverlapped=0x0 | out: lpBuffer=0xc000342000*, lpNumberOfBytesRead=0xc000173cec*=0xe00, lpOverlapped=0x0) returned 1
	[0175.477] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0175.657] SetEvent (hEvent=0x54) returned 1
	[0175.657] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0179.429] SetEvent (hEvent=0x54) returned 1
	[0179.430] SetEvent (hEvent=0x124) returned 1
	[0179.430] SetEvent (hEvent=0x100) returned 1
	[0179.430] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0179.802] SetEvent (hEvent=0x100) returned 1
	[0179.802] SwitchToThread () returned 1
	[0179.838] SwitchToThread () returned 1
	[0179.843] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0181.617] SetEvent (hEvent=0x54) returned 1
	[0181.617] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.egmwv")) returned 0x2020
	[0181.618] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.egmwv", dwFileAttributes=0x2021) returned 1
	[0181.619] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0110 | out: pbBuffer=0xc0003a0110) returned 1
	[0181.619] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0181.619] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0150 | out: pbBuffer=0xc0003a0150) returned 1
	[0181.621] GetFileType (hFile=0x164) returned 0x1
	[0181.621] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=86886) returned 1
	[0181.621] WriteFile (in: hFile=0x164, lpBuffer=0xc0000aa000*, nNumberOfBytesToWrite=0x15366, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x15366, lpOverlapped=0xc0001a1ce8) returned 1
	[0182.054] GetFileType (hFile=0x164) returned 0x1
	[0182.054] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x15366, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=86886) returned 1
	[0182.055] SetEvent (hEvent=0xac) returned 1
	[0182.055] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0182.084] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0182.089] SetEvent (hEvent=0xac) returned 1
	[0182.092] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0182.118] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0182.118] GetFileType (hFile=0x164) returned 0x1
	[0182.118] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000173ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000173ca0*=86886) returned 1
	[0182.118] WriteFile (in: hFile=0x164, lpBuffer=0xc000188000*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc000173ccc, lpOverlapped=0xc000173ce8 | out: lpBuffer=0xc000188000*, lpNumberOfBytesWritten=0xc000173ccc*=0x23c, lpOverlapped=0xc000173ce8) returned 1
	[0182.193] GetFileType (hFile=0x164) returned 0x1
	[0182.193] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x15366, lpNewFilePointer=0xc000173ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000173ca0*=86886) returned 1
	[0182.194] CloseHandle (hObject=0x164) returned 1
	[0182.194] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.egmwv")) returned 0x2020
	[0182.194] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0182.195] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0182.244] SetEvent (hEvent=0x108) returned 1
	[0182.244] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 0x2020
	[0182.245] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", dwFileAttributes=0x2020) returned 1
	[0182.245] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.egmwv"), dwFlags=0x1) returned 1
	[0182.246] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0182.246] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0182.247] ReadFile (in: hFile=0xcc, lpBuffer=0xc000380000, nNumberOfBytesToRead=0x333, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesRead=0xc000387cec*=0x333, lpOverlapped=0x0) returned 1
	[0182.260] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052150 | out: pbBuffer=0xc000052150) returned 1
	[0182.260] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0182.260] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052190 | out: pbBuffer=0xc000052190) returned 1
	[0182.260] GetFileType (hFile=0xcc) returned 0x1
	[0182.260] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003edca0*=819) returned 1
	[0182.261] WriteFile (in: hFile=0xcc, lpBuffer=0xc0001f8000*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0xc0003edccc, lpOverlapped=0xc0003edce8 | out: lpBuffer=0xc0001f8000*, lpNumberOfBytesWritten=0xc0003edccc*=0x333, lpOverlapped=0xc0003edce8) returned 1
	[0182.261] GetFileType (hFile=0xcc) returned 0x1
	[0182.261] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x333, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003edca0*=819) returned 1
	[0182.261] GetFileType (hFile=0xcc) returned 0x1
	[0182.261] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003edca0*=819) returned 1
	[0182.262] WriteFile (in: hFile=0xcc, lpBuffer=0xc000381880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003edccc, lpOverlapped=0xc0003edce8 | out: lpBuffer=0xc000381880*, lpNumberOfBytesWritten=0xc0003edccc*=0x22a, lpOverlapped=0xc0003edce8) returned 1
	[0182.262] GetFileType (hFile=0xcc) returned 0x1
	[0182.262] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x333, lpNewFilePointer=0xc0003edca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003edca0*=819) returned 1
	[0182.262] CloseHandle (hObject=0xcc) returned 1
	[0182.262] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.egmwv")) returned 0x2020
	[0182.263] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0182.263] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0182.268] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0183.001] SetEvent (hEvent=0xac) returned 1
	[0183.001] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0183.002] SetEvent (hEvent=0xac) returned 1
	[0183.002] SetEvent (hEvent=0x54) returned 1
	[0183.003] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.egmwv")) returned 0x2020
	[0183.003] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0183.004] SwitchToThread () returned 1
	[0183.010] SetEvent (hEvent=0xac) returned 1
	[0183.010] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0183.013] SetEvent (hEvent=0xac) returned 1
	[0183.013] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0183.014] SetEvent (hEvent=0xac) returned 1
	[0183.014] SwitchToThread () returned 1
	[0183.035] SetEvent (hEvent=0xac) returned 1
	[0183.035] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0183.070] SetEvent (hEvent=0x54) returned 1
	[0183.071] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0183.075] SetEvent (hEvent=0x54) returned 1
	[0183.075] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0183.076] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0187.908] SetEvent (hEvent=0x124) returned 1
	[0187.908] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0187.924] SetEvent (hEvent=0x54) returned 1
	[0187.924] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0190.770] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0190.770] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0190.848] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0190.892] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0190.892] SetEvent (hEvent=0x70) returned 1
	[0190.892] SetEvent (hEvent=0x54) returned 1
	[0190.893] SetEvent (hEvent=0x108) returned 1
	[0190.893] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x220bd, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc00016bcec*=0x220bd, lpOverlapped=0x0) returned 1
	[0190.985] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0190.998] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052150 | out: pbBuffer=0xc000052150) returned 1
	[0190.998] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005216a | out: pbBuffer=0xc00005216a) returned 1
	[0190.998] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0190.998] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052190 | out: pbBuffer=0xc000052190) returned 1
	[0191.000] SwitchToThread () returned 1
	[0191.006] SetEvent (hEvent=0x54) returned 1
	[0191.006] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0191.120] SwitchToThread () returned 1
	[0191.160] SetEvent (hEvent=0x120) returned 1
	[0191.160] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.egmwv")) returned 0x2020
	[0191.161] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.egmwv", dwFileAttributes=0x2021) returned 1
	[0191.237] SwitchToThread () returned 1
	[0191.279] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.egmwv"), dwFlags=0x1) returned 1
	[0197.880] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0197.880] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0197.881] ReadFile (in: hFile=0x164, lpBuffer=0xc000618000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000618000*, lpNumberOfBytesRead=0xc00016fcec*=0x100000, lpOverlapped=0x0) returned 1
	[0197.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000103b0 | out: pbBuffer=0xc0000103b0) returned 1
	[0197.926] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1602 | out: pbBuffer=0xc0002c1602) returned 1
	[0197.926] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c162d | out: pbBuffer=0xc0002c162d) returned 1
	[0197.926] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000103f0 | out: pbBuffer=0xc0000103f0) returned 1
	[0197.929] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0197.948] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0197.949] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0197.951] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0197.953] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0197.955] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0197.957] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0197.958] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.085] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.086] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.087] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.088] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.089] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.166] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.167] SetEvent (hEvent=0xac) returned 1
	[0198.167] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.208] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.214] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.223] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.223] SetEvent (hEvent=0x70) returned 1
	[0198.223] SetEvent (hEvent=0x54) returned 1
	[0198.224] SetEvent (hEvent=0x120) returned 1
	[0198.225] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.229] SetEvent (hEvent=0xac) returned 1
	[0198.229] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.249] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.357] SetEvent (hEvent=0x70) returned 1
	[0198.357] SetEvent (hEvent=0x120) returned 1
	[0198.357] SetEvent (hEvent=0x54) returned 1
	[0198.358] GetFileType (hFile=0x164) returned 0x1
	[0198.358] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016fca0*=1048576) returned 1
	[0198.358] WriteFile (in: hFile=0x164, lpBuffer=0xc0006f8000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc00016fccc, lpOverlapped=0xc00016fce8 | out: lpBuffer=0xc0006f8000*, lpNumberOfBytesWritten=0xc00016fccc*=0x100000, lpOverlapped=0xc00016fce8) returned 1
	[0198.368] GetFileType (hFile=0x164) returned 0x1
	[0198.368] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016fca0*=1048576) returned 1
	[0198.369] GetFileType (hFile=0x164) returned 0x1
	[0198.369] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016fca0*=1048576) returned 1
	[0198.369] WriteFile (in: hFile=0x164, lpBuffer=0xc000050000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc00016fccc, lpOverlapped=0xc00016fce8 | out: lpBuffer=0xc000050000*, lpNumberOfBytesWritten=0xc00016fccc*=0x2d8, lpOverlapped=0xc00016fce8) returned 1
	[0198.453] SwitchToThread () returned 1
	[0198.523] GetFileType (hFile=0x164) returned 0x1
	[0198.524] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016fca0*=1048576) returned 1
	[0198.524] CloseHandle (hObject=0x164) returned 1
	[0198.524] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.egmwv")) returned 0x2020
	[0198.525] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0198.525] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.667] SetEvent (hEvent=0x120) returned 1
	[0198.667] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.678] SetEvent (hEvent=0x120) returned 1
	[0198.678] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.696] SetEvent (hEvent=0xac) returned 1
	[0198.697] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.700] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.702] SetEvent (hEvent=0x120) returned 1
	[0198.702] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.704] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.egmwv")) returned 0x2020
	[0198.704] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.egmwv", dwFileAttributes=0x2021) returned 1
	[0198.705] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0198.705] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", dwFileAttributes=0x2020) returned 1
	[0198.706] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv"), dwFlags=0x1) returned 1
	[0198.716] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0198.717] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000167cc4 | out: lpMode=0xc000167cc4) returned 0
	[0198.717] ReadFile (in: hFile=0x118, lpBuffer=0xc00096e000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000167cec, lpOverlapped=0x0 | out: lpBuffer=0xc00096e000*, lpNumberOfBytesRead=0xc000167cec*=0x100000, lpOverlapped=0x0) returned 1
	[0198.794] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0198.795] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005213a | out: pbBuffer=0xc00005213a) returned 1
	[0198.795] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0198.795] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0978 | out: pbBuffer=0xc0002c0978) returned 1
	[0198.795] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c09a0 | out: pbBuffer=0xc0002c09a0) returned 1
	[0198.795] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052160 | out: pbBuffer=0xc000052160) returned 1
	[0198.796] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.800] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.800] SetEvent (hEvent=0x70) returned 1
	[0198.800] SetEvent (hEvent=0xac) returned 1
	[0198.804] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.851] SetEvent (hEvent=0xac) returned 1
	[0198.852] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.939] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.944] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0198.958] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0198.959] SetEvent (hEvent=0x70) returned 1
	[0198.959] SetEvent (hEvent=0xac) returned 1
	[0198.960] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.963] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.964] SetEvent (hEvent=0x120) returned 1
	[0198.964] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.967] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0198.969] SetEvent (hEvent=0x144) returned 1
	[0198.969] GetFileType (hFile=0x118) returned 0x1
	[0198.970] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.970] WriteFile (in: hFile=0x118, lpBuffer=0xc0006ba000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000167ccc, lpOverlapped=0xc000167ce8 | out: lpBuffer=0xc0006ba000*, lpNumberOfBytesWritten=0xc000167ccc*=0x100000, lpOverlapped=0xc000167ce8) returned 1
	[0198.980] GetFileType (hFile=0x118) returned 0x1
	[0198.981] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.981] GetFileType (hFile=0x118) returned 0x1
	[0198.981] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.981] WriteFile (in: hFile=0x118, lpBuffer=0xc00018e000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000167ccc, lpOverlapped=0xc000167ce8 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesWritten=0xc000167ccc*=0x2d8, lpOverlapped=0xc000167ce8) returned 1
	[0198.989] GetFileType (hFile=0x118) returned 0x1
	[0198.989] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc000167ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000167ca0*=1048576) returned 1
	[0198.989] CloseHandle (hObject=0x118) returned 1
	[0198.993] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.egmwv")) returned 0x2020
	[0198.993] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.005] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.109] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.114] SetEvent (hEvent=0x124) returned 1
	[0199.114] SetEvent (hEvent=0x144) returned 1
	[0199.115] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0199.118] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.118] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0199.120] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.121] SetEvent (hEvent=0x54) returned 1
	[0199.121] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0199.127] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.128] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.207] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.207] SetEvent (hEvent=0x100) returned 1
	[0199.207] SetEvent (hEvent=0x124) returned 1
	[0199.208] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab")) returned 0x2020
	[0199.208] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", dwFileAttributes=0x2020) returned 1
	[0199.210] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.229] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.233] SetEvent (hEvent=0x124) returned 1
	[0199.233] SetEvent (hEvent=0x120) returned 1
	[0199.233] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.egmwv"), dwFlags=0x1) returned 1
	[0199.257] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0199.258] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0199.258] ReadFile (in: hFile=0x118, lpBuffer=0xc00094a000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00094a000*, lpNumberOfBytesRead=0xc000387cec*=0x100000, lpOverlapped=0x0) returned 1
	[0199.327] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052130 | out: pbBuffer=0xc000052130) returned 1
	[0199.327] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0199.327] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003927a | out: pbBuffer=0xc00003927a) returned 1
	[0199.328] SetEvent (hEvent=0x54) returned 1
	[0199.328] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052170 | out: pbBuffer=0xc000052170) returned 1
	[0199.331] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0199.335] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.336] SetEvent (hEvent=0x54) returned 1
	[0199.336] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0199.361] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.364] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0199.371] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.371] SetEvent (hEvent=0x70) returned 1
	[0199.372] SetEvent (hEvent=0x124) returned 1
	[0199.376] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.377] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.379] SetEvent (hEvent=0x54) returned 1
	[0199.379] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.412] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.414] SetEvent (hEvent=0x70) returned 1
	[0199.415] SetEvent (hEvent=0x124) returned 1
	[0199.415] SetEvent (hEvent=0x100) returned 1
	[0199.415] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.417] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.418] SetEvent (hEvent=0x54) returned 1
	[0199.418] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.425] GetFileType (hFile=0x118) returned 0x1
	[0199.426] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000387ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000387ca0*=1048576) returned 1
	[0199.426] WriteFile (in: hFile=0x118, lpBuffer=0xc0006ba000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000387ccc, lpOverlapped=0xc000387ce8 | out: lpBuffer=0xc0006ba000*, lpNumberOfBytesWritten=0xc000387ccc*=0x100000, lpOverlapped=0xc000387ce8) returned 1
	[0199.436] GetFileType (hFile=0x118) returned 0x1
	[0199.436] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc000387ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000387ca0*=1048576) returned 1
	[0199.436] GetFileType (hFile=0x118) returned 0x1
	[0199.436] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000387ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000387ca0*=1048576) returned 1
	[0199.436] WriteFile (in: hFile=0x118, lpBuffer=0xc0001ca000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000387ccc, lpOverlapped=0xc000387ce8 | out: lpBuffer=0xc0001ca000*, lpNumberOfBytesWritten=0xc000387ccc*=0x2d8, lpOverlapped=0xc000387ce8) returned 1
	[0199.443] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.460] GetFileType (hFile=0x118) returned 0x1
	[0199.460] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x100000, lpNewFilePointer=0xc000387ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000387ca0*=1048576) returned 1
	[0199.460] CloseHandle (hObject=0x118) returned 1
	[0199.461] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.egmwv")) returned 0x2020
	[0199.461] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.461] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.462] SetEvent (hEvent=0x124) returned 1
	[0199.463] SetEvent (hEvent=0x54) returned 1
	[0199.463] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0199.463] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", dwFileAttributes=0x2020) returned 1
	[0199.464] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv"), dwFlags=0x1) returned 1
	[0199.465] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0199.465] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000163cc4 | out: lpMode=0xc000163cc4) returned 0
	[0199.465] ReadFile (in: hFile=0x118, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x220bd, lpNumberOfBytesRead=0xc000163cec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000163cec*=0x220bd, lpOverlapped=0x0) returned 1
	[0199.485] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000521d0 | out: pbBuffer=0xc0000521d0) returned 1
	[0199.485] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000521ea | out: pbBuffer=0xc0000521ea) returned 1
	[0199.485] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1502 | out: pbBuffer=0xc0002c1502) returned 1
	[0199.485] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1511 | out: pbBuffer=0xc0002c1511) returned 1
	[0199.485] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052210 | out: pbBuffer=0xc000052210) returned 1
	[0199.487] GetFileType (hFile=0x118) returned 0x1
	[0199.487] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036bca0*=139453) returned 1
	[0199.487] WriteFile (in: hFile=0x118, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x220bd, lpNumberOfBytesWritten=0xc00036bccc, lpOverlapped=0xc00036bce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc00036bccc*=0x220bd, lpOverlapped=0xc00036bce8) returned 1
	[0199.489] GetFileType (hFile=0x118) returned 0x1
	[0199.489] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x220bd, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036bca0*=139453) returned 1
	[0199.489] GetFileType (hFile=0x118) returned 0x1
	[0199.489] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00036bca0*=139453) returned 1
	[0199.490] WriteFile (in: hFile=0x118, lpBuffer=0xc0002ce700*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0xc00036bccc, lpOverlapped=0xc00036bce8 | out: lpBuffer=0xc0002ce700*, lpNumberOfBytesWritten=0xc00036bccc*=0x245, lpOverlapped=0xc00036bce8) returned 1
	[0199.496] GetFileType (hFile=0x118) returned 0x1
	[0199.496] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x220bd, lpNewFilePointer=0xc00036bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00036bca0*=139453) returned 1
	[0199.496] CloseHandle (hObject=0x118) returned 1
	[0199.498] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.egmwv")) returned 0x2020
	[0199.498] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0199.500] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.504] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab")) returned 0x2020
	[0199.505] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", dwFileAttributes=0x2020) returned 1
	[0199.506] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.egmwv"), dwFlags=0x1) returned 1
	[0199.630] SwitchToThread () returned 1
	[0199.634] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.638] SetEvent (hEvent=0x124) returned 1
	[0199.638] SwitchToThread () returned 1
	[0199.639] SetEvent (hEvent=0x124) returned 1
	[0199.639] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.639] SetEvent (hEvent=0x124) returned 1
	[0199.640] SetEvent (hEvent=0x54) returned 1
	[0199.640] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213)) returned 1
	[0199.640] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0199.641] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0199.641] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0199.641] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000429880 | out: lpFileInformation=0xc000429880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0199.644] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.663] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.682] SetEvent (hEvent=0x120) returned 1
	[0199.682] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi")) returned 0x2020
	[0199.682] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", dwFileAttributes=0x2020) returned 1
	[0199.683] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.egmwv"), dwFlags=0x1) returned 1
	[0199.684] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0199.684] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0199.684] ReadFile (in: hFile=0xd4, lpBuffer=0xc000538000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000538000*, lpNumberOfBytesRead=0xc00016fcec*=0x100000, lpOverlapped=0x0) returned 1
	[0199.747] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0100 | out: pbBuffer=0xc0003a0100) returned 1
	[0199.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a011a | out: pbBuffer=0xc0003a011a) returned 1
	[0199.825] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0199.825] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0003a0140 | out: pbBuffer=0xc0003a0140) returned 1
	[0199.859] VirtualAlloc (lpAddress=0xc000b44000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b44000
	[0199.876] VirtualAlloc (lpAddress=0xc000b84000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0199.876] VirtualAlloc (lpAddress=0xc000b84000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0199.876] VirtualAlloc (lpAddress=0xc000b84000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b84000
	[0199.879] VirtualAlloc (lpAddress=0xc000bc4000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0199.879] VirtualAlloc (lpAddress=0xc000bc4000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bc4000
	[0199.881] VirtualAlloc (lpAddress=0xc000be4000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0199.881] VirtualAlloc (lpAddress=0xc000be4000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000be4000
	[0199.882] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0199.882] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bf4000
	[0199.883] VirtualAlloc (lpAddress=0xc000bfc000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0199.883] VirtualAlloc (lpAddress=0xc000bfc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bfc000
	[0199.883] VirtualAlloc (lpAddress=0xc000c00000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000c00000
	[0199.912] SetEvent (hEvent=0xac) returned 1
	[0199.913] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.915] SetEvent (hEvent=0xac) returned 1
	[0199.915] SetEvent (hEvent=0x124) returned 1
	[0199.916] SwitchToThread () returned 1
	[0199.916] SetEvent (hEvent=0xac) returned 1
	[0199.916] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0199.932] SetEvent (hEvent=0x124) returned 1
	[0199.933] SetEvent (hEvent=0x54) returned 1
	[0199.933] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.937] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.937] SetEvent (hEvent=0x124) returned 1
	[0199.937] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0199.971] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml")) returned 0x2020
	[0199.972] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", dwFileAttributes=0x2020) returned 1
	[0199.972] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.egmwv"), dwFlags=0x1) returned 1
	[0199.973] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.egmwv" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0199.973] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0199.973] ReadFile (in: hFile=0x118, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x2213, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc00038dcec*=0x2213, lpOverlapped=0x0) returned 1
	[0199.999] SetEvent (hEvent=0x54) returned 1
	[0199.999] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.067] SetEvent (hEvent=0x100) returned 1
	[0200.068] SetEvent (hEvent=0x54) returned 1
	[0200.068] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.103] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.107] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20
	[0200.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl", dwFileAttributes=0x20) returned 1
	[0200.113] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.167] SetEvent (hEvent=0x70) returned 1
	[0200.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0200.168] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0200.168] ReadFile (in: hFile=0xe8, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0x4932, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc000425cec*=0x4932, lpOverlapped=0x0) returned 1
	[0200.174] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2a0 | out: pbBuffer=0xc00041a2a0) returned 1
	[0200.174] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039d02 | out: pbBuffer=0xc000039d02) returned 1
	[0200.174] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a2e0 | out: pbBuffer=0xc00041a2e0) returned 1
	[0200.174] GetFileType (hFile=0xe8) returned 0x1
	[0200.174] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=18738) returned 1
	[0200.175] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000d4000*, nNumberOfBytesToWrite=0x4932, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesWritten=0xc00006fccc*=0x4932, lpOverlapped=0xc00006fce8) returned 1
	[0200.175] GetFileType (hFile=0xe8) returned 0x1
	[0200.175] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4932, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=18738) returned 1
	[0200.176] GetFileType (hFile=0xe8) returned 0x1
	[0200.176] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00006fca0*=18738) returned 1
	[0200.176] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001a0e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00006fccc, lpOverlapped=0xc00006fce8 | out: lpBuffer=0xc0001a0e00*, lpNumberOfBytesWritten=0xc00006fccc*=0x22a, lpOverlapped=0xc00006fce8) returned 1
	[0200.176] GetFileType (hFile=0xe8) returned 0x1
	[0200.176] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4932, lpNewFilePointer=0xc00006fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00006fca0*=18738) returned 1
	[0200.176] CloseHandle (hObject=0xe8) returned 1
	[0200.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.egmwv")) returned 0x20
	[0200.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.181] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.194] SetEvent (hEvent=0xac) returned 1
	[0200.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20
	[0200.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl", dwFileAttributes=0x20) returned 1
	[0200.196] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.egmwv"), dwFlags=0x1) returned 1
	[0200.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.229] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0200.229] ReadFile (in: hFile=0xd4, lpBuffer=0xc0000b4000, nNumberOfBytesToRead=0x7d92, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000b4000*, lpNumberOfBytesRead=0xc000425cec*=0x7d92, lpOverlapped=0x0) returned 1
	[0200.234] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000523c0 | out: pbBuffer=0xc0000523c0) returned 1
	[0200.234] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000523da | out: pbBuffer=0xc0000523da) returned 1
	[0200.234] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1602 | out: pbBuffer=0xc0002c1602) returned 1
	[0200.234] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052400 | out: pbBuffer=0xc000052400) returned 1
	[0200.235] GetFileType (hFile=0xd4) returned 0x1
	[0200.235] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=32146) returned 1
	[0200.235] WriteFile (in: hFile=0xd4, lpBuffer=0xc0003c4000*, nNumberOfBytesToWrite=0x7d92, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesWritten=0xc000073ccc*=0x7d92, lpOverlapped=0xc000073ce8) returned 1
	[0200.236] GetFileType (hFile=0xd4) returned 0x1
	[0200.236] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x7d92, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=32146) returned 1
	[0200.236] GetFileType (hFile=0xd4) returned 0x1
	[0200.236] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=32146) returned 1
	[0200.236] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000c6e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc0000c6e00*, lpNumberOfBytesWritten=0xc000073ccc*=0x233, lpOverlapped=0xc000073ce8) returned 1
	[0200.236] GetFileType (hFile=0xd4) returned 0x1
	[0200.236] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x7d92, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=32146) returned 1
	[0200.237] CloseHandle (hObject=0xd4) returned 1
	[0200.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.egmwv")) returned 0x20
	[0200.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.egmwv", dwFileAttributes=0x21) returned 1
	[0200.238] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.272] SetEvent (hEvent=0x120) returned 1
	[0200.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20
	[0200.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x20) returned 1
	[0200.273] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.egmwv"), dwFlags=0x1) returned 1
	[0200.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.295] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.295] ReadFile (in: hFile=0x118, lpBuffer=0xc000330000, nNumberOfBytesToRead=0x10455, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000330000*, lpNumberOfBytesRead=0xc000389cec*=0x10455, lpOverlapped=0x0) returned 1
	[0200.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052550 | out: pbBuffer=0xc000052550) returned 1
	[0200.319] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000222102 | out: pbBuffer=0xc000222102) returned 1
	[0200.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052590 | out: pbBuffer=0xc000052590) returned 1
	[0200.320] GetFileType (hFile=0x118) returned 0x1
	[0200.320] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=66645) returned 1
	[0200.321] WriteFile (in: hFile=0x118, lpBuffer=0xc000438000*, nNumberOfBytesToWrite=0x10455, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc000438000*, lpNumberOfBytesWritten=0xc000073ccc*=0x10455, lpOverlapped=0xc000073ce8) returned 1
	[0200.321] GetFileType (hFile=0x118) returned 0x1
	[0200.321] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x10455, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=66645) returned 1
	[0200.321] GetFileType (hFile=0x118) returned 0x1
	[0200.322] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000073ca0*=66645) returned 1
	[0200.322] WriteFile (in: hFile=0x118, lpBuffer=0xc000228700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000073ccc, lpOverlapped=0xc000073ce8 | out: lpBuffer=0xc000228700*, lpNumberOfBytesWritten=0xc000073ccc*=0x233, lpOverlapped=0xc000073ce8) returned 1
	[0200.326] GetFileType (hFile=0x118) returned 0x1
	[0200.326] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x10455, lpNewFilePointer=0xc000073ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000073ca0*=66645) returned 1
	[0200.326] CloseHandle (hObject=0x118) returned 1
	[0200.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.egmwv" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.egmwv")) returned 0x20
	[0200.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.egmwv", dwFileAttributes=0x21) returned 1
	[0200.328] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.432] SetEvent (hEvent=0x124) returned 1
	[0200.433] SetEvent (hEvent=0x120) returned 1
	[0200.433] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0200.436] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.436] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0200.439] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.439] SetEvent (hEvent=0x124) returned 1
	[0200.439] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0200.441] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.442] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.507] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20
	[0200.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x20) returned 1
	[0200.513] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.556] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0200.556] ReadFile (in: hFile=0xd4, lpBuffer=0xc000416000, nNumberOfBytesToRead=0x3a19, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000416000*, lpNumberOfBytesRead=0xc000387cec*=0x3a19, lpOverlapped=0x0) returned 1
	[0200.562] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0200.562] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0200.562] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215102 | out: pbBuffer=0xc000215102) returned 1
	[0200.562] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0200.562] GetFileType (hFile=0xd4) returned 0x1
	[0200.562] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=14873) returned 1
	[0200.563] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002b0000*, nNumberOfBytesToWrite=0x3a19, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc0002b0000*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x3a19, lpOverlapped=0xc0003d9ce8) returned 1
	[0200.563] GetFileType (hFile=0xd4) returned 0x1
	[0200.563] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x3a19, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=14873) returned 1
	[0200.564] GetFileType (hFile=0xd4) returned 0x1
	[0200.564] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003d9ca0*=14873) returned 1
	[0200.564] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001c1500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0003d9ccc, lpOverlapped=0xc0003d9ce8 | out: lpBuffer=0xc0001c1500*, lpNumberOfBytesWritten=0xc0003d9ccc*=0x22d, lpOverlapped=0xc0003d9ce8) returned 1
	[0200.564] GetFileType (hFile=0xd4) returned 0x1
	[0200.564] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x3a19, lpNewFilePointer=0xc0003d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003d9ca0*=14873) returned 1
	[0200.565] CloseHandle (hObject=0xd4) returned 1
	[0200.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.egmwv")) returned 0x20
	[0200.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.567] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20
	[0200.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x20) returned 1
	[0200.574] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.609] SetEvent (hEvent=0x70) returned 1
	[0200.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.610] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0200.610] ReadFile (in: hFile=0x118, lpBuffer=0xc000458000, nNumberOfBytesToRead=0x1fa1, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000458000*, lpNumberOfBytesRead=0xc00038dcec*=0x1fa1, lpOverlapped=0x0) returned 1
	[0200.616] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0200.616] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0200.616] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f2302 | out: pbBuffer=0xc0000f2302) returned 1
	[0200.616] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000f23c4 | out: pbBuffer=0xc0000f23c4) returned 1
	[0200.616] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0200.617] GetFileType (hFile=0x118) returned 0x1
	[0200.617] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8097) returned 1
	[0200.617] WriteFile (in: hFile=0x118, lpBuffer=0xc0003a2000*, nNumberOfBytesToWrite=0x1fa1, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1fa1, lpOverlapped=0xc000151ce8) returned 1
	[0200.617] GetFileType (hFile=0x118) returned 0x1
	[0200.617] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1fa1, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8097) returned 1
	[0200.618] GetFileType (hFile=0x118) returned 0x1
	[0200.618] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8097) returned 1
	[0200.618] WriteFile (in: hFile=0x118, lpBuffer=0xc0000f6e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0000f6e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x230, lpOverlapped=0xc000151ce8) returned 1
	[0200.618] GetFileType (hFile=0x118) returned 0x1
	[0200.618] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1fa1, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8097) returned 1
	[0200.619] CloseHandle (hObject=0x118) returned 1
	[0200.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.egmwv")) returned 0x20
	[0200.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.622] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20
	[0200.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x20) returned 1
	[0200.635] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.662] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0200.662] ReadFile (in: hFile=0xd4, lpBuffer=0xc0003b3200, nNumberOfBytesToRead=0x205, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b3200*, lpNumberOfBytesRead=0xc000425cec*=0x205, lpOverlapped=0x0) returned 1
	[0200.665] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206590 | out: pbBuffer=0xc000206590) returned 1
	[0200.666] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065aa | out: pbBuffer=0xc0002065aa) returned 1
	[0200.666] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000f3a02 | out: pbBuffer=0xc0000f3a02) returned 1
	[0200.666] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000f3ad5 | out: pbBuffer=0xc0000f3ad5) returned 1
	[0200.666] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065d0 | out: pbBuffer=0xc0002065d0) returned 1
	[0200.666] GetFileType (hFile=0xd4) returned 0x1
	[0200.666] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=517) returned 1
	[0200.666] WriteFile (in: hFile=0xd4, lpBuffer=0xc0003bac00*, nNumberOfBytesToWrite=0x205, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003bac00*, lpNumberOfBytesWritten=0xc000151ccc*=0x205, lpOverlapped=0xc000151ce8) returned 1
	[0200.667] GetFileType (hFile=0xd4) returned 0x1
	[0200.667] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x205, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=517) returned 1
	[0200.667] GetFileType (hFile=0xd4) returned 0x1
	[0200.667] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=517) returned 1
	[0200.667] WriteFile (in: hFile=0xd4, lpBuffer=0xc000202000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000202000*, lpNumberOfBytesWritten=0xc000151ccc*=0x221, lpOverlapped=0xc000151ce8) returned 1
	[0200.668] GetFileType (hFile=0xd4) returned 0x1
	[0200.668] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x205, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=517) returned 1
	[0200.668] CloseHandle (hObject=0xd4) returned 1
	[0200.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.egmwv")) returned 0x20
	[0200.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.674] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.689] SetEvent (hEvent=0x124) returned 1
	[0200.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20
	[0200.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x20) returned 1
	[0200.692] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.717] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.717] ReadFile (in: hFile=0xd4, lpBuffer=0xc000145000, nNumberOfBytesToRead=0xd9c, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000145000*, lpNumberOfBytesRead=0xc000389cec*=0xd9c, lpOverlapped=0x0) returned 1
	[0200.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053050 | out: pbBuffer=0xc000053050) returned 1
	[0200.727] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001cf902 | out: pbBuffer=0xc0001cf902) returned 1
	[0200.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001cf90a | out: pbBuffer=0xc0001cf90a) returned 1
	[0200.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001cf969 | out: pbBuffer=0xc0001cf969) returned 1
	[0200.728] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053090 | out: pbBuffer=0xc000053090) returned 1
	[0200.728] GetFileType (hFile=0xd4) returned 0x1
	[0200.728] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=3484) returned 1
	[0200.728] WriteFile (in: hFile=0xd4, lpBuffer=0xc0002fe000*, nNumberOfBytesToWrite=0xd9c, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesWritten=0xc0003ddccc*=0xd9c, lpOverlapped=0xc0003ddce8) returned 1
	[0200.728] GetFileType (hFile=0xd4) returned 0x1
	[0200.729] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xd9c, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=3484) returned 1
	[0200.729] GetFileType (hFile=0xd4) returned 0x1
	[0200.729] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003ddca0*=3484) returned 1
	[0200.729] WriteFile (in: hFile=0xd4, lpBuffer=0xc000300000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0003ddccc, lpOverlapped=0xc0003ddce8 | out: lpBuffer=0xc000300000*, lpNumberOfBytesWritten=0xc0003ddccc*=0x22d, lpOverlapped=0xc0003ddce8) returned 1
	[0200.729] GetFileType (hFile=0xd4) returned 0x1
	[0200.729] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0xd9c, lpNewFilePointer=0xc0003ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003ddca0*=3484) returned 1
	[0200.730] CloseHandle (hObject=0xd4) returned 1
	[0200.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.egmwv")) returned 0x20
	[0200.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.734] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20
	[0200.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x20) returned 1
	[0200.742] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.774] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.774] ReadFile (in: hFile=0x118, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1485, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000389cec*=0x1485, lpOverlapped=0x0) returned 1
	[0200.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068a0 | out: pbBuffer=0xc0002068a0) returned 1
	[0200.782] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000117502 | out: pbBuffer=0xc000117502) returned 1
	[0200.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00011757e | out: pbBuffer=0xc00011757e) returned 1
	[0200.783] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068e0 | out: pbBuffer=0xc0002068e0) returned 1
	[0200.783] GetFileType (hFile=0x118) returned 0x1
	[0200.783] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=5253) returned 1
	[0200.783] WriteFile (in: hFile=0x118, lpBuffer=0xc000258000*, nNumberOfBytesToWrite=0x1485, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000258000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1485, lpOverlapped=0xc000151ce8) returned 1
	[0200.784] GetFileType (hFile=0x118) returned 0x1
	[0200.784] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1485, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=5253) returned 1
	[0200.784] GetFileType (hFile=0x118) returned 0x1
	[0200.784] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=5253) returned 1
	[0200.784] WriteFile (in: hFile=0x118, lpBuffer=0xc000243180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000243180*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0200.784] GetFileType (hFile=0x118) returned 0x1
	[0200.784] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1485, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=5253) returned 1
	[0200.785] CloseHandle (hObject=0x118) returned 1
	[0200.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.egmwv")) returned 0x20
	[0200.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.788] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20
	[0200.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x20) returned 1
	[0200.802] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0200.835] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0200.835] ReadFile (in: hFile=0x118, lpBuffer=0xc0003c6000, nNumberOfBytesToRead=0x3bcc, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c6000*, lpNumberOfBytesRead=0xc000389cec*=0x3bcc, lpOverlapped=0x0) returned 1
	[0200.839] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0200.839] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0200.839] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039209 | out: pbBuffer=0xc000039209) returned 1
	[0200.840] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0200.840] GetFileType (hFile=0x118) returned 0x1
	[0200.840] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=15308) returned 1
	[0200.840] WriteFile (in: hFile=0x118, lpBuffer=0xc000462000*, nNumberOfBytesToWrite=0x3bcc, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000462000*, lpNumberOfBytesWritten=0xc000151ccc*=0x3bcc, lpOverlapped=0xc000151ce8) returned 1
	[0200.841] GetFileType (hFile=0x118) returned 0x1
	[0200.841] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3bcc, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=15308) returned 1
	[0200.841] GetFileType (hFile=0x118) returned 0x1
	[0200.841] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=15308) returned 1
	[0200.841] WriteFile (in: hFile=0x118, lpBuffer=0xc0004c9880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004c9880*, lpNumberOfBytesWritten=0xc000151ccc*=0x233, lpOverlapped=0xc000151ce8) returned 1
	[0200.841] GetFileType (hFile=0x118) returned 0x1
	[0200.841] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x3bcc, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=15308) returned 1
	[0200.842] CloseHandle (hObject=0x118) returned 1
	[0200.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.egmwv")) returned 0x20
	[0200.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0200.843] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0200.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20
	[0200.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x20) returned 1
	[0200.856] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.007] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0201.008] ReadFile (in: hFile=0xd4, lpBuffer=0xc0003da000, nNumberOfBytesToRead=0x13a6, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003da000*, lpNumberOfBytesRead=0xc00038dcec*=0x13a6, lpOverlapped=0x0) returned 1
	[0201.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0201.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0201.014] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0201.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d1b | out: pbBuffer=0xc0002c0d1b) returned 1
	[0201.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0dd4 | out: pbBuffer=0xc0002c0dd4) returned 1
	[0201.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0201.015] GetFileType (hFile=0xd4) returned 0x1
	[0201.015] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=5030) returned 1
	[0201.015] WriteFile (in: hFile=0xd4, lpBuffer=0xc00034c000*, nNumberOfBytesToWrite=0x13a6, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc00034c000*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x13a6, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.015] GetFileType (hFile=0xd4) returned 0x1
	[0201.015] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x13a6, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=5030) returned 1
	[0201.016] GetFileType (hFile=0xd4) returned 0x1
	[0201.016] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=5030) returned 1
	[0201.016] WriteFile (in: hFile=0xd4, lpBuffer=0xc000069500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc000069500*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x22d, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.016] GetFileType (hFile=0xd4) returned 0x1
	[0201.016] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x13a6, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=5030) returned 1
	[0201.017] CloseHandle (hObject=0xd4) returned 1
	[0201.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.egmwv")) returned 0x20
	[0201.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.033] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.041] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.064] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.114] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.123] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.144] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.168] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.185] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.195] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.215] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.243] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.263] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.273] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.297] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.322] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.341] SetEvent (hEvent=0x144) returned 1
	[0201.342] SetEvent (hEvent=0x120) returned 1
	[0201.342] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.362] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.367] SetEvent (hEvent=0x144) returned 1
	[0201.367] SetEvent (hEvent=0x124) returned 1
	[0201.367] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.375] SetEvent (hEvent=0x144) returned 1
	[0201.376] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.377] SetEvent (hEvent=0x144) returned 1
	[0201.377] SetEvent (hEvent=0x124) returned 1
	[0201.377] SetEvent (hEvent=0x54) returned 1
	[0201.377] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf")) returned 0x20
	[0201.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x20) returned 1
	[0201.421] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0201.422] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0201.422] ReadFile (in: hFile=0x164, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0xa4c, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc00016fcec*=0xa4c, lpOverlapped=0x0) returned 1
	[0201.462] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0201.462] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0201.462] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0201.462] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001233 | out: pbBuffer=0xc000001233) returned 1
	[0201.463] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0201.463] GetFileType (hFile=0x164) returned 0x1
	[0201.463] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2636) returned 1
	[0201.463] WriteFile (in: hFile=0x164, lpBuffer=0xc000434000*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000434000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0xa4c, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.463] GetFileType (hFile=0x164) returned 0x1
	[0201.464] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa4c, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2636) returned 1
	[0201.464] GetFileType (hFile=0x164) returned 0x1
	[0201.464] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=2636) returned 1
	[0201.464] WriteFile (in: hFile=0x164, lpBuffer=0xc0000c5500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0000c5500*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x227, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.465] GetFileType (hFile=0x164) returned 0x1
	[0201.465] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa4c, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=2636) returned 1
	[0201.466] CloseHandle (hObject=0x164) returned 1
	[0201.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf.egmwv")) returned 0x20
	[0201.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1
	[0201.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf")) returned 0x20
	[0201.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x20) returned 1
	[0201.472] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0201.473] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016fcc4 | out: lpMode=0xc00016fcc4) returned 0
	[0201.473] ReadFile (in: hFile=0x164, lpBuffer=0xc000070000, nNumberOfBytesToRead=0x1e7c, lpNumberOfBytesRead=0xc00016fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000070000*, lpNumberOfBytesRead=0xc00016fcec*=0x1e7c, lpOverlapped=0x0) returned 1
	[0201.501] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0201.501] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0201.501] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f29 | out: pbBuffer=0xc000001f29) returned 1
	[0201.502] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f44 | out: pbBuffer=0xc000001f44) returned 1
	[0201.502] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0201.502] GetFileType (hFile=0x164) returned 0x1
	[0201.502] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=7804) returned 1
	[0201.502] WriteFile (in: hFile=0x164, lpBuffer=0xc0000ea000*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0000ea000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x1e7c, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.503] GetFileType (hFile=0x164) returned 0x1
	[0201.503] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1e7c, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=7804) returned 1
	[0201.503] GetFileType (hFile=0x164) returned 0x1
	[0201.503] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=7804) returned 1
	[0201.503] WriteFile (in: hFile=0x164, lpBuffer=0xc000452e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000452e00*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x233, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.504] GetFileType (hFile=0x164) returned 0x1
	[0201.504] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1e7c, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=7804) returned 1
	[0201.504] CloseHandle (hObject=0x164) returned 1
	[0201.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf.egmwv")) returned 0x20
	[0201.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20
	[0201.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x20) returned 1
	[0201.506] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.615] SetEvent (hEvent=0x70) returned 1
	[0201.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0201.616] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000165cc4 | out: lpMode=0xc000165cc4) returned 0
	[0201.616] ReadFile (in: hFile=0x164, lpBuffer=0xc0004eea80, nNumberOfBytesToRead=0x2a50, lpNumberOfBytesRead=0xc000165cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004eea80*, lpNumberOfBytesRead=0xc000165cec*=0x2a50, lpOverlapped=0x0) returned 1
	[0201.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414440 | out: pbBuffer=0xc000414440) returned 1
	[0201.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041445a | out: pbBuffer=0xc00041445a) returned 1
	[0201.622] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026ea02 | out: pbBuffer=0xc00026ea02) returned 1
	[0201.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026ea9b | out: pbBuffer=0xc00026ea9b) returned 1
	[0201.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414480 | out: pbBuffer=0xc000414480) returned 1
	[0201.623] GetFileType (hFile=0x164) returned 0x1
	[0201.623] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=10832) returned 1
	[0201.623] WriteFile (in: hFile=0x164, lpBuffer=0xc000230000*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000230000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x2a50, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.623] GetFileType (hFile=0x164) returned 0x1
	[0201.624] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2a50, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=10832) returned 1
	[0201.624] GetFileType (hFile=0x164) returned 0x1
	[0201.624] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=10832) returned 1
	[0201.624] WriteFile (in: hFile=0x164, lpBuffer=0xc00027c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc00027c700*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x227, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.624] GetFileType (hFile=0x164) returned 0x1
	[0201.624] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2a50, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=10832) returned 1
	[0201.625] CloseHandle (hObject=0x164) returned 1
	[0201.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.egmwv")) returned 0x20
	[0201.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.627] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.629] SetEvent (hEvent=0x140) returned 1
	[0201.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf")) returned 0x20
	[0201.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x20) returned 1
	[0201.631] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0201.938] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000165cc4 | out: lpMode=0xc000165cc4) returned 0
	[0201.938] ReadFile (in: hFile=0x17c, lpBuffer=0xc00031c000, nNumberOfBytesToRead=0xd14, lpNumberOfBytesRead=0xc000165cec, lpOverlapped=0x0 | out: lpBuffer=0xc00031c000*, lpNumberOfBytesRead=0xc000165cec*=0xd14, lpOverlapped=0x0) returned 1
	[0201.943] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0201.943] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039e02 | out: pbBuffer=0xc000039e02) returned 1
	[0201.943] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039eb5 | out: pbBuffer=0xc000039eb5) returned 1
	[0201.943] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039ec0 | out: pbBuffer=0xc000039ec0) returned 1
	[0201.943] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0201.944] GetFileType (hFile=0x17c) returned 0x1
	[0201.944] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=3348) returned 1
	[0201.944] WriteFile (in: hFile=0x17c, lpBuffer=0xc000342000*, nNumberOfBytesToWrite=0xd14, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc000342000*, lpNumberOfBytesWritten=0xc0003f5ccc*=0xd14, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.944] GetFileType (hFile=0x17c) returned 0x1
	[0201.944] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xd14, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=3348) returned 1
	[0201.944] GetFileType (hFile=0x17c) returned 0x1
	[0201.945] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f5ca0*=3348) returned 1
	[0201.945] WriteFile (in: hFile=0x17c, lpBuffer=0xc00032ce00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003f5ccc, lpOverlapped=0xc0003f5ce8 | out: lpBuffer=0xc00032ce00*, lpNumberOfBytesWritten=0xc0003f5ccc*=0x227, lpOverlapped=0xc0003f5ce8) returned 1
	[0201.945] GetFileType (hFile=0x17c) returned 0x1
	[0201.945] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xd14, lpNewFilePointer=0xc0003f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f5ca0*=3348) returned 1
	[0201.945] CloseHandle (hObject=0x17c) returned 1
	[0201.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf.egmwv")) returned 0x20
	[0201.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.947] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf")) returned 0x20
	[0201.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x20) returned 1
	[0201.960] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0201.988] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0201.989] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000397cc4 | out: lpMode=0xc000397cc4) returned 0
	[0201.989] ReadFile (in: hFile=0x17c, lpBuffer=0xc00024e000, nNumberOfBytesToRead=0x12c8, lpNumberOfBytesRead=0xc000397cec, lpOverlapped=0x0 | out: lpBuffer=0xc00024e000*, lpNumberOfBytesRead=0xc000397cec*=0x12c8, lpOverlapped=0x0) returned 1
	[0201.996] SetEvent (hEvent=0x14c) returned 1
	[0201.997] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0201.997] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000234a02 | out: pbBuffer=0xc000234a02) returned 1
	[0201.997] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000234ae1 | out: pbBuffer=0xc000234ae1) returned 1
	[0201.997] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0201.997] GetFileType (hFile=0x17c) returned 0x1
	[0201.997] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=4808) returned 1
	[0201.998] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004e2000*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc0004e2000*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x12c8, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.998] GetFileType (hFile=0x17c) returned 0x1
	[0201.998] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x12c8, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=4808) returned 1
	[0201.998] GetFileType (hFile=0x17c) returned 0x1
	[0201.999] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003f9ca0*=4808) returned 1
	[0201.999] WriteFile (in: hFile=0x17c, lpBuffer=0xc000283500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003f9ccc, lpOverlapped=0xc0003f9ce8 | out: lpBuffer=0xc000283500*, lpNumberOfBytesWritten=0xc0003f9ccc*=0x227, lpOverlapped=0xc0003f9ce8) returned 1
	[0201.999] GetFileType (hFile=0x17c) returned 0x1
	[0201.999] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x12c8, lpNewFilePointer=0xc0003f9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003f9ca0*=4808) returned 1
	[0201.999] CloseHandle (hObject=0x17c) returned 1
	[0202.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf.egmwv")) returned 0x20
	[0202.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.005] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.007] SetEvent (hEvent=0x14c) returned 1
	[0202.007] SetEvent (hEvent=0x15c) returned 1
	[0202.008] SwitchToThread () returned 1
	[0202.009] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.013] SetEvent (hEvent=0x15c) returned 1
	[0202.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid")) returned 0x20
	[0202.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x20) returned 1
	[0202.014] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0202.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.044] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0202.044] ReadFile (in: hFile=0x164, lpBuffer=0xc000268000, nNumberOfBytesToRead=0x1cd8, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc000268000*, lpNumberOfBytesRead=0xc000161cec*=0x1cd8, lpOverlapped=0x0) returned 1
	[0202.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0202.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d1a | out: pbBuffer=0xc000052d1a) returned 1
	[0202.051] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1802 | out: pbBuffer=0xc0002c1802) returned 1
	[0202.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c184e | out: pbBuffer=0xc0002c184e) returned 1
	[0202.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1888 | out: pbBuffer=0xc0002c1888) returned 1
	[0202.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0202.051] GetFileType (hFile=0x164) returned 0x1
	[0202.051] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=7384) returned 1
	[0202.052] WriteFile (in: hFile=0x164, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x1cd8, lpOverlapped=0xc0000dbce8) returned 1
	[0202.052] GetFileType (hFile=0x164) returned 0x1
	[0202.052] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1cd8, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=7384) returned 1
	[0202.052] GetFileType (hFile=0x164) returned 0x1
	[0202.053] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=7384) returned 1
	[0202.053] WriteFile (in: hFile=0x164, lpBuffer=0xc0003dce00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0003dce00*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22d, lpOverlapped=0xc0000dbce8) returned 1
	[0202.053] GetFileType (hFile=0x164) returned 0x1
	[0202.053] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1cd8, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=7384) returned 1
	[0202.053] CloseHandle (hObject=0x164) returned 1
	[0202.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid.egmwv")) returned 0x20
	[0202.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0202.068] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.101] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.103] SetEvent (hEvent=0x15c) returned 1
	[0202.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x20
	[0202.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x20) returned 1
	[0202.105] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.140] SetEvent (hEvent=0x70) returned 1
	[0202.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.142] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000161cc4 | out: lpMode=0xc000161cc4) returned 0
	[0202.142] ReadFile (in: hFile=0xe0, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x7114, lpNumberOfBytesRead=0xc000161cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000161cec*=0x7114, lpOverlapped=0x0) returned 1
	[0202.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0202.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0202.149] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215d02 | out: pbBuffer=0xc000215d02) returned 1
	[0202.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215dcc | out: pbBuffer=0xc000215dcc) returned 1
	[0202.149] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0202.150] GetFileType (hFile=0xe0) returned 0x1
	[0202.150] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=28948) returned 1
	[0202.150] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0x7114, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x7114, lpOverlapped=0xc0000d7ce8) returned 1
	[0202.150] GetFileType (hFile=0xe0) returned 0x1
	[0202.151] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7114, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=28948) returned 1
	[0202.151] GetFileType (hFile=0xe0) returned 0x1
	[0202.151] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d7ca0*=28948) returned 1
	[0202.151] WriteFile (in: hFile=0xe0, lpBuffer=0xc000396e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000d7ccc, lpOverlapped=0xc0000d7ce8 | out: lpBuffer=0xc000396e00*, lpNumberOfBytesWritten=0xc0000d7ccc*=0x22a, lpOverlapped=0xc0000d7ce8) returned 1
	[0202.151] GetFileType (hFile=0xe0) returned 0x1
	[0202.152] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7114, lpNewFilePointer=0xc0000d7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d7ca0*=28948) returned 1
	[0202.152] CloseHandle (hObject=0xe0) returned 1
	[0202.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf.egmwv")) returned 0x20
	[0202.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.155] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x20
	[0202.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x20) returned 1
	[0202.174] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.206] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0202.206] ReadFile (in: hFile=0x164, lpBuffer=0xc000104000, nNumberOfBytesToRead=0x3f34, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000104000*, lpNumberOfBytesRead=0xc000387cec*=0x3f34, lpOverlapped=0x0) returned 1
	[0202.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6410 | out: pbBuffer=0xc0002b6410) returned 1
	[0202.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b642a | out: pbBuffer=0xc0002b642a) returned 1
	[0202.214] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000124102 | out: pbBuffer=0xc000124102) returned 1
	[0202.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0202.214] GetFileType (hFile=0x164) returned 0x1
	[0202.214] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=16180) returned 1
	[0202.214] WriteFile (in: hFile=0x164, lpBuffer=0xc0003a2000*, nNumberOfBytesToWrite=0x3f34, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesWritten=0xc000151ccc*=0x3f34, lpOverlapped=0xc000151ce8) returned 1
	[0202.215] GetFileType (hFile=0x164) returned 0x1
	[0202.215] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3f34, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=16180) returned 1
	[0202.215] GetFileType (hFile=0x164) returned 0x1
	[0202.215] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=16180) returned 1
	[0202.216] WriteFile (in: hFile=0x164, lpBuffer=0xc000128700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000128700*, lpNumberOfBytesWritten=0xc000151ccc*=0x233, lpOverlapped=0xc000151ce8) returned 1
	[0202.216] GetFileType (hFile=0x164) returned 0x1
	[0202.216] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3f34, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=16180) returned 1
	[0202.216] CloseHandle (hObject=0x164) returned 1
	[0202.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf.egmwv")) returned 0x20
	[0202.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.218] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.230] SetEvent (hEvent=0x15c) returned 1
	[0202.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x20
	[0202.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x20) returned 1
	[0202.233] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.261] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0202.261] ReadFile (in: hFile=0x164, lpBuffer=0xc0002ec000, nNumberOfBytesToRead=0x4124, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesRead=0xc000389cec*=0x4124, lpOverlapped=0x0) returned 1
	[0202.268] SetEvent (hEvent=0x15c) returned 1
	[0202.268] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65a0 | out: pbBuffer=0xc0002b65a0) returned 1
	[0202.268] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ba | out: pbBuffer=0xc0002b65ba) returned 1
	[0202.269] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000124e02 | out: pbBuffer=0xc000124e02) returned 1
	[0202.269] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000124eae | out: pbBuffer=0xc000124eae) returned 1
	[0202.269] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65e0 | out: pbBuffer=0xc0002b65e0) returned 1
	[0202.269] GetFileType (hFile=0x164) returned 0x1
	[0202.269] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=16676) returned 1
	[0202.270] WriteFile (in: hFile=0x164, lpBuffer=0xc00031c000*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00031c000*, lpNumberOfBytesWritten=0xc000151ccc*=0x4124, lpOverlapped=0xc000151ce8) returned 1
	[0202.270] GetFileType (hFile=0x164) returned 0x1
	[0202.270] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4124, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=16676) returned 1
	[0202.270] GetFileType (hFile=0x164) returned 0x1
	[0202.271] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=16676) returned 1
	[0202.271] WriteFile (in: hFile=0x164, lpBuffer=0xc000324000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000324000*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0202.271] GetFileType (hFile=0x164) returned 0x1
	[0202.271] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4124, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=16676) returned 1
	[0202.271] CloseHandle (hObject=0x164) returned 1
	[0202.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf.egmwv")) returned 0x20
	[0202.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.277] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.279] SetEvent (hEvent=0x15c) returned 1
	[0202.279] SetEvent (hEvent=0x14c) returned 1
	[0202.279] SwitchToThread () returned 1
	[0202.280] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.285] SetEvent (hEvent=0x14c) returned 1
	[0202.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x20
	[0202.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x20) returned 1
	[0202.287] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.316] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0202.316] ReadFile (in: hFile=0x17c, lpBuffer=0xc00024e000, nNumberOfBytesToRead=0xfe2, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00024e000*, lpNumberOfBytesRead=0xc000389cec*=0xfe2, lpOverlapped=0x0) returned 1
	[0202.322] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0202.322] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0202.322] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0202.323] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0202.323] GetFileType (hFile=0x17c) returned 0x1
	[0202.323] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000149ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000149ca0*=4066) returned 1
	[0202.323] WriteFile (in: hFile=0x17c, lpBuffer=0xc000174000*, nNumberOfBytesToWrite=0xfe2, lpNumberOfBytesWritten=0xc000149ccc, lpOverlapped=0xc000149ce8 | out: lpBuffer=0xc000174000*, lpNumberOfBytesWritten=0xc000149ccc*=0xfe2, lpOverlapped=0xc000149ce8) returned 1
	[0202.324] GetFileType (hFile=0x17c) returned 0x1
	[0202.324] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xfe2, lpNewFilePointer=0xc000149ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000149ca0*=4066) returned 1
	[0202.324] GetFileType (hFile=0x17c) returned 0x1
	[0202.324] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000149ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000149ca0*=4066) returned 1
	[0202.324] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000d7500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000149ccc, lpOverlapped=0xc000149ce8 | out: lpBuffer=0xc0000d7500*, lpNumberOfBytesWritten=0xc000149ccc*=0x230, lpOverlapped=0xc000149ce8) returned 1
	[0202.325] GetFileType (hFile=0x17c) returned 0x1
	[0202.325] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xfe2, lpNewFilePointer=0xc000149ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000149ca0*=4066) returned 1
	[0202.325] CloseHandle (hObject=0x17c) returned 1
	[0202.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf.egmwv")) returned 0x20
	[0202.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.330] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x20
	[0202.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x20) returned 1
	[0202.338] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.380] SetEvent (hEvent=0x70) returned 1
	[0202.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.382] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.382] ReadFile (in: hFile=0x164, lpBuffer=0xc000356000, nNumberOfBytesToRead=0xbb7c, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000356000*, lpNumberOfBytesRead=0xc00016bcec*=0xbb7c, lpOverlapped=0x0) returned 1
	[0202.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0202.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0202.399] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0202.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215940 | out: pbBuffer=0xc000215940) returned 1
	[0202.399] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0202.400] GetFileType (hFile=0x164) returned 0x1
	[0202.400] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000071ca0*=47996) returned 1
	[0202.400] WriteFile (in: hFile=0x164, lpBuffer=0xc0004ac000*, nNumberOfBytesToWrite=0xbb7c, lpNumberOfBytesWritten=0xc000071ccc, lpOverlapped=0xc000071ce8 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesWritten=0xc000071ccc*=0xbb7c, lpOverlapped=0xc000071ce8) returned 1
	[0202.401] GetFileType (hFile=0x164) returned 0x1
	[0202.401] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xbb7c, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000071ca0*=47996) returned 1
	[0202.401] GetFileType (hFile=0x164) returned 0x1
	[0202.401] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000071ca0*=47996) returned 1
	[0202.401] WriteFile (in: hFile=0x164, lpBuffer=0xc000134e00*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc000071ccc, lpOverlapped=0xc000071ce8 | out: lpBuffer=0xc000134e00*, lpNumberOfBytesWritten=0xc000071ccc*=0x23c, lpOverlapped=0xc000071ce8) returned 1
	[0202.402] GetFileType (hFile=0x164) returned 0x1
	[0202.402] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xbb7c, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000071ca0*=47996) returned 1
	[0202.402] CloseHandle (hObject=0x164) returned 1
	[0202.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf.egmwv")) returned 0x20
	[0202.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.407] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.410] SetEvent (hEvent=0xc8) returned 1
	[0202.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x20
	[0202.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x20) returned 1
	[0202.412] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.449] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0202.449] ReadFile (in: hFile=0xe0, lpBuffer=0xc00040e000, nNumberOfBytesToRead=0x38cc, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00040e000*, lpNumberOfBytesRead=0xc000169cec*=0x38cc, lpOverlapped=0x0) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206440 | out: pbBuffer=0xc000206440) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020645a | out: pbBuffer=0xc00020645a) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00010c802 | out: pbBuffer=0xc00010c802) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010c80e | out: pbBuffer=0xc00010c80e) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010c893 | out: pbBuffer=0xc00010c893) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010c899 | out: pbBuffer=0xc00010c899) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010c8e7 | out: pbBuffer=0xc00010c8e7) returned 1
	[0202.455] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206480 | out: pbBuffer=0xc000206480) returned 1
	[0202.456] GetFileType (hFile=0xe0) returned 0x1
	[0202.456] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000071ca0*=14540) returned 1
	[0202.456] WriteFile (in: hFile=0xe0, lpBuffer=0xc000226000*, nNumberOfBytesToWrite=0x38cc, lpNumberOfBytesWritten=0xc000071ccc, lpOverlapped=0xc000071ce8 | out: lpBuffer=0xc000226000*, lpNumberOfBytesWritten=0xc000071ccc*=0x38cc, lpOverlapped=0xc000071ce8) returned 1
	[0202.456] GetFileType (hFile=0xe0) returned 0x1
	[0202.457] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x38cc, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000071ca0*=14540) returned 1
	[0202.457] GetFileType (hFile=0xe0) returned 0x1
	[0202.457] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000071ca0*=14540) returned 1
	[0202.457] WriteFile (in: hFile=0xe0, lpBuffer=0xc000444700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000071ccc, lpOverlapped=0xc000071ce8 | out: lpBuffer=0xc000444700*, lpNumberOfBytesWritten=0xc000071ccc*=0x22d, lpOverlapped=0xc000071ce8) returned 1
	[0202.457] GetFileType (hFile=0xe0) returned 0x1
	[0202.457] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x38cc, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000071ca0*=14540) returned 1
	[0202.458] CloseHandle (hObject=0xe0) returned 1
	[0202.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf.egmwv")) returned 0x20
	[0202.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.461] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.473] SetEvent (hEvent=0xc8) returned 1
	[0202.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif")) returned 0x20
	[0202.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x20) returned 1
	[0202.481] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.485] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.egmwv"), dwFlags=0x1) returned 1
	[0202.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.516] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0202.516] ReadFile (in: hFile=0x164, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0x34cb, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc000389cec*=0x34cb, lpOverlapped=0x0) returned 1
	[0202.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0202.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0202.522] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0202.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d6d | out: pbBuffer=0xc0002c0d6d) returned 1
	[0202.523] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0202.523] GetFileType (hFile=0x164) returned 0x1
	[0202.523] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=13515) returned 1
	[0202.523] WriteFile (in: hFile=0x164, lpBuffer=0xc0003a4000*, nNumberOfBytesToWrite=0x34cb, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0003a4000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x34cb, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.524] GetFileType (hFile=0x164) returned 0x1
	[0202.524] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x34cb, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=13515) returned 1
	[0202.524] GetFileType (hFile=0x164) returned 0x1
	[0202.524] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=13515) returned 1
	[0202.524] WriteFile (in: hFile=0x164, lpBuffer=0xc00028b500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00028b500*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x230, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.525] GetFileType (hFile=0x164) returned 0x1
	[0202.525] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x34cb, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=13515) returned 1
	[0202.525] CloseHandle (hObject=0x164) returned 1
	[0202.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.egmwv")) returned 0x20
	[0202.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.528] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif")) returned 0x20
	[0202.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x20) returned 1
	[0202.535] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.egmwv"), dwFlags=0x1) returned 1
	[0202.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.572] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0202.572] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0x3d75, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc000169cec*=0x3d75, lpOverlapped=0x0) returned 1
	[0202.577] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0202.577] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eca | out: pbBuffer=0xc000052eca) returned 1
	[0202.578] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0202.578] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038b47 | out: pbBuffer=0xc000038b47) returned 1
	[0202.578] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0202.578] GetFileType (hFile=0xe0) returned 0x1
	[0202.578] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=15733) returned 1
	[0202.578] WriteFile (in: hFile=0xe0, lpBuffer=0xc000116000*, nNumberOfBytesToWrite=0x3d75, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000116000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x3d75, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.579] GetFileType (hFile=0xe0) returned 0x1
	[0202.579] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3d75, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=15733) returned 1
	[0202.579] GetFileType (hFile=0xe0) returned 0x1
	[0202.579] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=15733) returned 1
	[0202.579] WriteFile (in: hFile=0xe0, lpBuffer=0xc000390700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000390700*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x236, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.580] GetFileType (hFile=0xe0) returned 0x1
	[0202.580] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3d75, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=15733) returned 1
	[0202.580] CloseHandle (hObject=0xe0) returned 1
	[0202.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.egmwv")) returned 0x20
	[0202.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.584] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x20
	[0202.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x20) returned 1
	[0202.591] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.636] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0202.637] ReadFile (in: hFile=0x17c, lpBuffer=0xc0004ae500, nNumberOfBytesToRead=0x2244, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ae500*, lpNumberOfBytesRead=0xc000423cec*=0x2244, lpOverlapped=0x0) returned 1
	[0202.642] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0202.642] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000124a02 | out: pbBuffer=0xc000124a02) returned 1
	[0202.642] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000124a92 | out: pbBuffer=0xc000124a92) returned 1
	[0202.643] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0202.643] GetFileType (hFile=0x17c) returned 0x1
	[0202.643] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=8772) returned 1
	[0202.643] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000c4000*, nNumberOfBytesToWrite=0x2244, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0000c4000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x2244, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.644] GetFileType (hFile=0x17c) returned 0x1
	[0202.644] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2244, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=8772) returned 1
	[0202.644] GetFileType (hFile=0x17c) returned 0x1
	[0202.644] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=8772) returned 1
	[0202.644] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000c8000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0000c8000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x224, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.645] GetFileType (hFile=0x17c) returned 0x1
	[0202.645] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2244, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=8772) returned 1
	[0202.645] CloseHandle (hObject=0x17c) returned 1
	[0202.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf.egmwv")) returned 0x20
	[0202.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.650] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.665] SetEvent (hEvent=0xe4) returned 1
	[0202.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x20
	[0202.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x20) returned 1
	[0202.669] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.705] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0202.705] ReadFile (in: hFile=0x164, lpBuffer=0xc0000fe000, nNumberOfBytesToRead=0x2b32, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000fe000*, lpNumberOfBytesRead=0xc000425cec*=0x2b32, lpOverlapped=0x0) returned 1
	[0202.710] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0202.710] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041446a | out: pbBuffer=0xc00041446a) returned 1
	[0202.710] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000220d02 | out: pbBuffer=0xc000220d02) returned 1
	[0202.710] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000220d19 | out: pbBuffer=0xc000220d19) returned 1
	[0202.710] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000220d4f | out: pbBuffer=0xc000220d4f) returned 1
	[0202.710] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414490 | out: pbBuffer=0xc000414490) returned 1
	[0202.711] GetFileType (hFile=0x164) returned 0x1
	[0202.711] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=11058) returned 1
	[0202.711] WriteFile (in: hFile=0x164, lpBuffer=0xc0001de000*, nNumberOfBytesToWrite=0x2b32, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0001de000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x2b32, lpOverlapped=0xc0000dbce8) returned 1
	[0202.711] GetFileType (hFile=0x164) returned 0x1
	[0202.711] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2b32, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=11058) returned 1
	[0202.712] GetFileType (hFile=0x164) returned 0x1
	[0202.712] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=11058) returned 1
	[0202.712] WriteFile (in: hFile=0x164, lpBuffer=0xc0001d6700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0001d6700*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22d, lpOverlapped=0xc0000dbce8) returned 1
	[0202.712] GetFileType (hFile=0x164) returned 0x1
	[0202.712] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2b32, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=11058) returned 1
	[0202.713] CloseHandle (hObject=0x164) returned 1
	[0202.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf.egmwv")) returned 0x20
	[0202.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.715] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.727] SetEvent (hEvent=0xe4) returned 1
	[0202.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x20
	[0202.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x20) returned 1
	[0202.728] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.774] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0202.775] ReadFile (in: hFile=0xe0, lpBuffer=0xc00013c000, nNumberOfBytesToRead=0x1eb6, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00013c000*, lpNumberOfBytesRead=0xc000387cec*=0x1eb6, lpOverlapped=0x0) returned 1
	[0202.779] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0202.779] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0202.779] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0202.779] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0202.779] GetFileType (hFile=0xe0) returned 0x1
	[0202.779] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=7862) returned 1
	[0202.780] WriteFile (in: hFile=0xe0, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x1eb6, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x1eb6, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.780] GetFileType (hFile=0xe0) returned 0x1
	[0202.780] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1eb6, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=7862) returned 1
	[0202.780] GetFileType (hFile=0xe0) returned 0x1
	[0202.781] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=7862) returned 1
	[0202.781] WriteFile (in: hFile=0xe0, lpBuffer=0xc00013f500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc00013f500*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x233, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.781] GetFileType (hFile=0xe0) returned 0x1
	[0202.781] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1eb6, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=7862) returned 1
	[0202.781] CloseHandle (hObject=0xe0) returned 1
	[0202.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf.egmwv")) returned 0x20
	[0202.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.783] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.786] SetEvent (hEvent=0x15c) returned 1
	[0202.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x20
	[0202.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x20) returned 1
	[0202.788] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.821] SetEvent (hEvent=0x70) returned 1
	[0202.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.822] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.822] ReadFile (in: hFile=0x164, lpBuffer=0xc00037c000, nNumberOfBytesToRead=0x27a2, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00037c000*, lpNumberOfBytesRead=0xc00016bcec*=0x27a2, lpOverlapped=0x0) returned 1
	[0202.828] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206440 | out: pbBuffer=0xc000206440) returned 1
	[0202.828] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020645a | out: pbBuffer=0xc00020645a) returned 1
	[0202.828] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0202.829] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f04 | out: pbBuffer=0xc000001f04) returned 1
	[0202.829] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f11 | out: pbBuffer=0xc000001f11) returned 1
	[0202.829] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f7d | out: pbBuffer=0xc000001f7d) returned 1
	[0202.829] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206480 | out: pbBuffer=0xc000206480) returned 1
	[0202.829] GetFileType (hFile=0x164) returned 0x1
	[0202.829] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=10146) returned 1
	[0202.829] WriteFile (in: hFile=0x164, lpBuffer=0xc000470000*, nNumberOfBytesToWrite=0x27a2, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000470000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x27a2, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.830] GetFileType (hFile=0x164) returned 0x1
	[0202.830] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x27a2, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=10146) returned 1
	[0202.830] GetFileType (hFile=0x164) returned 0x1
	[0202.830] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=10146) returned 1
	[0202.831] WriteFile (in: hFile=0x164, lpBuffer=0xc000474000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000474000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.831] GetFileType (hFile=0x164) returned 0x1
	[0202.831] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x27a2, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=10146) returned 1
	[0202.831] CloseHandle (hObject=0x164) returned 1
	[0202.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf.egmwv")) returned 0x20
	[0202.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.834] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x20
	[0202.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x20) returned 1
	[0202.848] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.884] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0202.884] ReadFile (in: hFile=0xe0, lpBuffer=0xc0000e6c00, nNumberOfBytesToRead=0x5ec, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e6c00*, lpNumberOfBytesRead=0xc000429cec*=0x5ec, lpOverlapped=0x0) returned 1
	[0202.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0202.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0202.889] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031a502 | out: pbBuffer=0xc00031a502) returned 1
	[0202.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0202.890] GetFileType (hFile=0xe0) returned 0x1
	[0202.890] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=1516) returned 1
	[0202.890] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001f6000*, nNumberOfBytesToWrite=0x5ec, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0001f6000*, lpNumberOfBytesWritten=0xc000175ccc*=0x5ec, lpOverlapped=0xc000175ce8) returned 1
	[0202.890] GetFileType (hFile=0xe0) returned 0x1
	[0202.890] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5ec, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=1516) returned 1
	[0202.890] GetFileType (hFile=0xe0) returned 0x1
	[0202.891] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=1516) returned 1
	[0202.891] WriteFile (in: hFile=0xe0, lpBuffer=0xc000121180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc000121180*, lpNumberOfBytesWritten=0xc000175ccc*=0x22d, lpOverlapped=0xc000175ce8) returned 1
	[0202.891] GetFileType (hFile=0xe0) returned 0x1
	[0202.891] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5ec, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=1516) returned 1
	[0202.891] CloseHandle (hObject=0xe0) returned 1
	[0202.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf.egmwv")) returned 0x20
	[0202.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.893] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0202.992] SetEvent (hEvent=0x15c) returned 1
	[0202.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x20
	[0202.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x20) returned 1
	[0202.996] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0203.026] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0203.026] ReadFile (in: hFile=0xe0, lpBuffer=0xc000350000, nNumberOfBytesToRead=0x2458, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000350000*, lpNumberOfBytesRead=0xc000169cec*=0x2458, lpOverlapped=0x0) returned 1
	[0203.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0203.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b644a | out: pbBuffer=0xc0002b644a) returned 1
	[0203.032] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031b202 | out: pbBuffer=0xc00031b202) returned 1
	[0203.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00031b22d | out: pbBuffer=0xc00031b22d) returned 1
	[0203.033] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0203.033] GetFileType (hFile=0xe0) returned 0x1
	[0203.033] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=9304) returned 1
	[0203.033] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x2458, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc000175ccc*=0x2458, lpOverlapped=0xc000175ce8) returned 1
	[0203.034] GetFileType (hFile=0xe0) returned 0x1
	[0203.034] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2458, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=9304) returned 1
	[0203.034] GetFileType (hFile=0xe0) returned 0x1
	[0203.035] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=9304) returned 1
	[0203.035] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001b4a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0001b4a80*, lpNumberOfBytesWritten=0xc000175ccc*=0x227, lpOverlapped=0xc000175ce8) returned 1
	[0203.035] GetFileType (hFile=0xe0) returned 0x1
	[0203.035] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2458, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=9304) returned 1
	[0203.035] CloseHandle (hObject=0xe0) returned 1
	[0203.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf.egmwv")) returned 0x20
	[0203.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.038] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0203.041] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0203.044] SetEvent (hEvent=0x15c) returned 1
	[0203.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x20
	[0203.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x20) returned 1
	[0203.045] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.076] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0203.076] ReadFile (in: hFile=0x17c, lpBuffer=0xc00035ec00, nNumberOfBytesToRead=0x600, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00035ec00*, lpNumberOfBytesRead=0xc00016dcec*=0x600, lpOverlapped=0x0) returned 1
	[0203.082] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0203.082] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0203.082] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031be02 | out: pbBuffer=0xc00031be02) returned 1
	[0203.083] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0203.083] GetFileType (hFile=0x17c) returned 0x1
	[0203.083] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=1536) returned 1
	[0203.084] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000ff000*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0000ff000*, lpNumberOfBytesWritten=0xc000175ccc*=0x600, lpOverlapped=0xc000175ce8) returned 1
	[0203.084] GetFileType (hFile=0x17c) returned 0x1
	[0203.084] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x600, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=1536) returned 1
	[0203.084] GetFileType (hFile=0x17c) returned 0x1
	[0203.084] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=1536) returned 1
	[0203.085] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000fc380*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0000fc380*, lpNumberOfBytesWritten=0xc000175ccc*=0x21e, lpOverlapped=0xc000175ce8) returned 1
	[0203.085] GetFileType (hFile=0x17c) returned 0x1
	[0203.085] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x600, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=1536) returned 1
	[0203.085] CloseHandle (hObject=0x17c) returned 1
	[0203.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf.egmwv")) returned 0x20
	[0203.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.143] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0203.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x20
	[0203.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x20) returned 1
	[0203.153] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0203.186] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0203.186] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x30c2, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc00016dcec*=0x30c2, lpOverlapped=0x0) returned 1
	[0203.304] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145e0 | out: pbBuffer=0xc0004145e0) returned 1
	[0203.304] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000230302 | out: pbBuffer=0xc000230302) returned 1
	[0203.304] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000230315 | out: pbBuffer=0xc000230315) returned 1
	[0203.305] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414620 | out: pbBuffer=0xc000414620) returned 1
	[0203.305] GetFileType (hFile=0xe0) returned 0x1
	[0203.305] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=12482) returned 1
	[0203.305] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004d8000*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004d8000*, lpNumberOfBytesWritten=0xc000151ccc*=0x30c2, lpOverlapped=0xc000151ce8) returned 1
	[0203.306] GetFileType (hFile=0xe0) returned 0x1
	[0203.306] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x30c2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=12482) returned 1
	[0203.306] GetFileType (hFile=0xe0) returned 0x1
	[0203.306] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=12482) returned 1
	[0203.307] WriteFile (in: hFile=0xe0, lpBuffer=0xc000244000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000244000*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0203.307] GetFileType (hFile=0xe0) returned 0x1
	[0203.307] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x30c2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=12482) returned 1
	[0203.307] CloseHandle (hObject=0xe0) returned 1
	[0203.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf.egmwv")) returned 0x20
	[0203.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.356] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0203.366] SetEvent (hEvent=0x14c) returned 1
	[0203.366] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0203.370] SetEvent (hEvent=0x15c) returned 1
	[0203.370] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.312] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x20
	[0208.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x20) returned 1
	[0208.330] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0208.395] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0208.395] ReadFile (in: hFile=0x17c, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x52c, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc00016dcec*=0x52c, lpOverlapped=0x0) returned 1
	[0208.551] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0208.551] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0208.551] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215d02 | out: pbBuffer=0xc000215d02) returned 1
	[0208.551] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0208.551] GetFileType (hFile=0x17c) returned 0x1
	[0208.551] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1324) returned 1
	[0208.551] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000f3000*, nNumberOfBytesToWrite=0x52c, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0000f3000*, lpNumberOfBytesWritten=0xc000459ccc*=0x52c, lpOverlapped=0xc000459ce8) returned 1
	[0208.552] GetFileType (hFile=0x17c) returned 0x1
	[0208.552] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x52c, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1324) returned 1
	[0208.552] GetFileType (hFile=0x17c) returned 0x1
	[0208.552] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1324) returned 1
	[0208.553] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000f6e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0000f6e00*, lpNumberOfBytesWritten=0xc000459ccc*=0x227, lpOverlapped=0xc000459ce8) returned 1
	[0208.553] GetFileType (hFile=0x17c) returned 0x1
	[0208.553] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x52c, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1324) returned 1
	[0208.553] CloseHandle (hObject=0x17c) returned 1
	[0208.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf.egmwv")) returned 0x20
	[0208.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.566] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.670] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.672] SetEvent (hEvent=0x5c) returned 1
	[0208.672] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.674] SetEvent (hEvent=0x5c) returned 1
	[0208.674] SetEvent (hEvent=0x150) returned 1
	[0208.674] SwitchToThread () returned 1
	[0208.697] SwitchToThread () returned 1
	[0208.699] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.722] SetEvent (hEvent=0x150) returned 1
	[0208.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf")) returned 0x20
	[0208.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x20) returned 1
	[0208.724] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.750] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0208.751] ReadFile (in: hFile=0x170, lpBuffer=0xc00025a000, nNumberOfBytesToRead=0x788, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00025a000*, lpNumberOfBytesRead=0xc000423cec*=0x788, lpOverlapped=0x0) returned 1
	[0208.756] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0208.756] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0208.756] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0208.756] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0208.756] GetFileType (hFile=0x170) returned 0x1
	[0208.756] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1928) returned 1
	[0208.756] WriteFile (in: hFile=0x170, lpBuffer=0xc00028d000*, nNumberOfBytesToWrite=0x788, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00028d000*, lpNumberOfBytesWritten=0xc000155ccc*=0x788, lpOverlapped=0xc000155ce8) returned 1
	[0208.757] GetFileType (hFile=0x170) returned 0x1
	[0208.757] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x788, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1928) returned 1
	[0208.757] GetFileType (hFile=0x170) returned 0x1
	[0208.757] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1928) returned 1
	[0208.758] WriteFile (in: hFile=0x170, lpBuffer=0xc00027d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00027d500*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0208.758] GetFileType (hFile=0x170) returned 0x1
	[0208.758] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x788, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1928) returned 1
	[0208.758] CloseHandle (hObject=0x170) returned 1
	[0208.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf.egmwv")) returned 0x20
	[0208.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.761] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.774] SetEvent (hEvent=0x150) returned 1
	[0208.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf")) returned 0x20
	[0208.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x20) returned 1
	[0208.778] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.803] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0208.804] ReadFile (in: hFile=0x170, lpBuffer=0xc00006c000, nNumberOfBytesToRead=0x1b08, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00006c000*, lpNumberOfBytesRead=0xc000169cec*=0x1b08, lpOverlapped=0x0) returned 1
	[0208.809] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0208.809] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020643a | out: pbBuffer=0xc00020643a) returned 1
	[0208.809] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fc702 | out: pbBuffer=0xc0000fc702) returned 1
	[0208.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0208.810] GetFileType (hFile=0x170) returned 0x1
	[0208.810] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=6920) returned 1
	[0208.810] WriteFile (in: hFile=0x170, lpBuffer=0xc0002ca000*, nNumberOfBytesToWrite=0x1b08, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0002ca000*, lpNumberOfBytesWritten=0xc000459ccc*=0x1b08, lpOverlapped=0xc000459ce8) returned 1
	[0208.810] GetFileType (hFile=0x170) returned 0x1
	[0208.811] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1b08, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=6920) returned 1
	[0208.811] GetFileType (hFile=0x170) returned 0x1
	[0208.811] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=6920) returned 1
	[0208.811] WriteFile (in: hFile=0x170, lpBuffer=0xc00015aa80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc00015aa80*, lpNumberOfBytesWritten=0xc000459ccc*=0x227, lpOverlapped=0xc000459ce8) returned 1
	[0208.811] GetFileType (hFile=0x170) returned 0x1
	[0208.812] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1b08, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=6920) returned 1
	[0208.812] CloseHandle (hObject=0x170) returned 1
	[0208.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf.egmwv")) returned 0x20
	[0208.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.814] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid")) returned 0x20
	[0208.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID", dwFileAttributes=0x20) returned 1
	[0208.819] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0208.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0208.858] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0208.858] ReadFile (in: hFile=0xe0, lpBuffer=0xc000244500, nNumberOfBytesToRead=0x2178, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000244500*, lpNumberOfBytesRead=0xc000169cec*=0x2178, lpOverlapped=0x0) returned 1
	[0208.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0208.864] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000e6602 | out: pbBuffer=0xc0000e6602) returned 1
	[0208.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0208.864] GetFileType (hFile=0xe0) returned 0x1
	[0208.864] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=8568) returned 1
	[0208.864] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000f6000*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesWritten=0xc000455ccc*=0x2178, lpOverlapped=0xc000455ce8) returned 1
	[0208.865] GetFileType (hFile=0xe0) returned 0x1
	[0208.865] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2178, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=8568) returned 1
	[0208.865] GetFileType (hFile=0xe0) returned 0x1
	[0208.865] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=8568) returned 1
	[0208.865] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000ece00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0000ece00*, lpNumberOfBytesWritten=0xc000455ccc*=0x22a, lpOverlapped=0xc000455ce8) returned 1
	[0208.866] GetFileType (hFile=0xe0) returned 0x1
	[0208.866] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2178, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=8568) returned 1
	[0208.866] CloseHandle (hObject=0xe0) returned 1
	[0208.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid.egmwv")) returned 0x20
	[0208.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0208.870] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf")) returned 0x20
	[0208.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF", dwFileAttributes=0x20) returned 1
	[0208.877] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.914] SetEvent (hEvent=0x70) returned 1
	[0208.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.916] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0208.916] ReadFile (in: hFile=0x178, lpBuffer=0xc000226000, nNumberOfBytesToRead=0x257c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000226000*, lpNumberOfBytesRead=0xc00038dcec*=0x257c, lpOverlapped=0x0) returned 1
	[0208.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053020 | out: pbBuffer=0xc000053020) returned 1
	[0208.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005303a | out: pbBuffer=0xc00005303a) returned 1
	[0208.921] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000133302 | out: pbBuffer=0xc000133302) returned 1
	[0208.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000133395 | out: pbBuffer=0xc000133395) returned 1
	[0208.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053060 | out: pbBuffer=0xc000053060) returned 1
	[0208.921] GetFileType (hFile=0x178) returned 0x1
	[0208.921] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9596) returned 1
	[0208.922] WriteFile (in: hFile=0x178, lpBuffer=0xc00040a000*, nNumberOfBytesToWrite=0x257c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x257c, lpOverlapped=0xc000155ce8) returned 1
	[0208.922] GetFileType (hFile=0x178) returned 0x1
	[0208.922] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x257c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9596) returned 1
	[0208.922] GetFileType (hFile=0x178) returned 0x1
	[0208.922] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9596) returned 1
	[0208.922] WriteFile (in: hFile=0x178, lpBuffer=0xc00040e000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00040e000*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0208.923] GetFileType (hFile=0x178) returned 0x1
	[0208.923] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x257c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9596) returned 1
	[0208.923] CloseHandle (hObject=0x178) returned 1
	[0208.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf.egmwv")) returned 0x20
	[0208.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.927] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf")) returned 0x20
	[0208.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF", dwFileAttributes=0x20) returned 1
	[0208.941] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0208.972] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0208.972] ReadFile (in: hFile=0xe0, lpBuffer=0xc0001f4000, nNumberOfBytesToRead=0x8a12, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f4000*, lpNumberOfBytesRead=0xc00016bcec*=0x8a12, lpOverlapped=0x0) returned 1
	[0208.977] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0208.977] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000e7502 | out: pbBuffer=0xc0000e7502) returned 1
	[0208.977] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000e75b7 | out: pbBuffer=0xc0000e75b7) returned 1
	[0208.978] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0208.978] SetEvent (hEvent=0x150) returned 1
	[0208.978] GetFileType (hFile=0xe0) returned 0x1
	[0208.978] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=35346) returned 1
	[0208.978] WriteFile (in: hFile=0xe0, lpBuffer=0xc000324000*, nNumberOfBytesToWrite=0x8a12, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000324000*, lpNumberOfBytesWritten=0xc000455ccc*=0x8a12, lpOverlapped=0xc000455ce8) returned 1
	[0208.979] GetFileType (hFile=0xe0) returned 0x1
	[0208.979] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x8a12, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=35346) returned 1
	[0208.980] GetFileType (hFile=0xe0) returned 0x1
	[0208.980] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=35346) returned 1
	[0208.980] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002e8700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0002e8700*, lpNumberOfBytesWritten=0xc000455ccc*=0x22a, lpOverlapped=0xc000455ce8) returned 1
	[0208.980] GetFileType (hFile=0xe0) returned 0x1
	[0208.980] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x8a12, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=35346) returned 1
	[0208.980] CloseHandle (hObject=0xe0) returned 1
	[0208.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf.egmwv")) returned 0x20
	[0208.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.985] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.986] SetEvent (hEvent=0x150) returned 1
	[0208.987] SetEvent (hEvent=0x5c) returned 1
	[0208.987] SwitchToThread () returned 1
	[0208.988] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0208.998] SetEvent (hEvent=0x5c) returned 1
	[0208.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf")) returned 0x20
	[0208.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF", dwFileAttributes=0x20) returned 1
	[0209.002] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.024] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0209.025] ReadFile (in: hFile=0xe0, lpBuffer=0xc00038e000, nNumberOfBytesToRead=0x4dba, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00038e000*, lpNumberOfBytesRead=0xc000429cec*=0x4dba, lpOverlapped=0x0) returned 1
	[0209.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0209.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0209.120] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0209.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d82 | out: pbBuffer=0xc000214d82) returned 1
	[0209.120] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0209.120] GetFileType (hFile=0xe0) returned 0x1
	[0209.120] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000181ca0*=19898) returned 1
	[0209.121] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000e2000*, nNumberOfBytesToWrite=0x4dba, lpNumberOfBytesWritten=0xc000181ccc, lpOverlapped=0xc000181ce8 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesWritten=0xc000181ccc*=0x4dba, lpOverlapped=0xc000181ce8) returned 1
	[0209.122] GetFileType (hFile=0xe0) returned 0x1
	[0209.122] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4dba, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000181ca0*=19898) returned 1
	[0209.122] GetFileType (hFile=0xe0) returned 0x1
	[0209.122] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000181ca0*=19898) returned 1
	[0209.122] WriteFile (in: hFile=0xe0, lpBuffer=0xc000337500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000181ccc, lpOverlapped=0xc000181ce8 | out: lpBuffer=0xc000337500*, lpNumberOfBytesWritten=0xc000181ccc*=0x233, lpOverlapped=0xc000181ce8) returned 1
	[0209.122] GetFileType (hFile=0xe0) returned 0x1
	[0209.123] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4dba, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000181ca0*=19898) returned 1
	[0209.123] CloseHandle (hObject=0xe0) returned 1
	[0209.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf.egmwv")) returned 0x20
	[0209.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.126] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.130] SetEvent (hEvent=0x5c) returned 1
	[0209.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf")) returned 0x20
	[0209.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF", dwFileAttributes=0x20) returned 1
	[0209.132] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.162] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0209.162] ReadFile (in: hFile=0x170, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0xb758, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc000429cec*=0xb758, lpOverlapped=0x0) returned 1
	[0209.169] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0209.169] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b645a | out: pbBuffer=0xc0002b645a) returned 1
	[0209.169] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000272c02 | out: pbBuffer=0xc000272c02) returned 1
	[0209.170] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000272c09 | out: pbBuffer=0xc000272c09) returned 1
	[0209.170] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0209.170] GetFileType (hFile=0x170) returned 0x1
	[0209.171] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000185ca0*=46936) returned 1
	[0209.171] WriteFile (in: hFile=0x170, lpBuffer=0xc0002fe000*, nNumberOfBytesToWrite=0xb758, lpNumberOfBytesWritten=0xc000185ccc, lpOverlapped=0xc000185ce8 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesWritten=0xc000185ccc*=0xb758, lpOverlapped=0xc000185ce8) returned 1
	[0209.172] GetFileType (hFile=0x170) returned 0x1
	[0209.172] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xb758, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000185ca0*=46936) returned 1
	[0209.172] GetFileType (hFile=0x170) returned 0x1
	[0209.172] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000185ca0*=46936) returned 1
	[0209.172] WriteFile (in: hFile=0x170, lpBuffer=0xc000442700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000185ccc, lpOverlapped=0xc000185ce8 | out: lpBuffer=0xc000442700*, lpNumberOfBytesWritten=0xc000185ccc*=0x236, lpOverlapped=0xc000185ce8) returned 1
	[0209.173] GetFileType (hFile=0x170) returned 0x1
	[0209.173] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xb758, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000185ca0*=46936) returned 1
	[0209.173] CloseHandle (hObject=0x170) returned 1
	[0209.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf.egmwv")) returned 0x20
	[0209.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.178] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf")) returned 0x20
	[0209.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF", dwFileAttributes=0x20) returned 1
	[0209.186] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0209.224] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0209.225] ReadFile (in: hFile=0x178, lpBuffer=0xc00036d000, nNumberOfBytesToRead=0x44e6, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00036d000*, lpNumberOfBytesRead=0xc000389cec*=0x44e6, lpOverlapped=0x0) returned 1
	[0209.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414460 | out: pbBuffer=0xc000414460) returned 1
	[0209.301] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001fc602 | out: pbBuffer=0xc0001fc602) returned 1
	[0209.301] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001fc65d | out: pbBuffer=0xc0001fc65d) returned 1
	[0209.302] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004144a0 | out: pbBuffer=0xc0004144a0) returned 1
	[0209.302] GetFileType (hFile=0x178) returned 0x1
	[0209.302] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000181ca0*=17638) returned 1
	[0209.302] WriteFile (in: hFile=0x178, lpBuffer=0xc00012e000*, nNumberOfBytesToWrite=0x44e6, lpNumberOfBytesWritten=0xc000181ccc, lpOverlapped=0xc000181ce8 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesWritten=0xc000181ccc*=0x44e6, lpOverlapped=0xc000181ce8) returned 1
	[0209.303] GetFileType (hFile=0x178) returned 0x1
	[0209.303] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x44e6, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000181ca0*=17638) returned 1
	[0209.303] GetFileType (hFile=0x178) returned 0x1
	[0209.303] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000181ca0*=17638) returned 1
	[0209.304] WriteFile (in: hFile=0x178, lpBuffer=0xc000114700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000181ccc, lpOverlapped=0xc000181ce8 | out: lpBuffer=0xc000114700*, lpNumberOfBytesWritten=0xc000181ccc*=0x22d, lpOverlapped=0xc000181ce8) returned 1
	[0209.304] GetFileType (hFile=0x178) returned 0x1
	[0209.304] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x44e6, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000181ca0*=17638) returned 1
	[0209.304] CloseHandle (hObject=0x178) returned 1
	[0209.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf.egmwv")) returned 0x20
	[0209.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.309] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.322] SetEvent (hEvent=0x5c) returned 1
	[0209.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf")) returned 0x20
	[0209.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF", dwFileAttributes=0x20) returned 1
	[0209.324] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.386] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0209.386] ReadFile (in: hFile=0xe0, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x14c2, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc00038dcec*=0x14c2, lpOverlapped=0x0) returned 1
	[0209.391] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0209.391] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0209.391] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214e02 | out: pbBuffer=0xc000214e02) returned 1
	[0209.391] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0209.391] GetFileType (hFile=0xe0) returned 0x1
	[0209.391] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=5314) returned 1
	[0209.391] WriteFile (in: hFile=0xe0, lpBuffer=0xc000164000*, nNumberOfBytesToWrite=0x14c2, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000164000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x14c2, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.392] GetFileType (hFile=0xe0) returned 0x1
	[0209.392] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x14c2, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=5314) returned 1
	[0209.392] GetFileType (hFile=0xe0) returned 0x1
	[0209.392] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=5314) returned 1
	[0209.392] WriteFile (in: hFile=0xe0, lpBuffer=0xc000484e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000484e00*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x227, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.393] GetFileType (hFile=0xe0) returned 0x1
	[0209.393] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x14c2, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=5314) returned 1
	[0209.393] CloseHandle (hObject=0xe0) returned 1
	[0209.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf.egmwv")) returned 0x20
	[0209.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.404] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.417] SetEvent (hEvent=0x150) returned 1
	[0209.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf")) returned 0x20
	[0209.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF", dwFileAttributes=0x20) returned 1
	[0209.419] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.464] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0209.465] ReadFile (in: hFile=0x170, lpBuffer=0xc00017e000, nNumberOfBytesToRead=0x136a, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00017e000*, lpNumberOfBytesRead=0xc00038dcec*=0x136a, lpOverlapped=0x0) returned 1
	[0209.477] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0209.477] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0209.477] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0209.478] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0209.478] GetFileType (hFile=0x170) returned 0x1
	[0209.478] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0209.479] WriteFile (in: hFile=0x170, lpBuffer=0xc0003de000*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003de000*, lpNumberOfBytesWritten=0xc000155ccc*=0x136a, lpOverlapped=0xc000155ce8) returned 1
	[0209.479] GetFileType (hFile=0x170) returned 0x1
	[0209.479] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x136a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0209.480] GetFileType (hFile=0x170) returned 0x1
	[0209.480] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0209.480] WriteFile (in: hFile=0x170, lpBuffer=0xc000381500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000381500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0209.480] GetFileType (hFile=0x170) returned 0x1
	[0209.480] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x136a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4970) returned 1
	[0209.481] CloseHandle (hObject=0x170) returned 1
	[0209.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf.egmwv")) returned 0x20
	[0209.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.483] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.489] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.491] SetEvent (hEvent=0x150) returned 1
	[0209.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg")) returned 0x20
	[0209.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x20) returned 1
	[0209.492] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.532] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0209.532] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0x5f39, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc000425cec*=0x5f39, lpOverlapped=0x0) returned 1
	[0209.540] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414430 | out: pbBuffer=0xc000414430) returned 1
	[0209.541] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000070902 | out: pbBuffer=0xc000070902) returned 1
	[0209.541] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000070992 | out: pbBuffer=0xc000070992) returned 1
	[0209.541] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414470 | out: pbBuffer=0xc000414470) returned 1
	[0209.541] GetFileType (hFile=0xe0) returned 0x1
	[0209.541] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24377) returned 1
	[0209.541] WriteFile (in: hFile=0xe0, lpBuffer=0xc0000be000*, nNumberOfBytesToWrite=0x5f39, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000be000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5f39, lpOverlapped=0xc000155ce8) returned 1
	[0209.542] GetFileType (hFile=0xe0) returned 0x1
	[0209.542] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5f39, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24377) returned 1
	[0209.542] GetFileType (hFile=0xe0) returned 0x1
	[0209.543] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=24377) returned 1
	[0209.543] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003c8700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c8700*, lpNumberOfBytesWritten=0xc000155ccc*=0x236, lpOverlapped=0xc000155ce8) returned 1
	[0209.543] GetFileType (hFile=0xe0) returned 0x1
	[0209.543] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5f39, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=24377) returned 1
	[0209.543] CloseHandle (hObject=0xe0) returned 1
	[0209.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.egmwv")) returned 0x20
	[0209.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.549] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg")) returned 0x20
	[0209.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x20) returned 1
	[0209.561] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.651] SetEvent (hEvent=0x70) returned 1
	[0209.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.653] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0209.653] ReadFile (in: hFile=0x170, lpBuffer=0xc000276000, nNumberOfBytesToRead=0x559a, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000276000*, lpNumberOfBytesRead=0xc000425cec*=0x559a, lpOverlapped=0x0) returned 1
	[0209.659] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414760 | out: pbBuffer=0xc000414760) returned 1
	[0209.659] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041477a | out: pbBuffer=0xc00041477a) returned 1
	[0209.659] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000071f02 | out: pbBuffer=0xc000071f02) returned 1
	[0209.660] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000071f12 | out: pbBuffer=0xc000071f12) returned 1
	[0209.660] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004147a0 | out: pbBuffer=0xc0004147a0) returned 1
	[0209.660] GetFileType (hFile=0x170) returned 0x1
	[0209.660] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21914) returned 1
	[0209.660] WriteFile (in: hFile=0x170, lpBuffer=0xc0001d4000*, nNumberOfBytesToWrite=0x559a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001d4000*, lpNumberOfBytesWritten=0xc000155ccc*=0x559a, lpOverlapped=0xc000155ce8) returned 1
	[0209.661] GetFileType (hFile=0x170) returned 0x1
	[0209.661] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x559a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21914) returned 1
	[0209.661] GetFileType (hFile=0x170) returned 0x1
	[0209.662] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21914) returned 1
	[0209.662] WriteFile (in: hFile=0x170, lpBuffer=0xc000275880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000275880*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0209.662] GetFileType (hFile=0x170) returned 0x1
	[0209.662] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x559a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21914) returned 1
	[0209.662] CloseHandle (hObject=0x170) returned 1
	[0209.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.egmwv")) returned 0x20
	[0209.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.682] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.701] SetEvent (hEvent=0x150) returned 1
	[0209.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf")) returned 0x20
	[0209.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x20) returned 1
	[0209.711] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.818] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0209.818] SetEvent (hEvent=0x150) returned 1
	[0209.818] ReadFile (in: hFile=0xe0, lpBuffer=0xc000314000, nNumberOfBytesToRead=0x3632, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesRead=0xc000429cec*=0x3632, lpOverlapped=0x0) returned 1
	[0209.830] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0209.830] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0209.831] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0209.831] GetFileType (hFile=0xe0) returned 0x1
	[0209.831] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=13874) returned 1
	[0209.832] WriteFile (in: hFile=0xe0, lpBuffer=0xc000462000*, nNumberOfBytesToWrite=0x3632, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000462000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3632, lpOverlapped=0xc000155ce8) returned 1
	[0209.832] GetFileType (hFile=0xe0) returned 0x1
	[0209.832] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3632, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=13874) returned 1
	[0209.833] GetFileType (hFile=0xe0) returned 0x1
	[0209.834] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=13874) returned 1
	[0209.834] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004b9500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004b9500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0209.834] GetFileType (hFile=0xe0) returned 0x1
	[0209.835] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3632, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=13874) returned 1
	[0209.835] CloseHandle (hObject=0xe0) returned 1
	[0209.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf.egmwv")) returned 0x20
	[0209.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.841] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.857] SetEvent (hEvent=0xc0) returned 1
	[0209.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg")) returned 0x20
	[0209.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x20) returned 1
	[0209.859] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.896] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0209.897] ReadFile (in: hFile=0xe0, lpBuffer=0xc000317800, nNumberOfBytesToRead=0x3682, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000317800*, lpNumberOfBytesRead=0xc000169cec*=0x3682, lpOverlapped=0x0) returned 1
	[0209.903] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0209.903] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0209.903] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0209.904] GetFileType (hFile=0xe0) returned 0x1
	[0209.904] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=13954) returned 1
	[0209.904] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004a4000*, nNumberOfBytesToWrite=0x3682, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc0004a4000*, lpNumberOfBytesWritten=0xc000235ccc*=0x3682, lpOverlapped=0xc000235ce8) returned 1
	[0209.904] GetFileType (hFile=0xe0) returned 0x1
	[0209.904] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3682, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=13954) returned 1
	[0209.905] GetFileType (hFile=0xe0) returned 0x1
	[0209.905] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=13954) returned 1
	[0209.905] WriteFile (in: hFile=0xe0, lpBuffer=0xc000241500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc000241500*, lpNumberOfBytesWritten=0xc000235ccc*=0x22a, lpOverlapped=0xc000235ce8) returned 1
	[0209.905] GetFileType (hFile=0xe0) returned 0x1
	[0209.905] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3682, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=13954) returned 1
	[0209.906] CloseHandle (hObject=0xe0) returned 1
	[0209.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.egmwv")) returned 0x20
	[0209.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.907] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf")) returned 0x20
	[0209.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x20) returned 1
	[0209.913] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0209.950] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0209.950] ReadFile (in: hFile=0x178, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x6b9a, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000169cec*=0x6b9a, lpOverlapped=0x0) returned 1
	[0209.956] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0209.956] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0209.956] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0209.957] GetFileType (hFile=0x178) returned 0x1
	[0209.957] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=27546) returned 1
	[0209.957] WriteFile (in: hFile=0x178, lpBuffer=0xc0001de000*, nNumberOfBytesToWrite=0x6b9a, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc0001de000*, lpNumberOfBytesWritten=0xc000235ccc*=0x6b9a, lpOverlapped=0xc000235ce8) returned 1
	[0209.958] GetFileType (hFile=0x178) returned 0x1
	[0209.958] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x6b9a, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=27546) returned 1
	[0209.958] GetFileType (hFile=0x178) returned 0x1
	[0209.959] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=27546) returned 1
	[0209.959] WriteFile (in: hFile=0x178, lpBuffer=0xc000322e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc000322e00*, lpNumberOfBytesWritten=0xc000235ccc*=0x233, lpOverlapped=0xc000235ce8) returned 1
	[0209.959] GetFileType (hFile=0x178) returned 0x1
	[0209.959] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x6b9a, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=27546) returned 1
	[0209.959] CloseHandle (hObject=0x178) returned 1
	[0209.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf.egmwv")) returned 0x20
	[0209.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.965] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0209.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg")) returned 0x20
	[0209.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x20) returned 1
	[0209.971] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.008] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0210.008] ReadFile (in: hFile=0xe0, lpBuffer=0xc000448000, nNumberOfBytesToRead=0x4cc8, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000448000*, lpNumberOfBytesRead=0xc000169cec*=0x4cc8, lpOverlapped=0x0) returned 1
	[0210.013] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0210.013] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0210.014] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000327602 | out: pbBuffer=0xc000327602) returned 1
	[0210.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00032762c | out: pbBuffer=0xc00032762c) returned 1
	[0210.014] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0210.014] GetFileType (hFile=0xe0) returned 0x1
	[0210.014] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=19656) returned 1
	[0210.014] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003bc000*, nNumberOfBytesToWrite=0x4cc8, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesWritten=0xc000235ccc*=0x4cc8, lpOverlapped=0xc000235ce8) returned 1
	[0210.015] GetFileType (hFile=0xe0) returned 0x1
	[0210.015] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4cc8, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=19656) returned 1
	[0210.015] GetFileType (hFile=0xe0) returned 0x1
	[0210.015] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=19656) returned 1
	[0210.016] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003c4000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesWritten=0xc000235ccc*=0x22a, lpOverlapped=0xc000235ce8) returned 1
	[0210.016] GetFileType (hFile=0xe0) returned 0x1
	[0210.017] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4cc8, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=19656) returned 1
	[0210.017] CloseHandle (hObject=0xe0) returned 1
	[0210.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.egmwv")) returned 0x20
	[0210.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.022] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.036] SetEvent (hEvent=0xc0) returned 1
	[0210.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg")) returned 0x20
	[0210.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x20) returned 1
	[0210.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.076] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0210.076] ReadFile (in: hFile=0x170, lpBuffer=0xc0004ac000, nNumberOfBytesToRead=0xc53a, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesRead=0xc00016bcec*=0xc53a, lpOverlapped=0x0) returned 1
	[0210.081] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0210.081] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0210.081] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0210.081] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000392bc | out: pbBuffer=0xc0000392bc) returned 1
	[0210.081] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000392c0 | out: pbBuffer=0xc0000392c0) returned 1
	[0210.082] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0210.082] GetFileType (hFile=0x170) returned 0x1
	[0210.082] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=50490) returned 1
	[0210.082] WriteFile (in: hFile=0x170, lpBuffer=0xc000364000*, nNumberOfBytesToWrite=0xc53a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000364000*, lpNumberOfBytesWritten=0xc000155ccc*=0xc53a, lpOverlapped=0xc000155ce8) returned 1
	[0210.083] GetFileType (hFile=0x170) returned 0x1
	[0210.083] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xc53a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=50490) returned 1
	[0210.083] GetFileType (hFile=0x170) returned 0x1
	[0210.083] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=50490) returned 1
	[0210.084] WriteFile (in: hFile=0x170, lpBuffer=0xc00010c000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00010c000*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0210.084] GetFileType (hFile=0x170) returned 0x1
	[0210.084] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xc53a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=50490) returned 1
	[0210.084] CloseHandle (hObject=0x170) returned 1
	[0210.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.egmwv")) returned 0x20
	[0210.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.085] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.093] SetEvent (hEvent=0x150) returned 1
	[0210.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg")) returned 0x20
	[0210.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x20) returned 1
	[0210.101] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.131] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.131] ReadFile (in: hFile=0xe0, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x4ed3, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc000429cec*=0x4ed3, lpOverlapped=0x0) returned 1
	[0210.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0210.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d9a | out: pbBuffer=0xc000052d9a) returned 1
	[0210.137] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0210.137] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052dc0 | out: pbBuffer=0xc000052dc0) returned 1
	[0210.137] GetFileType (hFile=0xe0) returned 0x1
	[0210.137] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=20179) returned 1
	[0210.138] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003e6000*, nNumberOfBytesToWrite=0x4ed3, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003e6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4ed3, lpOverlapped=0xc000155ce8) returned 1
	[0210.138] GetFileType (hFile=0xe0) returned 0x1
	[0210.138] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4ed3, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=20179) returned 1
	[0210.138] GetFileType (hFile=0xe0) returned 0x1
	[0210.138] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=20179) returned 1
	[0210.139] WriteFile (in: hFile=0xe0, lpBuffer=0xc00010d880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00010d880*, lpNumberOfBytesWritten=0xc000155ccc*=0x233, lpOverlapped=0xc000155ce8) returned 1
	[0210.139] GetFileType (hFile=0xe0) returned 0x1
	[0210.139] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4ed3, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=20179) returned 1
	[0210.139] CloseHandle (hObject=0xe0) returned 1
	[0210.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.egmwv")) returned 0x20
	[0210.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.142] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.167] SetEvent (hEvent=0x150) returned 1
	[0210.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf")) returned 0x20
	[0210.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x20) returned 1
	[0210.169] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.205] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.205] ReadFile (in: hFile=0x178, lpBuffer=0xc0003c0000, nNumberOfBytesToRead=0x2232, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c0000*, lpNumberOfBytesRead=0xc000429cec*=0x2232, lpOverlapped=0x0) returned 1
	[0210.210] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0210.210] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0210.210] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000113002 | out: pbBuffer=0xc000113002) returned 1
	[0210.210] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00011307c | out: pbBuffer=0xc00011307c) returned 1
	[0210.210] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000113081 | out: pbBuffer=0xc000113081) returned 1
	[0210.210] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000113084 | out: pbBuffer=0xc000113084) returned 1
	[0210.211] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0210.211] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0210.213] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.213] SetEvent (hEvent=0x70) returned 1
	[0210.213] SetEvent (hEvent=0x15c) returned 1
	[0210.213] GetFileType (hFile=0x178) returned 0x1
	[0210.213] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000243ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000243ca0*=8754) returned 1
	[0210.214] WriteFile (in: hFile=0x178, lpBuffer=0xc0002fc000*, nNumberOfBytesToWrite=0x2232, lpNumberOfBytesWritten=0xc000243ccc, lpOverlapped=0xc000243ce8 | out: lpBuffer=0xc0002fc000*, lpNumberOfBytesWritten=0xc000243ccc*=0x2232, lpOverlapped=0xc000243ce8) returned 1
	[0210.214] GetFileType (hFile=0x178) returned 0x1
	[0210.214] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2232, lpNewFilePointer=0xc000243ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000243ca0*=8754) returned 1
	[0210.214] GetFileType (hFile=0x178) returned 0x1
	[0210.214] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000243ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000243ca0*=8754) returned 1
	[0210.215] WriteFile (in: hFile=0x178, lpBuffer=0xc00024b500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000243ccc, lpOverlapped=0xc000243ce8 | out: lpBuffer=0xc00024b500*, lpNumberOfBytesWritten=0xc000243ccc*=0x227, lpOverlapped=0xc000243ce8) returned 1
	[0210.215] GetFileType (hFile=0x178) returned 0x1
	[0210.215] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2232, lpNewFilePointer=0xc000243ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000243ca0*=8754) returned 1
	[0210.215] CloseHandle (hObject=0x178) returned 1
	[0210.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf.egmwv")) returned 0x20
	[0210.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.220] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.223] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.227] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.250] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.276] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.310] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.319] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.343] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.381] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.400] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.409] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.447] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.466] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.482] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.496] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.521] SetEvent (hEvent=0x150) returned 1
	[0210.522] SetEvent (hEvent=0xe4) returned 1
	[0210.522] SetEvent (hEvent=0x5c) returned 1
	[0210.522] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x0
	[0210.526] SetEvent (hEvent=0x5c) returned 1
	[0210.526] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x1) returned 0x102
	[0210.537] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.537] SwitchToThread () returned 1
	[0210.540] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.700] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.702] SetEvent (hEvent=0xe4) returned 1
	[0210.702] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.712] SetEvent (hEvent=0xe4) returned 1
	[0210.712] SetEvent (hEvent=0xc0) returned 1
	[0210.712] SwitchToThread () returned 1
	[0210.715] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.719] SetEvent (hEvent=0xc0) returned 1
	[0210.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif")) returned 0x20
	[0210.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x20) returned 1
	[0210.721] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.747] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0210.747] ReadFile (in: hFile=0x178, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x148b, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000169cec*=0x148b, lpOverlapped=0x0) returned 1
	[0210.754] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0210.754] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0210.754] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039e02 | out: pbBuffer=0xc000039e02) returned 1
	[0210.754] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0210.754] GetFileType (hFile=0x178) returned 0x1
	[0210.754] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=5259) returned 1
	[0210.754] WriteFile (in: hFile=0x178, lpBuffer=0xc000478000*, nNumberOfBytesToWrite=0x148b, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000478000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x148b, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.755] GetFileType (hFile=0x178) returned 0x1
	[0210.755] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x148b, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=5259) returned 1
	[0210.755] GetFileType (hFile=0x178) returned 0x1
	[0210.755] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=5259) returned 1
	[0210.756] WriteFile (in: hFile=0x178, lpBuffer=0xc00040ee00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00040ee00*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22a, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.756] GetFileType (hFile=0x178) returned 0x1
	[0210.756] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x148b, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=5259) returned 1
	[0210.756] CloseHandle (hObject=0x178) returned 1
	[0210.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif.egmwv")) returned 0x20
	[0210.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.760] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.774] SetEvent (hEvent=0xc0) returned 1
	[0210.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif")) returned 0x20
	[0210.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x20) returned 1
	[0210.777] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.852] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.852] ReadFile (in: hFile=0xe0, lpBuffer=0xc00044c000, nNumberOfBytesToRead=0xc8c9, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc00044c000*, lpNumberOfBytesRead=0xc000429cec*=0xc8c9, lpOverlapped=0x0) returned 1
	[0210.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0210.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020644a | out: pbBuffer=0xc00020644a) returned 1
	[0210.857] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0f02 | out: pbBuffer=0xc0002c0f02) returned 1
	[0210.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0f24 | out: pbBuffer=0xc0002c0f24) returned 1
	[0210.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0210.858] GetFileType (hFile=0xe0) returned 0x1
	[0210.858] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=51401) returned 1
	[0210.858] WriteFile (in: hFile=0xe0, lpBuffer=0xc000110000*, nNumberOfBytesToWrite=0xc8c9, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000110000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0xc8c9, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.859] GetFileType (hFile=0xe0) returned 0x1
	[0210.859] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xc8c9, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=51401) returned 1
	[0210.859] GetFileType (hFile=0xe0) returned 0x1
	[0210.859] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=51401) returned 1
	[0210.859] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002aa700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0002aa700*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x230, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.859] GetFileType (hFile=0xe0) returned 0x1
	[0210.859] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xc8c9, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=51401) returned 1
	[0210.860] CloseHandle (hObject=0xe0) returned 1
	[0210.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif.egmwv")) returned 0x20
	[0210.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.861] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf")) returned 0x20
	[0210.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x20) returned 1
	[0210.875] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.903] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0210.903] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003fb000, nNumberOfBytesToRead=0x45be, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003fb000*, lpNumberOfBytesRead=0xc000429cec*=0x45be, lpOverlapped=0x0) returned 1
	[0210.909] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414440 | out: pbBuffer=0xc000414440) returned 1
	[0210.909] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000376e02 | out: pbBuffer=0xc000376e02) returned 1
	[0210.909] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000376e71 | out: pbBuffer=0xc000376e71) returned 1
	[0210.909] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414480 | out: pbBuffer=0xc000414480) returned 1
	[0210.909] GetFileType (hFile=0xe0) returned 0x1
	[0210.909] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=17854) returned 1
	[0210.909] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003ac000*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc0003ac000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x45be, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.910] GetFileType (hFile=0xe0) returned 0x1
	[0210.910] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x45be, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=17854) returned 1
	[0210.911] GetFileType (hFile=0xe0) returned 0x1
	[0210.911] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=17854) returned 1
	[0210.911] WriteFile (in: hFile=0xe0, lpBuffer=0xc00032fc00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc00032fc00*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x233, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.911] GetFileType (hFile=0xe0) returned 0x1
	[0210.911] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x45be, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=17854) returned 1
	[0210.912] CloseHandle (hObject=0xe0) returned 1
	[0210.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf.egmwv")) returned 0x20
	[0210.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.914] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.917] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.918] SetEvent (hEvent=0xc0) returned 1
	[0210.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp")) returned 0x20
	[0210.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x20) returned 1
	[0210.920] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp.egmwv"), dwFlags=0x1) returned 1
	[0210.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.958] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0210.958] ReadFile (in: hFile=0x170, lpBuffer=0xc000218000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc0002d3cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0210.964] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414100 | out: pbBuffer=0xc000414100) returned 1
	[0210.964] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0a02 | out: pbBuffer=0xc0002c0a02) returned 1
	[0210.964] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0a36 | out: pbBuffer=0xc0002c0a36) returned 1
	[0210.964] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414140 | out: pbBuffer=0xc000414140) returned 1
	[0210.964] GetFileType (hFile=0x170) returned 0x1
	[0210.964] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=32184) returned 1
	[0210.965] WriteFile (in: hFile=0x170, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x7db8, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.965] GetFileType (hFile=0x170) returned 0x1
	[0210.965] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=32184) returned 1
	[0210.965] GetFileType (hFile=0x170) returned 0x1
	[0210.965] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=32184) returned 1
	[0210.966] WriteFile (in: hFile=0x170, lpBuffer=0xc000145880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000145880*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x236, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.966] GetFileType (hFile=0x170) returned 0x1
	[0210.966] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=32184) returned 1
	[0210.966] CloseHandle (hObject=0x170) returned 1
	[0210.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp.egmwv")) returned 0x20
	[0210.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0210.970] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0210.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp")) returned 0x20
	[0210.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP", dwFileAttributes=0x20) returned 1
	[0210.974] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.006] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0211.006] ReadFile (in: hFile=0x178, lpBuffer=0xc00036c000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00036c000*, lpNumberOfBytesRead=0xc0002d3cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0211.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0211.012] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039602 | out: pbBuffer=0xc000039602) returned 1
	[0211.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0211.012] GetFileType (hFile=0x178) returned 0x1
	[0211.012] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.013] WriteFile (in: hFile=0x178, lpBuffer=0xc0000ba000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0000ba000*, lpNumberOfBytesWritten=0xc000351ccc*=0x7db8, lpOverlapped=0xc000351ce8) returned 1
	[0211.013] GetFileType (hFile=0x178) returned 0x1
	[0211.013] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.013] GetFileType (hFile=0x178) returned 0x1
	[0211.013] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.014] WriteFile (in: hFile=0x178, lpBuffer=0xc000359500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000359500*, lpNumberOfBytesWritten=0xc000351ccc*=0x236, lpOverlapped=0xc000351ce8) returned 1
	[0211.014] GetFileType (hFile=0x178) returned 0x1
	[0211.014] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.014] CloseHandle (hObject=0x178) returned 1
	[0211.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp.egmwv")) returned 0x20
	[0211.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.017] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp")) returned 0x20
	[0211.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP", dwFileAttributes=0x20) returned 1
	[0211.032] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.054] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0211.054] ReadFile (in: hFile=0x170, lpBuffer=0xc0002f2000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesRead=0xc000389cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0211.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053060 | out: pbBuffer=0xc000053060) returned 1
	[0211.062] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000377802 | out: pbBuffer=0xc000377802) returned 1
	[0211.062] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000530a0 | out: pbBuffer=0xc0000530a0) returned 1
	[0211.062] GetFileType (hFile=0x170) returned 0x1
	[0211.062] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.062] WriteFile (in: hFile=0x170, lpBuffer=0xc000272000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000272000*, lpNumberOfBytesWritten=0xc000351ccc*=0x7db8, lpOverlapped=0xc000351ce8) returned 1
	[0211.063] GetFileType (hFile=0x170) returned 0x1
	[0211.063] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.063] GetFileType (hFile=0x170) returned 0x1
	[0211.063] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.064] WriteFile (in: hFile=0x170, lpBuffer=0xc000282000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000282000*, lpNumberOfBytesWritten=0xc000351ccc*=0x236, lpOverlapped=0xc000351ce8) returned 1
	[0211.064] GetFileType (hFile=0x170) returned 0x1
	[0211.064] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.064] CloseHandle (hObject=0x170) returned 1
	[0211.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp.egmwv")) returned 0x20
	[0211.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.068] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.079] SetEvent (hEvent=0x150) returned 1
	[0211.080] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp")) returned 0x20
	[0211.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP", dwFileAttributes=0x20) returned 1
	[0211.088] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.136] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0211.137] ReadFile (in: hFile=0x170, lpBuffer=0xc0003c2000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c2000*, lpNumberOfBytesRead=0xc000169cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0211.141] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0211.141] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0211.141] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0211.142] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0211.142] GetFileType (hFile=0x170) returned 0x1
	[0211.142] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=32184) returned 1
	[0211.142] WriteFile (in: hFile=0x170, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x7db8, lpOverlapped=0xc000155ce8) returned 1
	[0211.143] GetFileType (hFile=0x170) returned 0x1
	[0211.143] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=32184) returned 1
	[0211.143] GetFileType (hFile=0x170) returned 0x1
	[0211.143] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=32184) returned 1
	[0211.143] WriteFile (in: hFile=0x170, lpBuffer=0xc0001db500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001db500*, lpNumberOfBytesWritten=0xc000155ccc*=0x236, lpOverlapped=0xc000155ce8) returned 1
	[0211.143] GetFileType (hFile=0x170) returned 0x1
	[0211.144] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=32184) returned 1
	[0211.144] CloseHandle (hObject=0x170) returned 1
	[0211.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp.egmwv")) returned 0x20
	[0211.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.146] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf")) returned 0x20
	[0211.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF", dwFileAttributes=0x20) returned 1
	[0211.162] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.283] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.283] ReadFile (in: hFile=0x170, lpBuffer=0xc0004b4000, nNumberOfBytesToRead=0x3e74, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004b4000*, lpNumberOfBytesRead=0xc00016dcec*=0x3e74, lpOverlapped=0x0) returned 1
	[0211.289] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0211.289] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004c2202 | out: pbBuffer=0xc0004c2202) returned 1
	[0211.289] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0211.289] GetFileType (hFile=0x170) returned 0x1
	[0211.290] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=15988) returned 1
	[0211.290] WriteFile (in: hFile=0x170, lpBuffer=0xc0001e0000*, nNumberOfBytesToWrite=0x3e74, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0001e0000*, lpNumberOfBytesWritten=0xc000351ccc*=0x3e74, lpOverlapped=0xc000351ce8) returned 1
	[0211.290] GetFileType (hFile=0x170) returned 0x1
	[0211.290] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3e74, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=15988) returned 1
	[0211.291] GetFileType (hFile=0x170) returned 0x1
	[0211.291] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=15988) returned 1
	[0211.291] WriteFile (in: hFile=0x170, lpBuffer=0xc0004bd180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0004bd180*, lpNumberOfBytesWritten=0xc000351ccc*=0x233, lpOverlapped=0xc000351ce8) returned 1
	[0211.292] GetFileType (hFile=0x170) returned 0x1
	[0211.292] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3e74, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=15988) returned 1
	[0211.292] CloseHandle (hObject=0x170) returned 1
	[0211.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf.egmwv")) returned 0x20
	[0211.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.300] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.304] SetEvent (hEvent=0x150) returned 1
	[0211.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf")) returned 0x20
	[0211.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF", dwFileAttributes=0x20) returned 1
	[0211.306] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.346] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.346] ReadFile (in: hFile=0x178, lpBuffer=0xc00043a000, nNumberOfBytesToRead=0x4290, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00043a000*, lpNumberOfBytesRead=0xc00016dcec*=0x4290, lpOverlapped=0x0) returned 1
	[0211.352] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0211.352] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215f02 | out: pbBuffer=0xc000215f02) returned 1
	[0211.353] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0211.353] GetFileType (hFile=0x178) returned 0x1
	[0211.353] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=17040) returned 1
	[0211.353] WriteFile (in: hFile=0x178, lpBuffer=0xc0002f8000*, nNumberOfBytesToWrite=0x4290, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x4290, lpOverlapped=0xc0000e9ce8) returned 1
	[0211.353] GetFileType (hFile=0x178) returned 0x1
	[0211.354] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4290, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=17040) returned 1
	[0211.354] GetFileType (hFile=0x178) returned 0x1
	[0211.354] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=17040) returned 1
	[0211.354] WriteFile (in: hFile=0x178, lpBuffer=0xc000456e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000456e00*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x224, lpOverlapped=0xc0000e9ce8) returned 1
	[0211.354] GetFileType (hFile=0x178) returned 0x1
	[0211.354] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4290, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=17040) returned 1
	[0211.354] CloseHandle (hObject=0x178) returned 1
	[0211.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf.egmwv")) returned 0x20
	[0211.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.359] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf")) returned 0x20
	[0211.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF", dwFileAttributes=0x20) returned 1
	[0211.375] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.432] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.433] ReadFile (in: hFile=0x170, lpBuffer=0xc00016e000, nNumberOfBytesToRead=0xaf94, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesRead=0xc00016dcec*=0xaf94, lpOverlapped=0x0) returned 1
	[0211.451] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0211.451] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ac802 | out: pbBuffer=0xc0001ac802) returned 1
	[0211.451] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0211.451] GetFileType (hFile=0x170) returned 0x1
	[0211.452] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=44948) returned 1
	[0211.452] WriteFile (in: hFile=0x170, lpBuffer=0xc0004c4000*, nNumberOfBytesToWrite=0xaf94, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004c4000*, lpNumberOfBytesWritten=0xc000155ccc*=0xaf94, lpOverlapped=0xc000155ce8) returned 1
	[0211.453] GetFileType (hFile=0x170) returned 0x1
	[0211.453] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xaf94, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=44948) returned 1
	[0211.453] GetFileType (hFile=0x170) returned 0x1
	[0211.453] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=44948) returned 1
	[0211.453] WriteFile (in: hFile=0x170, lpBuffer=0xc000377500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000377500*, lpNumberOfBytesWritten=0xc000155ccc*=0x236, lpOverlapped=0xc000155ce8) returned 1
	[0211.454] GetFileType (hFile=0x170) returned 0x1
	[0211.454] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xaf94, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=44948) returned 1
	[0211.454] CloseHandle (hObject=0x170) returned 1
	[0211.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf.egmwv")) returned 0x20
	[0211.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.457] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.458] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.469] SetEvent (hEvent=0xe4) returned 1
	[0211.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf")) returned 0x20
	[0211.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF", dwFileAttributes=0x20) returned 1
	[0211.471] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.493] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.494] ReadFile (in: hFile=0xe0, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1434, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc00016dcec*=0x1434, lpOverlapped=0x0) returned 1
	[0211.499] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0211.500] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001402 | out: pbBuffer=0xc000001402) returned 1
	[0211.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001454 | out: pbBuffer=0xc000001454) returned 1
	[0211.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000145c | out: pbBuffer=0xc00000145c) returned 1
	[0211.500] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0211.500] GetFileType (hFile=0xe0) returned 0x1
	[0211.500] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=5172) returned 1
	[0211.501] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002b4000*, nNumberOfBytesToWrite=0x1434, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc0002b4000*, lpNumberOfBytesWritten=0xc00034dccc*=0x1434, lpOverlapped=0xc00034dce8) returned 1
	[0211.501] GetFileType (hFile=0xe0) returned 0x1
	[0211.501] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1434, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=5172) returned 1
	[0211.501] GetFileType (hFile=0xe0) returned 0x1
	[0211.501] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=5172) returned 1
	[0211.502] WriteFile (in: hFile=0xe0, lpBuffer=0xc000105500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc000105500*, lpNumberOfBytesWritten=0xc00034dccc*=0x227, lpOverlapped=0xc00034dce8) returned 1
	[0211.502] GetFileType (hFile=0xe0) returned 0x1
	[0211.502] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1434, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=5172) returned 1
	[0211.502] CloseHandle (hObject=0xe0) returned 1
	[0211.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf.egmwv")) returned 0x20
	[0211.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.505] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.517] SetEvent (hEvent=0xe4) returned 1
	[0211.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf")) returned 0x20
	[0211.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF", dwFileAttributes=0x20) returned 1
	[0211.519] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.545] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0211.545] ReadFile (in: hFile=0xe0, lpBuffer=0xc000124000, nNumberOfBytesToRead=0x4314, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000124000*, lpNumberOfBytesRead=0xc000387cec*=0x4314, lpOverlapped=0x0) returned 1
	[0211.552] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0211.553] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ba | out: pbBuffer=0xc0004142ba) returned 1
	[0211.553] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0102 | out: pbBuffer=0xc0002c0102) returned 1
	[0211.553] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c01db | out: pbBuffer=0xc0002c01db) returned 1
	[0211.553] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0211.553] GetFileType (hFile=0xe0) returned 0x1
	[0211.553] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=17172) returned 1
	[0211.554] WriteFile (in: hFile=0xe0, lpBuffer=0xc000256000*, nNumberOfBytesToWrite=0x4314, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc000256000*, lpNumberOfBytesWritten=0xc00034dccc*=0x4314, lpOverlapped=0xc00034dce8) returned 1
	[0211.554] GetFileType (hFile=0xe0) returned 0x1
	[0211.554] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4314, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=17172) returned 1
	[0211.554] GetFileType (hFile=0xe0) returned 0x1
	[0211.554] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=17172) returned 1
	[0211.555] WriteFile (in: hFile=0xe0, lpBuffer=0xc000140e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc000140e00*, lpNumberOfBytesWritten=0xc00034dccc*=0x227, lpOverlapped=0xc00034dce8) returned 1
	[0211.555] GetFileType (hFile=0xe0) returned 0x1
	[0211.555] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4314, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=17172) returned 1
	[0211.555] CloseHandle (hObject=0xe0) returned 1
	[0211.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf.egmwv")) returned 0x20
	[0211.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.557] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf")) returned 0x20
	[0211.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF", dwFileAttributes=0x20) returned 1
	[0211.564] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.597] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0211.597] ReadFile (in: hFile=0x178, lpBuffer=0xc0001d2000, nNumberOfBytesToRead=0x4b80, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001d2000*, lpNumberOfBytesRead=0xc000387cec*=0x4b80, lpOverlapped=0x0) returned 1
	[0211.603] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ea0 | out: pbBuffer=0xc000052ea0) returned 1
	[0211.603] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eba | out: pbBuffer=0xc000052eba) returned 1
	[0211.604] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000284902 | out: pbBuffer=0xc000284902) returned 1
	[0211.604] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ee0 | out: pbBuffer=0xc000052ee0) returned 1
	[0211.604] GetFileType (hFile=0x178) returned 0x1
	[0211.604] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=19328) returned 1
	[0211.604] WriteFile (in: hFile=0x178, lpBuffer=0xc0001e0000*, nNumberOfBytesToWrite=0x4b80, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001e0000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4b80, lpOverlapped=0xc000155ce8) returned 1
	[0211.605] GetFileType (hFile=0x178) returned 0x1
	[0211.605] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4b80, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=19328) returned 1
	[0211.606] GetFileType (hFile=0x178) returned 0x1
	[0211.606] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=19328) returned 1
	[0211.606] WriteFile (in: hFile=0x178, lpBuffer=0xc000442700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000442700*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0211.606] GetFileType (hFile=0x178) returned 0x1
	[0211.606] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4b80, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=19328) returned 1
	[0211.606] CloseHandle (hObject=0x178) returned 1
	[0211.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf.egmwv")) returned 0x20
	[0211.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.611] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf")) returned 0x20
	[0211.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF", dwFileAttributes=0x20) returned 1
	[0211.617] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.655] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0211.655] ReadFile (in: hFile=0x170, lpBuffer=0xc000316000, nNumberOfBytesToRead=0x4540, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000316000*, lpNumberOfBytesRead=0xc000387cec*=0x4540, lpOverlapped=0x0) returned 1
	[0211.660] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0211.660] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0211.660] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039f4c | out: pbBuffer=0xc000039f4c) returned 1
	[0211.661] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0211.661] GetFileType (hFile=0x170) returned 0x1
	[0211.661] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17728) returned 1
	[0211.661] WriteFile (in: hFile=0x170, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0x4540, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4540, lpOverlapped=0xc000155ce8) returned 1
	[0211.662] GetFileType (hFile=0x170) returned 0x1
	[0211.662] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4540, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17728) returned 1
	[0211.662] GetFileType (hFile=0x170) returned 0x1
	[0211.662] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17728) returned 1
	[0211.662] WriteFile (in: hFile=0x170, lpBuffer=0xc00035f180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00035f180*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0211.662] GetFileType (hFile=0x170) returned 0x1
	[0211.662] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x4540, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17728) returned 1
	[0211.662] CloseHandle (hObject=0x170) returned 1
	[0211.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf.egmwv")) returned 0x20
	[0211.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.665] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf")) returned 0x20
	[0211.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF", dwFileAttributes=0x20) returned 1
	[0211.681] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.711] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0211.711] ReadFile (in: hFile=0xe0, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x12bc, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000387cec*=0x12bc, lpOverlapped=0x0) returned 1
	[0211.716] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0211.716] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0211.716] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003e6a02 | out: pbBuffer=0xc0003e6a02) returned 1
	[0211.716] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0211.716] GetFileType (hFile=0xe0) returned 0x1
	[0211.716] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=4796) returned 1
	[0211.716] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001b8000*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc0001b8000*, lpNumberOfBytesWritten=0xc0000fdccc*=0x12bc, lpOverlapped=0xc0000fdce8) returned 1
	[0211.717] GetFileType (hFile=0xe0) returned 0x1
	[0211.717] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x12bc, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=4796) returned 1
	[0211.717] GetFileType (hFile=0xe0) returned 0x1
	[0211.717] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=4796) returned 1
	[0211.717] WriteFile (in: hFile=0xe0, lpBuffer=0xc000103500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc000103500*, lpNumberOfBytesWritten=0xc0000fdccc*=0x22d, lpOverlapped=0xc0000fdce8) returned 1
	[0211.717] GetFileType (hFile=0xe0) returned 0x1
	[0211.717] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x12bc, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=4796) returned 1
	[0211.718] CloseHandle (hObject=0xe0) returned 1
	[0211.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf.egmwv")) returned 0x20
	[0211.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.719] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.729] SetEvent (hEvent=0x150) returned 1
	[0211.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf")) returned 0x20
	[0211.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF", dwFileAttributes=0x20) returned 1
	[0211.731] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.763] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.765] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0211.765] ReadFile (in: hFile=0xe0, lpBuffer=0xc000408000, nNumberOfBytesToRead=0x3a14, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000408000*, lpNumberOfBytesRead=0xc00038dcec*=0x3a14, lpOverlapped=0x0) returned 1
	[0211.770] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0211.770] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ca | out: pbBuffer=0xc0004142ca) returned 1
	[0211.770] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0211.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b17 | out: pbBuffer=0xc0002c1b17) returned 1
	[0211.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b4a | out: pbBuffer=0xc0002c1b4a) returned 1
	[0211.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1bda | out: pbBuffer=0xc0002c1bda) returned 1
	[0211.771] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0211.771] GetFileType (hFile=0xe0) returned 0x1
	[0211.771] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001fdca0*=14868) returned 1
	[0211.771] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001e0000*, nNumberOfBytesToWrite=0x3a14, lpNumberOfBytesWritten=0xc0001fdccc, lpOverlapped=0xc0001fdce8 | out: lpBuffer=0xc0001e0000*, lpNumberOfBytesWritten=0xc0001fdccc*=0x3a14, lpOverlapped=0xc0001fdce8) returned 1
	[0211.772] GetFileType (hFile=0xe0) returned 0x1
	[0211.772] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3a14, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001fdca0*=14868) returned 1
	[0211.772] GetFileType (hFile=0xe0) returned 0x1
	[0211.772] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001fdca0*=14868) returned 1
	[0211.772] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001d0e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001fdccc, lpOverlapped=0xc0001fdce8 | out: lpBuffer=0xc0001d0e00*, lpNumberOfBytesWritten=0xc0001fdccc*=0x22a, lpOverlapped=0xc0001fdce8) returned 1
	[0211.773] GetFileType (hFile=0xe0) returned 0x1
	[0211.773] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3a14, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001fdca0*=14868) returned 1
	[0211.773] CloseHandle (hObject=0xe0) returned 1
	[0211.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf.egmwv")) returned 0x20
	[0211.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.775] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.779] SetEvent (hEvent=0x150) returned 1
	[0211.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf")) returned 0x20
	[0211.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF", dwFileAttributes=0x20) returned 1
	[0211.780] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.808] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0211.808] ReadFile (in: hFile=0x178, lpBuffer=0xc00034d900, nNumberOfBytesToRead=0x10e0, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00034d900*, lpNumberOfBytesRead=0xc00038dcec*=0x10e0, lpOverlapped=0x0) returned 1
	[0211.814] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0211.814] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000274402 | out: pbBuffer=0xc000274402) returned 1
	[0211.814] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002744a3 | out: pbBuffer=0xc0002744a3) returned 1
	[0211.814] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002744e6 | out: pbBuffer=0xc0002744e6) returned 1
	[0211.815] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0211.815] GetFileType (hFile=0x178) returned 0x1
	[0211.815] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=4320) returned 1
	[0211.815] WriteFile (in: hFile=0x178, lpBuffer=0xc000284000*, nNumberOfBytesToWrite=0x10e0, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc000284000*, lpNumberOfBytesWritten=0xc0000fdccc*=0x10e0, lpOverlapped=0xc0000fdce8) returned 1
	[0211.815] GetFileType (hFile=0x178) returned 0x1
	[0211.815] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x10e0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=4320) returned 1
	[0211.816] GetFileType (hFile=0x178) returned 0x1
	[0211.816] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=4320) returned 1
	[0211.816] WriteFile (in: hFile=0x178, lpBuffer=0xc00027e700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc00027e700*, lpNumberOfBytesWritten=0xc0000fdccc*=0x224, lpOverlapped=0xc0000fdce8) returned 1
	[0211.816] GetFileType (hFile=0x178) returned 0x1
	[0211.816] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x10e0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=4320) returned 1
	[0211.816] CloseHandle (hObject=0x178) returned 1
	[0211.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf.egmwv")) returned 0x20
	[0211.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.822] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.826] SetEvent (hEvent=0x150) returned 1
	[0211.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf")) returned 0x20
	[0211.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF", dwFileAttributes=0x20) returned 1
	[0211.828] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.883] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.883] ReadFile (in: hFile=0x170, lpBuffer=0xc000222000, nNumberOfBytesToRead=0x290c, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000222000*, lpNumberOfBytesRead=0xc00016dcec*=0x290c, lpOverlapped=0x0) returned 1
	[0211.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0211.889] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000275202 | out: pbBuffer=0xc000275202) returned 1
	[0211.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0211.889] GetFileType (hFile=0x170) returned 0x1
	[0211.889] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=10508) returned 1
	[0211.890] WriteFile (in: hFile=0x170, lpBuffer=0xc000110000*, nNumberOfBytesToWrite=0x290c, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc000110000*, lpNumberOfBytesWritten=0xc0000fdccc*=0x290c, lpOverlapped=0xc0000fdce8) returned 1
	[0211.890] GetFileType (hFile=0x170) returned 0x1
	[0211.890] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x290c, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=10508) returned 1
	[0211.890] GetFileType (hFile=0x170) returned 0x1
	[0211.891] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=10508) returned 1
	[0211.891] WriteFile (in: hFile=0x170, lpBuffer=0xc000252000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc000252000*, lpNumberOfBytesWritten=0xc0000fdccc*=0x227, lpOverlapped=0xc0000fdce8) returned 1
	[0211.891] GetFileType (hFile=0x170) returned 0x1
	[0211.891] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x290c, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=10508) returned 1
	[0211.891] CloseHandle (hObject=0x170) returned 1
	[0211.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf.egmwv")) returned 0x20
	[0211.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.895] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf")) returned 0x20
	[0211.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF", dwFileAttributes=0x20) returned 1
	[0211.909] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.943] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.943] ReadFile (in: hFile=0xe0, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0x42a4, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc00016dcec*=0x42a4, lpOverlapped=0x0) returned 1
	[0211.949] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0211.949] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0211.949] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001006 | out: pbBuffer=0xc000001006) returned 1
	[0211.949] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001022 | out: pbBuffer=0xc000001022) returned 1
	[0211.949] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000104f | out: pbBuffer=0xc00000104f) returned 1
	[0211.949] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0211.950] GetFileType (hFile=0xe0) returned 0x1
	[0211.950] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=17060) returned 1
	[0211.950] WriteFile (in: hFile=0xe0, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x42a4, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x42a4, lpOverlapped=0xc0001a1ce8) returned 1
	[0211.950] GetFileType (hFile=0xe0) returned 0x1
	[0211.950] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x42a4, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=17060) returned 1
	[0211.951] GetFileType (hFile=0xe0) returned 0x1
	[0211.951] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=17060) returned 1
	[0211.951] WriteFile (in: hFile=0xe0, lpBuffer=0xc000148700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000148700*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x227, lpOverlapped=0xc0001a1ce8) returned 1
	[0211.951] GetFileType (hFile=0xe0) returned 0x1
	[0211.951] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x42a4, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=17060) returned 1
	[0211.951] CloseHandle (hObject=0xe0) returned 1
	[0211.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf.egmwv")) returned 0x20
	[0211.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.953] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.967] SetEvent (hEvent=0x15c) returned 1
	[0211.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf")) returned 0x20
	[0211.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF", dwFileAttributes=0x20) returned 1
	[0211.969] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.994] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0211.995] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0211.996] ReadFile (in: hFile=0xe0, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1364, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000169cec*=0x1364, lpOverlapped=0x0) returned 1
	[0212.001] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0212.001] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0212.001] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0212.001] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0212.001] GetFileType (hFile=0xe0) returned 0x1
	[0212.001] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=4964) returned 1
	[0212.002] WriteFile (in: hFile=0xe0, lpBuffer=0xc000178000*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000178000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x1364, lpOverlapped=0xc0001a1ce8) returned 1
	[0212.002] GetFileType (hFile=0xe0) returned 0x1
	[0212.002] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1364, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=4964) returned 1
	[0212.002] GetFileType (hFile=0xe0) returned 0x1
	[0212.002] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=4964) returned 1
	[0212.003] WriteFile (in: hFile=0xe0, lpBuffer=0xc000476000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000476000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22a, lpOverlapped=0xc0001a1ce8) returned 1
	[0212.003] GetFileType (hFile=0xe0) returned 0x1
	[0212.003] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1364, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=4964) returned 1
	[0212.004] CloseHandle (hObject=0xe0) returned 1
	[0212.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf.egmwv")) returned 0x20
	[0212.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.006] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.010] SetEvent (hEvent=0x15c) returned 1
	[0212.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf")) returned 0x20
	[0212.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF", dwFileAttributes=0x20) returned 1
	[0212.011] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.041] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0212.041] ReadFile (in: hFile=0x178, lpBuffer=0xc0003b6000, nNumberOfBytesToRead=0x16f8, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b6000*, lpNumberOfBytesRead=0xc000169cec*=0x16f8, lpOverlapped=0x0) returned 1
	[0212.046] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0212.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0212.047] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000145a02 | out: pbBuffer=0xc000145a02) returned 1
	[0212.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000145a8f | out: pbBuffer=0xc000145a8f) returned 1
	[0212.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000145abb | out: pbBuffer=0xc000145abb) returned 1
	[0212.047] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0212.047] GetFileType (hFile=0x178) returned 0x1
	[0212.047] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5880) returned 1
	[0212.048] WriteFile (in: hFile=0x178, lpBuffer=0xc0001c0000*, nNumberOfBytesToWrite=0x16f8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001c0000*, lpNumberOfBytesWritten=0xc000155ccc*=0x16f8, lpOverlapped=0xc000155ce8) returned 1
	[0212.048] GetFileType (hFile=0x178) returned 0x1
	[0212.048] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x16f8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5880) returned 1
	[0212.048] GetFileType (hFile=0x178) returned 0x1
	[0212.048] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5880) returned 1
	[0212.049] WriteFile (in: hFile=0x178, lpBuffer=0xc0001c2000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001c2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0212.049] GetFileType (hFile=0x178) returned 0x1
	[0212.049] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x16f8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5880) returned 1
	[0212.049] CloseHandle (hObject=0x178) returned 1
	[0212.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf.egmwv")) returned 0x20
	[0212.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.053] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf")) returned 0x20
	[0212.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF", dwFileAttributes=0x20) returned 1
	[0212.063] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.096] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0212.096] ReadFile (in: hFile=0x170, lpBuffer=0xc0002f2000, nNumberOfBytesToRead=0x1350, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesRead=0xc000169cec*=0x1350, lpOverlapped=0x0) returned 1
	[0212.102] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0212.102] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ca | out: pbBuffer=0xc0004142ca) returned 1
	[0212.102] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0212.102] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0212.103] GetFileType (hFile=0x170) returned 0x1
	[0212.103] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000127ca0*=4944) returned 1
	[0212.103] WriteFile (in: hFile=0x170, lpBuffer=0xc00043a000*, nNumberOfBytesToWrite=0x1350, lpNumberOfBytesWritten=0xc000127ccc, lpOverlapped=0xc000127ce8 | out: lpBuffer=0xc00043a000*, lpNumberOfBytesWritten=0xc000127ccc*=0x1350, lpOverlapped=0xc000127ce8) returned 1
	[0212.103] GetFileType (hFile=0x170) returned 0x1
	[0212.103] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1350, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000127ca0*=4944) returned 1
	[0212.104] GetFileType (hFile=0x170) returned 0x1
	[0212.104] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000127ca0*=4944) returned 1
	[0212.104] WriteFile (in: hFile=0x170, lpBuffer=0xc000300e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000127ccc, lpOverlapped=0xc000127ce8 | out: lpBuffer=0xc000300e00*, lpNumberOfBytesWritten=0xc000127ccc*=0x227, lpOverlapped=0xc000127ce8) returned 1
	[0212.104] GetFileType (hFile=0x170) returned 0x1
	[0212.104] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1350, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000127ca0*=4944) returned 1
	[0212.105] CloseHandle (hObject=0x170) returned 1
	[0212.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf.egmwv")) returned 0x20
	[0212.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.110] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.124] SetEvent (hEvent=0x15c) returned 1
	[0212.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf")) returned 0x20
	[0212.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF", dwFileAttributes=0x20) returned 1
	[0212.127] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.159] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0212.159] ReadFile (in: hFile=0xe0, lpBuffer=0xc000218000, nNumberOfBytesToRead=0x4fdc, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc00016bcec*=0x4fdc, lpOverlapped=0x0) returned 1
	[0212.165] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0212.165] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000284802 | out: pbBuffer=0xc000284802) returned 1
	[0212.165] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414490 | out: pbBuffer=0xc000414490) returned 1
	[0212.166] GetFileType (hFile=0xe0) returned 0x1
	[0212.166] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000127ca0*=20444) returned 1
	[0212.166] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001d8000*, nNumberOfBytesToWrite=0x4fdc, lpNumberOfBytesWritten=0xc000127ccc, lpOverlapped=0xc000127ce8 | out: lpBuffer=0xc0001d8000*, lpNumberOfBytesWritten=0xc000127ccc*=0x4fdc, lpOverlapped=0xc000127ce8) returned 1
	[0212.166] GetFileType (hFile=0xe0) returned 0x1
	[0212.166] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4fdc, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000127ca0*=20444) returned 1
	[0212.166] GetFileType (hFile=0xe0) returned 0x1
	[0212.167] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000127ca0*=20444) returned 1
	[0212.167] WriteFile (in: hFile=0xe0, lpBuffer=0xc000230700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000127ccc, lpOverlapped=0xc000127ce8 | out: lpBuffer=0xc000230700*, lpNumberOfBytesWritten=0xc000127ccc*=0x236, lpOverlapped=0xc000127ce8) returned 1
	[0212.167] GetFileType (hFile=0xe0) returned 0x1
	[0212.167] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4fdc, lpNewFilePointer=0xc000127ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000127ca0*=20444) returned 1
	[0212.168] CloseHandle (hObject=0xe0) returned 1
	[0212.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf.egmwv")) returned 0x20
	[0212.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.169] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.182] SetEvent (hEvent=0x5c) returned 1
	[0212.182] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.187] SetEvent (hEvent=0x15c) returned 1
	[0212.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf")) returned 0x20
	[0212.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF", dwFileAttributes=0x20) returned 1
	[0212.191] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.216] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0212.218] ReadFile (in: hFile=0xe0, lpBuffer=0xc000068000, nNumberOfBytesToRead=0x4928, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesRead=0xc000423cec*=0x4928, lpOverlapped=0x0) returned 1
	[0212.225] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0212.225] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0212.225] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0212.225] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0212.225] GetFileType (hFile=0xe0) returned 0x1
	[0212.225] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=18728) returned 1
	[0212.226] WriteFile (in: hFile=0xe0, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x4928, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x4928, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.226] GetFileType (hFile=0xe0) returned 0x1
	[0212.226] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4928, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=18728) returned 1
	[0212.226] GetFileType (hFile=0xe0) returned 0x1
	[0212.226] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=18728) returned 1
	[0212.227] WriteFile (in: hFile=0xe0, lpBuffer=0xc000383500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc000383500*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x227, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.227] GetFileType (hFile=0xe0) returned 0x1
	[0212.227] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x4928, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=18728) returned 1
	[0212.227] CloseHandle (hObject=0xe0) returned 1
	[0212.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf.egmwv")) returned 0x20
	[0212.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.230] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.234] SetEvent (hEvent=0x5c) returned 1
	[0212.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf")) returned 0x20
	[0212.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF", dwFileAttributes=0x20) returned 1
	[0212.236] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.268] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0212.268] ReadFile (in: hFile=0x178, lpBuffer=0xc00030c000, nNumberOfBytesToRead=0x1034, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00030c000*, lpNumberOfBytesRead=0xc00016dcec*=0x1034, lpOverlapped=0x0) returned 1
	[0212.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0212.281] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d1a | out: pbBuffer=0xc000052d1a) returned 1
	[0212.281] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000284202 | out: pbBuffer=0xc000284202) returned 1
	[0212.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000284268 | out: pbBuffer=0xc000284268) returned 1
	[0212.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002842e8 | out: pbBuffer=0xc0002842e8) returned 1
	[0212.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0212.282] GetFileType (hFile=0x178) returned 0x1
	[0212.282] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=4148) returned 1
	[0212.282] WriteFile (in: hFile=0x178, lpBuffer=0xc00036c000*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc00036c000*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x1034, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.283] GetFileType (hFile=0x178) returned 0x1
	[0212.283] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1034, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=4148) returned 1
	[0212.283] GetFileType (hFile=0x178) returned 0x1
	[0212.283] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c9ca0*=4148) returned 1
	[0212.283] WriteFile (in: hFile=0x178, lpBuffer=0xc000366e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0002c9ccc, lpOverlapped=0xc0002c9ce8 | out: lpBuffer=0xc000366e00*, lpNumberOfBytesWritten=0xc0002c9ccc*=0x224, lpOverlapped=0xc0002c9ce8) returned 1
	[0212.284] GetFileType (hFile=0x178) returned 0x1
	[0212.284] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1034, lpNewFilePointer=0xc0002c9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c9ca0*=4148) returned 1
	[0212.284] CloseHandle (hObject=0x178) returned 1
	[0212.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf.egmwv")) returned 0x20
	[0212.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.297] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.305] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.333] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.352] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.373] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.385] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.414] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.433] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.492] SetEvent (hEvent=0xe4) returned 1
	[0212.492] SetEvent (hEvent=0x150) returned 1
	[0212.493] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.507] SetEvent (hEvent=0x5c) returned 1
	[0212.507] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) returned 0x0
	[0212.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf")) returned 0x20
	[0212.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF", dwFileAttributes=0x20) returned 1
	[0212.560] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0212.695] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0212.695] ReadFile (in: hFile=0x174, lpBuffer=0xc0004e3000, nNumberOfBytesToRead=0x4ea8, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004e3000*, lpNumberOfBytesRead=0xc000169cec*=0x4ea8, lpOverlapped=0x0) returned 1
	[0212.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6420 | out: pbBuffer=0xc0002b6420) returned 1
	[0212.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b643a | out: pbBuffer=0xc0002b643a) returned 1
	[0212.700] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039b02 | out: pbBuffer=0xc000039b02) returned 1
	[0212.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6460 | out: pbBuffer=0xc0002b6460) returned 1
	[0212.700] GetFileType (hFile=0x174) returned 0x1
	[0212.700] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=20136) returned 1
	[0212.700] WriteFile (in: hFile=0x174, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x4ea8, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc000377ccc*=0x4ea8, lpOverlapped=0xc000377ce8) returned 1
	[0212.701] GetFileType (hFile=0x174) returned 0x1
	[0212.701] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x4ea8, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=20136) returned 1
	[0212.701] GetFileType (hFile=0x174) returned 0x1
	[0212.701] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=20136) returned 1
	[0212.701] WriteFile (in: hFile=0x174, lpBuffer=0xc00006c700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc00006c700*, lpNumberOfBytesWritten=0xc000377ccc*=0x22d, lpOverlapped=0xc000377ce8) returned 1
	[0212.702] GetFileType (hFile=0x174) returned 0x1
	[0212.702] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x4ea8, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=20136) returned 1
	[0212.702] CloseHandle (hObject=0x174) returned 1
	[0212.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf.egmwv")) returned 0x20
	[0212.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.708] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0xffffffff) 

Thread:
	id = 42
	os_tid = 0xa8c

	[0118.961] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x5a5feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5a5feb0*=0x138) returned 1
	[0118.961] VirtualQuery (in: lpAddress=0x5a5fed0, lpBuffer=0x5a5fed0, dwLength=0x30 | out: lpBuffer=0x5a5fed0*(BaseAddress=0x5a5f000, AllocationBase=0x5860000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0118.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc000036700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c
	[0118.998] CloseHandle (hObject=0x13c) returned 1
	[0119.058] VirtualAlloc (lpAddress=0xc001c00000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc001c00000
	[0119.059] VirtualAlloc (lpAddress=0xc001c00000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001c00000
	[0119.100] VirtualAlloc (lpAddress=0x0, dwSize=0x21080, flAllocationType=0x3000, flProtect=0x4) returned 0x5e60000
	[0119.153] SetEvent (hEvent=0x148) returned 1
	[0119.153] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x14c
	[0119.153] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0119.180] SetEvent (hEvent=0x144) returned 1
	[0119.180] VirtualAlloc (lpAddress=0xc000666000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000666000
	[0119.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc00002fc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150
	[0119.207] CloseHandle (hObject=0x150) returned 1
	[0119.207] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x0
	[0119.211] SetEvent (hEvent=0x15c) returned 1
	[0119.212] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0119.213] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0119.214] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf")) returned 0x20
	[0201.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x20) returned 1
	[0201.586] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0201.906] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc00039bcc4 | out: lpMode=0xc00039bcc4) returned 0
	[0201.906] ReadFile (in: hFile=0x174, lpBuffer=0xc0003ac000, nNumberOfBytesToRead=0xd58, lpNumberOfBytesRead=0xc00039bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ac000*, lpNumberOfBytesRead=0xc00039bcec*=0xd58, lpOverlapped=0x0) returned 1
	[0201.913] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206750 | out: pbBuffer=0xc000206750) returned 1
	[0201.913] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1d02 | out: pbBuffer=0xc0002c1d02) returned 1
	[0201.913] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206790 | out: pbBuffer=0xc000206790) returned 1
	[0201.913] GetFileType (hFile=0x174) returned 0x1
	[0201.914] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3416) returned 1
	[0201.914] WriteFile (in: hFile=0x174, lpBuffer=0xc0003c6000*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003c6000*, lpNumberOfBytesWritten=0xc000151ccc*=0xd58, lpOverlapped=0xc000151ce8) returned 1
	[0201.914] GetFileType (hFile=0x174) returned 0x1
	[0201.914] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0xd58, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3416) returned 1
	[0201.915] GetFileType (hFile=0x174) returned 0x1
	[0201.915] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3416) returned 1
	[0201.915] WriteFile (in: hFile=0x174, lpBuffer=0xc0003b9180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003b9180*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0201.916] GetFileType (hFile=0x174) returned 0x1
	[0201.916] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0xd58, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3416) returned 1
	[0201.916] CloseHandle (hObject=0x174) returned 1
	[0201.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf.egmwv")) returned 0x20
	[0201.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.930] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.937] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.977] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.988] SetEvent (hEvent=0x148) returned 1
	[0201.988] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.994] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.000] SetEvent (hEvent=0x15c) returned 1
	[0202.001] SetEvent (hEvent=0xe4) returned 1
	[0202.001] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0202.004] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.004] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0202.006] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.006] SetEvent (hEvent=0x148) returned 1
	[0202.006] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0202.008] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.008] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.274] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.276] SetEvent (hEvent=0x15c) returned 1
	[0202.276] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.280] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.286] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.309] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.328] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.337] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.350] SetEvent (hEvent=0x150) returned 1
	[0202.350] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.353] SetEvent (hEvent=0xc8) returned 1
	[0202.353] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x20
	[0202.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x20) returned 1
	[0202.363] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.412] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0202.412] ReadFile (in: hFile=0x17c, lpBuffer=0xc0004bc000, nNumberOfBytesToRead=0x9d0e, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004bc000*, lpNumberOfBytesRead=0xc00016dcec*=0x9d0e, lpOverlapped=0x0) returned 1
	[0202.420] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0202.421] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000124402 | out: pbBuffer=0xc000124402) returned 1
	[0202.421] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0202.421] GetFileType (hFile=0x17c) returned 0x1
	[0202.421] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014dca0*=40206) returned 1
	[0202.422] WriteFile (in: hFile=0x17c, lpBuffer=0xc00032e000*, nNumberOfBytesToWrite=0x9d0e, lpNumberOfBytesWritten=0xc00014dccc, lpOverlapped=0xc00014dce8 | out: lpBuffer=0xc00032e000*, lpNumberOfBytesWritten=0xc00014dccc*=0x9d0e, lpOverlapped=0xc00014dce8) returned 1
	[0202.422] GetFileType (hFile=0x17c) returned 0x1
	[0202.422] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9d0e, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014dca0*=40206) returned 1
	[0202.423] GetFileType (hFile=0x17c) returned 0x1
	[0202.423] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014dca0*=40206) returned 1
	[0202.423] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001e6e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00014dccc, lpOverlapped=0xc00014dce8 | out: lpBuffer=0xc0001e6e00*, lpNumberOfBytesWritten=0xc00014dccc*=0x233, lpOverlapped=0xc00014dce8) returned 1
	[0202.424] GetFileType (hFile=0x17c) returned 0x1
	[0202.424] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9d0e, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014dca0*=40206) returned 1
	[0202.424] CloseHandle (hObject=0x17c) returned 1
	[0202.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf.egmwv")) returned 0x20
	[0202.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.428] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.429] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.433] SetEvent (hEvent=0xc8) returned 1
	[0202.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x20
	[0202.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x20) returned 1
	[0202.435] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.466] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.466] SetEvent (hEvent=0x148) returned 1
	[0202.466] ReadFile (in: hFile=0x164, lpBuffer=0xc00022a000, nNumberOfBytesToRead=0x504a, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00022a000*, lpNumberOfBytesRead=0xc00016bcec*=0x504a, lpOverlapped=0x0) returned 1
	[0202.475] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0202.476] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003aa602 | out: pbBuffer=0xc0003aa602) returned 1
	[0202.476] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0202.476] GetFileType (hFile=0x164) returned 0x1
	[0202.476] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=20554) returned 1
	[0202.476] WriteFile (in: hFile=0x164, lpBuffer=0xc0003ca000*, nNumberOfBytesToWrite=0x504a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003ca000*, lpNumberOfBytesWritten=0xc000151ccc*=0x504a, lpOverlapped=0xc000151ce8) returned 1
	[0202.478] GetFileType (hFile=0x164) returned 0x1
	[0202.478] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x504a, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=20554) returned 1
	[0202.478] GetFileType (hFile=0x164) returned 0x1
	[0202.478] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=20554) returned 1
	[0202.478] WriteFile (in: hFile=0x164, lpBuffer=0xc0003d2000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003d2000*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0202.479] GetFileType (hFile=0x164) returned 0x1
	[0202.479] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x504a, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=20554) returned 1
	[0202.479] CloseHandle (hObject=0x164) returned 1
	[0202.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf.egmwv")) returned 0x20
	[0202.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.493] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.497] SetEvent (hEvent=0xe4) returned 1
	[0202.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif")) returned 0x20
	[0202.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x20) returned 1
	[0202.499] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.egmwv"), dwFlags=0x1) returned 1
	[0202.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.535] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.535] ReadFile (in: hFile=0x164, lpBuffer=0xc00016e000, nNumberOfBytesToRead=0x4edd, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesRead=0xc00016bcec*=0x4edd, lpOverlapped=0x0) returned 1
	[0202.542] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0202.542] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0202.542] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003ab102 | out: pbBuffer=0xc0003ab102) returned 1
	[0202.542] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003ab14e | out: pbBuffer=0xc0003ab14e) returned 1
	[0202.542] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003ab17c | out: pbBuffer=0xc0003ab17c) returned 1
	[0202.542] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0202.543] GetFileType (hFile=0x164) returned 0x1
	[0202.543] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=20189) returned 1
	[0202.543] WriteFile (in: hFile=0x164, lpBuffer=0xc000470000*, nNumberOfBytesToWrite=0x4edd, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000470000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x4edd, lpOverlapped=0xc0000dbce8) returned 1
	[0202.544] GetFileType (hFile=0x164) returned 0x1
	[0202.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4edd, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=20189) returned 1
	[0202.544] GetFileType (hFile=0x164) returned 0x1
	[0202.545] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=20189) returned 1
	[0202.545] WriteFile (in: hFile=0x164, lpBuffer=0xc000161500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000161500*, lpNumberOfBytesWritten=0xc0000dbccc*=0x236, lpOverlapped=0xc0000dbce8) returned 1
	[0202.546] GetFileType (hFile=0x164) returned 0x1
	[0202.546] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4edd, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=20189) returned 1
	[0202.546] CloseHandle (hObject=0x164) returned 1
	[0202.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.egmwv")) returned 0x20
	[0202.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.550] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.552] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.565] SetEvent (hEvent=0xe4) returned 1
	[0202.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x20
	[0202.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x20) returned 1
	[0202.567] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.591] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.591] ReadFile (in: hFile=0x164, lpBuffer=0xc00042d500, nNumberOfBytesToRead=0x32b6, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00042d500*, lpNumberOfBytesRead=0xc00016bcec*=0x32b6, lpOverlapped=0x0) returned 1
	[0202.597] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053040 | out: pbBuffer=0xc000053040) returned 1
	[0202.597] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005305a | out: pbBuffer=0xc00005305a) returned 1
	[0202.597] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039c02 | out: pbBuffer=0xc000039c02) returned 1
	[0202.597] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039c4a | out: pbBuffer=0xc000039c4a) returned 1
	[0202.597] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053080 | out: pbBuffer=0xc000053080) returned 1
	[0202.597] GetFileType (hFile=0x164) returned 0x1
	[0202.597] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=12982) returned 1
	[0202.598] WriteFile (in: hFile=0x164, lpBuffer=0xc00035e000*, nNumberOfBytesToWrite=0x32b6, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00035e000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x32b6, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.598] GetFileType (hFile=0x164) returned 0x1
	[0202.598] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x32b6, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=12982) returned 1
	[0202.598] GetFileType (hFile=0x164) returned 0x1
	[0202.599] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=12982) returned 1
	[0202.599] WriteFile (in: hFile=0x164, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x230, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.599] GetFileType (hFile=0x164) returned 0x1
	[0202.599] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x32b6, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=12982) returned 1
	[0202.599] CloseHandle (hObject=0x164) returned 1
	[0202.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf.egmwv")) returned 0x20
	[0202.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.602] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.608] SetEvent (hEvent=0xe4) returned 1
	[0202.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x20
	[0202.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x20) returned 1
	[0202.610] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.655] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.655] ReadFile (in: hFile=0xe0, lpBuffer=0xc000404000, nNumberOfBytesToRead=0x3896, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000404000*, lpNumberOfBytesRead=0xc00016bcec*=0x3896, lpOverlapped=0x0) returned 1
	[0202.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142c0 | out: pbBuffer=0xc0004142c0) returned 1
	[0202.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142da | out: pbBuffer=0xc0004142da) returned 1
	[0202.662] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000220202 | out: pbBuffer=0xc000220202) returned 1
	[0202.662] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414300 | out: pbBuffer=0xc000414300) returned 1
	[0202.662] GetFileType (hFile=0xe0) returned 0x1
	[0202.662] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=14486) returned 1
	[0202.663] WriteFile (in: hFile=0xe0, lpBuffer=0xc00023e000*, nNumberOfBytesToWrite=0x3896, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc00023e000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x3896, lpOverlapped=0xc0000dbce8) returned 1
	[0202.664] GetFileType (hFile=0xe0) returned 0x1
	[0202.664] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3896, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=14486) returned 1
	[0202.664] GetFileType (hFile=0xe0) returned 0x1
	[0202.664] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=14486) returned 1
	[0202.664] WriteFile (in: hFile=0xe0, lpBuffer=0xc000412e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000412e00*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22d, lpOverlapped=0xc0000dbce8) returned 1
	[0202.664] GetFileType (hFile=0xe0) returned 0x1
	[0202.664] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3896, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=14486) returned 1
	[0202.665] CloseHandle (hObject=0xe0) returned 1
	[0202.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf.egmwv")) returned 0x20
	[0202.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.671] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x20
	[0202.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x20) returned 1
	[0202.679] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.718] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.718] ReadFile (in: hFile=0x17c, lpBuffer=0xc000430a00, nNumberOfBytesToRead=0x30e8, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000430a00*, lpNumberOfBytesRead=0xc00016bcec*=0x30e8, lpOverlapped=0x0) returned 1
	[0202.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531e0 | out: pbBuffer=0xc0000531e0) returned 1
	[0202.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531fa | out: pbBuffer=0xc0000531fa) returned 1
	[0202.724] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000cad02 | out: pbBuffer=0xc0000cad02) returned 1
	[0202.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053220 | out: pbBuffer=0xc000053220) returned 1
	[0202.724] GetFileType (hFile=0x17c) returned 0x1
	[0202.724] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=12520) returned 1
	[0202.724] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001fc000*, nNumberOfBytesToWrite=0x30e8, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0001fc000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x30e8, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.725] GetFileType (hFile=0x17c) returned 0x1
	[0202.725] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x30e8, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=12520) returned 1
	[0202.725] GetFileType (hFile=0x17c) returned 0x1
	[0202.725] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=12520) returned 1
	[0202.725] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001ab880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0001ab880*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22a, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.726] GetFileType (hFile=0x17c) returned 0x1
	[0202.726] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x30e8, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=12520) returned 1
	[0202.726] CloseHandle (hObject=0x17c) returned 1
	[0202.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf.egmwv")) returned 0x20
	[0202.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.733] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.748] SetEvent (hEvent=0xe4) returned 1
	[0202.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x20
	[0202.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x20) returned 1
	[0202.757] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.762] SetEvent (hEvent=0xe4) returned 1
	[0202.762] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.789] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0202.789] ReadFile (in: hFile=0xe0, lpBuffer=0xc000098800, nNumberOfBytesToRead=0x3f4, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000098800*, lpNumberOfBytesRead=0xc000423cec*=0x3f4, lpOverlapped=0x0) returned 1
	[0202.794] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0202.794] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0202.794] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0202.794] GetFileType (hFile=0xe0) returned 0x1
	[0202.794] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=1012) returned 1
	[0202.794] WriteFile (in: hFile=0xe0, lpBuffer=0xc000464000*, nNumberOfBytesToWrite=0x3f4, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000464000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x3f4, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.795] GetFileType (hFile=0xe0) returned 0x1
	[0202.795] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3f4, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=1012) returned 1
	[0202.795] GetFileType (hFile=0xe0) returned 0x1
	[0202.795] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=1012) returned 1
	[0202.795] WriteFile (in: hFile=0xe0, lpBuffer=0xc00041e700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00041e700*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.795] GetFileType (hFile=0xe0) returned 0x1
	[0202.796] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x3f4, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=1012) returned 1
	[0202.796] CloseHandle (hObject=0xe0) returned 1
	[0202.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf.egmwv")) returned 0x20
	[0202.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.798] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x20
	[0202.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x20) returned 1
	[0202.803] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.839] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0202.839] ReadFile (in: hFile=0x17c, lpBuffer=0xc00018f800, nNumberOfBytesToRead=0x5b8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00018f800*, lpNumberOfBytesRead=0xc000389cec*=0x5b8, lpOverlapped=0x0) returned 1
	[0202.844] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0202.844] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065da | out: pbBuffer=0xc0002065da) returned 1
	[0202.844] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000caa02 | out: pbBuffer=0xc0000caa02) returned 1
	[0202.844] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000caae5 | out: pbBuffer=0xc0000caae5) returned 1
	[0202.845] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0202.845] GetFileType (hFile=0x17c) returned 0x1
	[0202.845] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=1464) returned 1
	[0202.845] WriteFile (in: hFile=0x17c, lpBuffer=0xc000435000*, nNumberOfBytesToWrite=0x5b8, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000435000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x5b8, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.845] GetFileType (hFile=0x17c) returned 0x1
	[0202.846] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5b8, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=1464) returned 1
	[0202.846] GetFileType (hFile=0x17c) returned 0x1
	[0202.846] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=1464) returned 1
	[0202.846] WriteFile (in: hFile=0x17c, lpBuffer=0xc000475880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000475880*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22a, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.846] GetFileType (hFile=0x17c) returned 0x1
	[0202.846] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5b8, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=1464) returned 1
	[0202.847] CloseHandle (hObject=0x17c) returned 1
	[0202.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf.egmwv")) returned 0x20
	[0202.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.850] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x20
	[0202.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x20) returned 1
	[0202.861] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.982] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0202.982] ReadFile (in: hFile=0x164, lpBuffer=0xc0001fa000, nNumberOfBytesToRead=0xf92, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001fa000*, lpNumberOfBytesRead=0xc00038dcec*=0xf92, lpOverlapped=0x0) returned 1
	[0202.988] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206760 | out: pbBuffer=0xc000206760) returned 1
	[0202.988] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020677a | out: pbBuffer=0xc00020677a) returned 1
	[0202.988] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000cbb02 | out: pbBuffer=0xc0000cbb02) returned 1
	[0202.988] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002067a0 | out: pbBuffer=0xc0002067a0) returned 1
	[0202.989] GetFileType (hFile=0x164) returned 0x1
	[0202.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=3986) returned 1
	[0202.989] WriteFile (in: hFile=0x164, lpBuffer=0xc00036e000*, nNumberOfBytesToWrite=0xf92, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00036e000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0xf92, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.989] GetFileType (hFile=0x164) returned 0x1
	[0202.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xf92, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=3986) returned 1
	[0202.990] GetFileType (hFile=0x164) returned 0x1
	[0202.990] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=3986) returned 1
	[0202.990] WriteFile (in: hFile=0x164, lpBuffer=0xc00043d180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00043d180*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.990] GetFileType (hFile=0x164) returned 0x1
	[0202.990] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xf92, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=3986) returned 1
	[0202.991] CloseHandle (hObject=0x164) returned 1
	[0202.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf.egmwv")) returned 0x20
	[0202.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.995] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x20
	[0203.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x20) returned 1
	[0203.016] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0203.046] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0203.046] ReadFile (in: hFile=0xe0, lpBuffer=0xc0001d4000, nNumberOfBytesToRead=0xfb8, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001d4000*, lpNumberOfBytesRead=0xc000199cec*=0xfb8, lpOverlapped=0x0) returned 1
	[0203.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0203.051] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001dc502 | out: pbBuffer=0xc0001dc502) returned 1
	[0203.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001dc553 | out: pbBuffer=0xc0001dc553) returned 1
	[0203.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001dc5c8 | out: pbBuffer=0xc0001dc5c8) returned 1
	[0203.051] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0203.051] GetFileType (hFile=0xe0) returned 0x1
	[0203.051] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4024) returned 1
	[0203.051] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001e8000*, nNumberOfBytesToWrite=0xfb8, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001e8000*, lpNumberOfBytesWritten=0xc000151ccc*=0xfb8, lpOverlapped=0xc000151ce8) returned 1
	[0203.052] GetFileType (hFile=0xe0) returned 0x1
	[0203.052] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xfb8, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4024) returned 1
	[0203.052] GetFileType (hFile=0xe0) returned 0x1
	[0203.052] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4024) returned 1
	[0203.052] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001e2e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001e2e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x230, lpOverlapped=0xc000151ce8) returned 1
	[0203.053] GetFileType (hFile=0xe0) returned 0x1
	[0203.053] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xfb8, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4024) returned 1
	[0203.053] CloseHandle (hObject=0xe0) returned 1
	[0203.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf.egmwv")) returned 0x20
	[0203.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.055] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.065] SetEvent (hEvent=0x15c) returned 1
	[0203.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x20
	[0203.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x20) returned 1
	[0203.072] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.153] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0203.153] ReadFile (in: hFile=0x164, lpBuffer=0xc000102000, nNumberOfBytesToRead=0x1264, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000102000*, lpNumberOfBytesRead=0xc00016bcec*=0x1264, lpOverlapped=0x0) returned 1
	[0203.159] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414430 | out: pbBuffer=0xc000414430) returned 1
	[0203.159] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041444a | out: pbBuffer=0xc00041444a) returned 1
	[0203.159] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001dd202 | out: pbBuffer=0xc0001dd202) returned 1
	[0203.159] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001dd230 | out: pbBuffer=0xc0001dd230) returned 1
	[0203.159] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414470 | out: pbBuffer=0xc000414470) returned 1
	[0203.159] GetFileType (hFile=0x164) returned 0x1
	[0203.159] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4708) returned 1
	[0203.160] WriteFile (in: hFile=0x164, lpBuffer=0xc0004c4000*, nNumberOfBytesToWrite=0x1264, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004c4000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1264, lpOverlapped=0xc000151ce8) returned 1
	[0203.160] GetFileType (hFile=0x164) returned 0x1
	[0203.160] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1264, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4708) returned 1
	[0203.160] GetFileType (hFile=0x164) returned 0x1
	[0203.161] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4708) returned 1
	[0203.161] WriteFile (in: hFile=0x164, lpBuffer=0xc0004b4700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004b4700*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0203.161] GetFileType (hFile=0x164) returned 0x1
	[0203.161] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1264, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4708) returned 1
	[0203.161] CloseHandle (hObject=0x164) returned 1
	[0203.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf.egmwv")) returned 0x20
	[0203.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.167] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.173] SetEvent (hEvent=0x15c) returned 1
	[0203.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x20
	[0203.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x20) returned 1
	[0203.175] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.198] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0203.198] ReadFile (in: hFile=0x17c, lpBuffer=0xc0004c6000, nNumberOfBytesToRead=0x9fc, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004c6000*, lpNumberOfBytesRead=0xc00016bcec*=0x9fc, lpOverlapped=0x0) returned 1
	[0203.204] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6760 | out: pbBuffer=0xc0002b6760) returned 1
	[0203.204] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000100b02 | out: pbBuffer=0xc000100b02) returned 1
	[0203.205] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000100ba6 | out: pbBuffer=0xc000100ba6) returned 1
	[0203.205] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67a0 | out: pbBuffer=0xc0002b67a0) returned 1
	[0203.205] GetFileType (hFile=0x17c) returned 0x1
	[0203.205] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=2556) returned 1
	[0203.205] WriteFile (in: hFile=0x17c, lpBuffer=0xc000410000*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc000410000*, lpNumberOfBytesWritten=0xc000175ccc*=0x9fc, lpOverlapped=0xc000175ce8) returned 1
	[0203.206] GetFileType (hFile=0x17c) returned 0x1
	[0203.206] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9fc, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=2556) returned 1
	[0203.206] GetFileType (hFile=0x17c) returned 0x1
	[0203.206] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=2556) returned 1
	[0203.206] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000fdc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc0000fdc00*, lpNumberOfBytesWritten=0xc000175ccc*=0x230, lpOverlapped=0xc000175ce8) returned 1
	[0203.207] GetFileType (hFile=0x17c) returned 0x1
	[0203.207] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9fc, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=2556) returned 1
	[0203.207] CloseHandle (hObject=0x17c) returned 1
	[0203.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf.egmwv")) returned 0x20
	[0203.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.211] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x20
	[0203.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x20) returned 1
	[0203.219] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0203.252] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0203.252] ReadFile (in: hFile=0x174, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1498, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000389cec*=0x1498, lpOverlapped=0x0) returned 1
	[0203.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414750 | out: pbBuffer=0xc000414750) returned 1
	[0203.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041476a | out: pbBuffer=0xc00041476a) returned 1
	[0203.319] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000230d02 | out: pbBuffer=0xc000230d02) returned 1
	[0203.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000230d02 | out: pbBuffer=0xc000230d02) returned 1
	[0203.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000230d57 | out: pbBuffer=0xc000230d57) returned 1
	[0203.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000230dd8 | out: pbBuffer=0xc000230dd8) returned 1
	[0203.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414790 | out: pbBuffer=0xc000414790) returned 1
	[0203.320] GetFileType (hFile=0x174) returned 0x1
	[0203.320] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=5272) returned 1
	[0203.320] WriteFile (in: hFile=0x174, lpBuffer=0xc000262000*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc000262000*, lpNumberOfBytesWritten=0xc000171ccc*=0x1498, lpOverlapped=0xc000171ce8) returned 1
	[0203.320] GetFileType (hFile=0x174) returned 0x1
	[0203.320] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x1498, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=5272) returned 1
	[0203.321] GetFileType (hFile=0x174) returned 0x1
	[0203.321] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000171ca0*=5272) returned 1
	[0203.321] WriteFile (in: hFile=0x174, lpBuffer=0xc000245880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000171ccc, lpOverlapped=0xc000171ce8 | out: lpBuffer=0xc000245880*, lpNumberOfBytesWritten=0xc000171ccc*=0x227, lpOverlapped=0xc000171ce8) returned 1
	[0203.321] GetFileType (hFile=0x174) returned 0x1
	[0203.321] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x1498, lpNewFilePointer=0xc000171ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000171ca0*=5272) returned 1
	[0203.322] CloseHandle (hObject=0x174) returned 1
	[0203.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf.egmwv")) returned 0x20
	[0203.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.356] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.369] SetEvent (hEvent=0xc8) returned 1
	[0203.369] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.328] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.356] SetEvent (hEvent=0x5c) returned 1
	[0208.357] SetEvent (hEvent=0xb0) returned 1
	[0208.357] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0208.365] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.365] SetEvent (hEvent=0xb0) returned 1
	[0208.365] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0208.369] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.369] SetEvent (hEvent=0xb0) returned 1
	[0208.369] SetEvent (hEvent=0x5c) returned 1
	[0208.369] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0208.373] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.373] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0208.375] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.375] SetEvent (hEvent=0x70) returned 1
	[0208.375] SetEvent (hEvent=0x90) returned 1
	[0208.376] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x0
	[0208.378] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000d6000, nNumberOfBytesToRead=0xa90, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d6000*, lpNumberOfBytesRead=0xc000169cec*=0xa90, lpOverlapped=0x0) returned 1
	[0208.383] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0208.383] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0208.383] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0208.383] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0208.383] GetFileType (hFile=0x17c) returned 0x1
	[0208.384] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=2704) returned 1
	[0208.384] WriteFile (in: hFile=0x17c, lpBuffer=0xc000189000*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000189000*, lpNumberOfBytesWritten=0xc000455ccc*=0xa90, lpOverlapped=0xc000455ce8) returned 1
	[0208.384] GetFileType (hFile=0x17c) returned 0x1
	[0208.384] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xa90, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=2704) returned 1
	[0208.384] GetFileType (hFile=0x17c) returned 0x1
	[0208.384] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=2704) returned 1
	[0208.385] WriteFile (in: hFile=0x17c, lpBuffer=0xc00032b880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc00032b880*, lpNumberOfBytesWritten=0xc000455ccc*=0x224, lpOverlapped=0xc000455ce8) returned 1
	[0208.385] GetFileType (hFile=0x17c) returned 0x1
	[0208.385] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xa90, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=2704) returned 1
	[0208.385] CloseHandle (hObject=0x17c) returned 1
	[0208.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf.egmwv")) returned 0x20
	[0208.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.388] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.390] SetEvent (hEvent=0x90) returned 1
	[0208.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x20
	[0208.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x20) returned 1
	[0208.393] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.409] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0208.409] ReadFile (in: hFile=0x164, lpBuffer=0xc00032c000, nNumberOfBytesToRead=0x15b0, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc00032c000*, lpNumberOfBytesRead=0xc000169cec*=0x15b0, lpOverlapped=0x0) returned 1
	[0208.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0208.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0208.414] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0208.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000129a | out: pbBuffer=0xc00000129a) returned 1
	[0208.414] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0208.415] GetFileType (hFile=0x164) returned 0x1
	[0208.415] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5552) returned 1
	[0208.415] WriteFile (in: hFile=0x164, lpBuffer=0xc000176000*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000176000*, lpNumberOfBytesWritten=0xc000155ccc*=0x15b0, lpOverlapped=0xc000155ce8) returned 1
	[0208.415] GetFileType (hFile=0x164) returned 0x1
	[0208.415] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x15b0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5552) returned 1
	[0208.416] GetFileType (hFile=0x164) returned 0x1
	[0208.416] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5552) returned 1
	[0208.416] WriteFile (in: hFile=0x164, lpBuffer=0xc0004a3500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004a3500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0208.416] GetFileType (hFile=0x164) returned 0x1
	[0208.416] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x15b0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5552) returned 1
	[0208.417] CloseHandle (hObject=0x164) returned 1
	[0208.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf.egmwv")) returned 0x20
	[0208.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.422] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x20
	[0208.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x20) returned 1
	[0208.444] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0208.472] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0208.472] ReadFile (in: hFile=0x168, lpBuffer=0xc000392000, nNumberOfBytesToRead=0x5b04, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc000392000*, lpNumberOfBytesRead=0xc00016bcec*=0x5b04, lpOverlapped=0x0) returned 1
	[0208.518] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0208.518] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1002 | out: pbBuffer=0xc0002c1002) returned 1
	[0208.518] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1005 | out: pbBuffer=0xc0002c1005) returned 1
	[0208.518] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1036 | out: pbBuffer=0xc0002c1036) returned 1
	[0208.518] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0208.519] GetFileType (hFile=0x168) returned 0x1
	[0208.519] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001b7ca0*=23300) returned 1
	[0208.519] WriteFile (in: hFile=0x168, lpBuffer=0xc000364000*, nNumberOfBytesToWrite=0x5b04, lpNumberOfBytesWritten=0xc0001b7ccc, lpOverlapped=0xc0001b7ce8 | out: lpBuffer=0xc000364000*, lpNumberOfBytesWritten=0xc0001b7ccc*=0x5b04, lpOverlapped=0xc0001b7ce8) returned 1
	[0208.519] GetFileType (hFile=0x168) returned 0x1
	[0208.519] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x5b04, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001b7ca0*=23300) returned 1
	[0208.520] GetFileType (hFile=0x168) returned 0x1
	[0208.520] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001b7ca0*=23300) returned 1
	[0208.520] WriteFile (in: hFile=0x168, lpBuffer=0xc0002b5500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001b7ccc, lpOverlapped=0xc0001b7ce8 | out: lpBuffer=0xc0002b5500*, lpNumberOfBytesWritten=0xc0001b7ccc*=0x22a, lpOverlapped=0xc0001b7ce8) returned 1
	[0208.520] GetFileType (hFile=0x168) returned 0x1
	[0208.520] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x5b04, lpNewFilePointer=0xc0001b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001b7ca0*=23300) returned 1
	[0208.521] CloseHandle (hObject=0x168) returned 1
	[0208.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf.egmwv")) returned 0x20
	[0208.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.533] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.566] SetEvent (hEvent=0x90) returned 1
	[0212.566] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf")) returned 0x20
	[0212.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF", dwFileAttributes=0x20) returned 1
	[0212.572] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.759] SetEvent (hEvent=0x70) returned 1
	[0212.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0212.761] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0212.761] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001e4000, nNumberOfBytesToRead=0x2e7c, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesRead=0xc0002d5cec*=0x2e7c, lpOverlapped=0x0) returned 1
	[0212.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414aa0 | out: pbBuffer=0xc000414aa0) returned 1
	[0212.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000414aba | out: pbBuffer=0xc000414aba) returned 1
	[0212.766] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f0502 | out: pbBuffer=0xc0001f0502) returned 1
	[0212.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414ae0 | out: pbBuffer=0xc000414ae0) returned 1
	[0212.766] GetFileType (hFile=0x17c) returned 0x1
	[0212.767] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=11900) returned 1
	[0212.767] WriteFile (in: hFile=0x17c, lpBuffer=0xc000316000*, nNumberOfBytesToWrite=0x2e7c, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc000316000*, lpNumberOfBytesWritten=0xc000373ccc*=0x2e7c, lpOverlapped=0xc000373ce8) returned 1
	[0212.767] GetFileType (hFile=0x17c) returned 0x1
	[0212.767] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2e7c, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=11900) returned 1
	[0212.767] GetFileType (hFile=0x17c) returned 0x1
	[0212.767] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000373ca0*=11900) returned 1
	[0212.768] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001ef180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000373ccc, lpOverlapped=0xc000373ce8 | out: lpBuffer=0xc0001ef180*, lpNumberOfBytesWritten=0xc000373ccc*=0x233, lpOverlapped=0xc000373ce8) returned 1
	[0212.768] GetFileType (hFile=0x17c) returned 0x1
	[0212.768] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2e7c, lpNewFilePointer=0xc000373ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000373ca0*=11900) returned 1
	[0212.768] CloseHandle (hObject=0x17c) returned 1
	[0212.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf.egmwv")) returned 0x20
	[0212.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.771] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.785] SetEvent (hEvent=0x60) returned 1
	[0212.786] SetEvent (hEvent=0xc0) returned 1
	[0212.786] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x0
	[0212.796] SetEvent (hEvent=0xc0) returned 1
	[0212.797] SetEvent (hEvent=0x15c) returned 1
	[0212.797] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0212.801] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.802] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0212.813] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.813] SetEvent (hEvent=0x68) returned 1
	[0212.813] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x1) returned 0x102
	[0212.818] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.819] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xffffffff) 

Thread:
	id = 43
	os_tid = 0xa9c

	[0119.034] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x5c5feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5c5feb0*=0x13c) returned 1
	[0119.034] VirtualQuery (in: lpAddress=0x5c5fed0, lpBuffer=0x5c5fed0, dwLength=0x30 | out: lpBuffer=0x5c5fed0*(BaseAddress=0x5c5f000, AllocationBase=0x5a60000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0119.034] SwitchToThread () returned 1
	[0119.067] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x140
	[0119.067] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) returned 0x0
	[0119.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x456710, lpParameter=0xc0002ba700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154
	[0119.208] CloseHandle (hObject=0x154) returned 1
	[0119.208] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) returned 0x0
	[0201.585] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) returned 0x0
	[0201.600] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) returned 0x0
	[0201.630] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) 

Thread:
	id = 44
	os_tid = 0xaac

	[0119.035] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x5e5feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5e5feb0*=0x134) returned 1
	[0119.035] VirtualQuery (in: lpAddress=0x5e5fed0, lpBuffer=0x5e5fed0, dwLength=0x30 | out: lpBuffer=0x5e5fed0*(BaseAddress=0x5e5f000, AllocationBase=0x5c60000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0119.035] SwitchToThread () returned 1
	[0119.068] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x144
	[0119.068] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0119.200] SetEvent (hEvent=0x140) returned 1
	[0119.201] GetFileType (hFile=0xe8) returned 0x1
	[0119.201] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba5ca0*=1048576) returned 1
	[0119.201] WriteFile (in: hFile=0xe8, lpBuffer=0xc001c00000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc000ba5ccc, lpOverlapped=0xc000ba5ce8 | out: lpBuffer=0xc001c00000*, lpNumberOfBytesWritten=0xc000ba5ccc*=0x100000, lpOverlapped=0xc000ba5ce8) returned 1
	[0120.887] GetFileType (hFile=0xe8) returned 0x1
	[0120.888] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000ba5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba5ca0*=1048576) returned 1
	[0120.888] GetFileType (hFile=0xe8) returned 0x1
	[0120.888] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000ba5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000ba5ca0*=1048576) returned 1
	[0120.888] WriteFile (in: hFile=0xe8, lpBuffer=0xc000378a00*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000ba5ccc, lpOverlapped=0xc000ba5ce8 | out: lpBuffer=0xc000378a00*, lpNumberOfBytesWritten=0xc000ba5ccc*=0x2d8, lpOverlapped=0xc000ba5ce8) returned 1
	[0121.089] GetFileType (hFile=0xe8) returned 0x1
	[0121.089] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000ba5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000ba5ca0*=1048576) returned 1
	[0121.089] CloseHandle (hObject=0xe8) returned 1
	[0143.700] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0143.938] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0144.029] SwitchToThread () returned 1
	[0144.378] SwitchToThread () returned 1
	[0144.516] SwitchToThread () returned 1
	[0144.723] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000101c0 | out: pbBuffer=0xc0000101c0) returned 1
	[0144.723] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000101da | out: pbBuffer=0xc0000101da) returned 1
	[0144.723] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0144.723] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000010200 | out: pbBuffer=0xc000010200) returned 1
	[0144.724] VirtualAlloc (lpAddress=0xc000b68000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b68000
	[0144.728] VirtualAlloc (lpAddress=0xc000b76000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b76000
	[0144.736] GetFileType (hFile=0xd4) returned 0x1
	[0144.737] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=87398) returned 1
	[0144.737] WriteFile (in: hFile=0xd4, lpBuffer=0xc0000e2000*, nNumberOfBytesToWrite=0x15566, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesWritten=0xc00019dccc*=0x15566, lpOverlapped=0xc00019dce8) returned 1
	[0144.738] GetFileType (hFile=0xd4) returned 0x1
	[0144.738] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x15566, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=87398) returned 1
	[0144.739] GetFileType (hFile=0xd4) returned 0x1
	[0144.739] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=87398) returned 1
	[0144.739] WriteFile (in: hFile=0xd4, lpBuffer=0xc000203500*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000203500*, lpNumberOfBytesWritten=0xc00019dccc*=0x23c, lpOverlapped=0xc00019dce8) returned 1
	[0144.809] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0149.779] SetEvent (hEvent=0x70) returned 1
	[0149.780] GetFileType (hFile=0xd4) returned 0x1
	[0149.780] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0150.052] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x15566, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=87398) returned 1
	[0150.054] CloseHandle (hObject=0xd4) returned 1
	[0150.054] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.egmwv")) returned 0x2020
	[0150.055] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.egmwv", dwFileAttributes=0x2021) returned 1
	[0150.056] GetFileType (hFile=0xd8) returned 0x1
	[0150.056] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc000199ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000199ca0*=1048576) returned 1
	[0150.056] WriteFile (in: hFile=0xd8, lpBuffer=0xc000378000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc000199ccc, lpOverlapped=0xc000199ce8 | out: lpBuffer=0xc000378000*, lpNumberOfBytesWritten=0xc000199ccc*=0x2d8, lpOverlapped=0xc000199ce8) returned 1
	[0150.105] GetFileType (hFile=0xd8) returned 0x1
	[0150.105] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x100000, lpNewFilePointer=0xc000199ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000199ca0*=1048576) returned 1
	[0150.106] CloseHandle (hObject=0xd8) returned 1
	[0150.106] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.egmwv")) returned 0x2020
	[0150.106] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0150.107] VirtualAlloc (lpAddress=0xc000f4e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000f4e000
	[0150.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052120 | out: pbBuffer=0xc000052120) returned 1
	[0150.111] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0150.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039269 | out: pbBuffer=0xc000039269) returned 1
	[0150.111] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00003926b | out: pbBuffer=0xc00003926b) returned 1
	[0150.112] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052160 | out: pbBuffer=0xc000052160) returned 1
	[0150.116] VirtualAlloc (lpAddress=0xc000f52000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000f52000
	[0150.123] VirtualAlloc (lpAddress=0xc000f60000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000f60000
	[0150.244] VirtualAlloc (lpAddress=0xc00100a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00100a000
	[0150.246] VirtualAlloc (lpAddress=0xc00100e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00100e000
	[0150.247] VirtualAlloc (lpAddress=0xc001012000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001012000
	[0150.341] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0150.474] SetEvent (hEvent=0x54) returned 1
	[0150.476] SetEvent (hEvent=0x148) returned 1
	[0150.476] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0150.493] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0150.493] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0150.501] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0150.501] SetEvent (hEvent=0xac) returned 1
	[0150.501] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0150.520] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0150.521] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab")) returned 0x2020
	[0150.521] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", dwFileAttributes=0x2020) returned 1
	[0150.522] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.egmwv"), dwFlags=0x1) returned 1
	[0150.523] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0150.523] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0150.530] ReadFile (in: hFile=0xd8, lpBuffer=0xc001a00000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc001a00000*, lpNumberOfBytesRead=0xc00016dcec*=0x100000, lpOverlapped=0x0) returned 1
	[0154.087] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0154.342] SwitchToThread () returned 1
	[0155.515] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0155.804] SetEvent (hEvent=0xc4) returned 1
	[0155.804] SetEvent (hEvent=0xac) returned 1
	[0155.804] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0155.967] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0155.967] SetEvent (hEvent=0x70) returned 1
	[0155.968] SetEvent (hEvent=0xc4) returned 1
	[0155.968] SetEvent (hEvent=0xac) returned 1
	[0155.968] SetEvent (hEvent=0x108) returned 1
	[0155.969] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a120 | out: pbBuffer=0xc00041a120) returned 1
	[0155.969] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0155.969] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc00041a160 | out: pbBuffer=0xc00041a160) returned 1
	[0155.969] VirtualAlloc (lpAddress=0xc0011a8000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011a8000
	[0155.974] VirtualAlloc (lpAddress=0xc0011ba000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0011ba000
	[0155.987] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0156.014] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0156.014] SetEvent (hEvent=0x108) returned 1
	[0156.014] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x0
	[0156.100] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x0
	[0156.759] SetEvent (hEvent=0x70) returned 1
	[0156.760] SetEvent (hEvent=0xac) returned 1
	[0156.760] SetEvent (hEvent=0xc4) returned 1
	[0158.923] SetEvent (hEvent=0xac) returned 1
	[0158.944] GetFileType (hFile=0xd8) returned 0x1
	[0158.944] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0158.945] WriteFile (in: hFile=0xd8, lpBuffer=0xc0011be000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0xc00016dccc, lpOverlapped=0xc00016dce8 | out: lpBuffer=0xc0011be000*, lpNumberOfBytesWritten=0xc00016dccc*=0x100000, lpOverlapped=0xc00016dce8) returned 1
	[0160.778] GetFileType (hFile=0xd8) returned 0x1
	[0160.778] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0160.778] GetFileType (hFile=0xd8) returned 0x1
	[0160.778] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0160.779] WriteFile (in: hFile=0xd8, lpBuffer=0xc000190000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xc00016dccc, lpOverlapped=0xc00016dce8 | out: lpBuffer=0xc000190000*, lpNumberOfBytesWritten=0xc00016dccc*=0x2d8, lpOverlapped=0xc00016dce8) returned 1
	[0161.049] GetFileType (hFile=0xd8) returned 0x1
	[0161.049] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x100000, lpNewFilePointer=0xc00016dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00016dca0*=1048576) returned 1
	[0161.050] CloseHandle (hObject=0xd8) returned 1
	[0161.376] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.egmwv" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.egmwv")) returned 0x2020
	[0161.376] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.egmwv", dwFileAttributes=0x2021) returned 1
	[0165.122] SetEvent (hEvent=0x70) returned 1
	[0165.122] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0175.472] SetEvent (hEvent=0x54) returned 1
	[0175.472] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0175.570] SetEvent (hEvent=0x120) returned 1
	[0175.570] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0190.993] SetEvent (hEvent=0x148) returned 1
	[0190.993] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0193.436] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0196.620] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0xc0001a1880 | out: lpFileInformation=0xc0001a1880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0198.101] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.416] SetEvent (hEvent=0x120) returned 1
	[0198.417] SwitchToThread () returned 1
	[0198.522] SwitchToThread () returned 1
	[0198.616] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.659] SetEvent (hEvent=0x120) returned 1
	[0198.659] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.666] SetEvent (hEvent=0x100) returned 1
	[0198.666] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.697] SetEvent (hEvent=0x54) returned 1
	[0198.697] SetEvent (hEvent=0x100) returned 1
	[0198.697] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.963] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.967] SetEvent (hEvent=0x148) returned 1
	[0198.968] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.985] SetEvent (hEvent=0xac) returned 1
	[0198.986] SetEvent (hEvent=0x124) returned 1
	[0198.986] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0198.992] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.992] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0198.995] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0198.995] SetEvent (hEvent=0x100) returned 1
	[0198.995] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0199.003] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0199.003] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0199.116] SetEvent (hEvent=0x148) returned 1
	[0199.116] SetEvent (hEvent=0x124) returned 1
	[0199.116] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0199.228] SetEvent (hEvent=0x148) returned 1
	[0199.228] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0200.823] SetEvent (hEvent=0x124) returned 1
	[0200.823] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0200.826] SetEvent (hEvent=0x124) returned 1
	[0200.826] SwitchToThread () returned 1
	[0200.828] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0200.832] SetEvent (hEvent=0x120) returned 1
	[0200.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20
	[0200.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x20) returned 1
	[0200.834] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.egmwv"), dwFlags=0x1) returned 1
	[0200.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0200.860] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0200.860] ReadFile (in: hFile=0xd4, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc000387cec*=0x135b, lpOverlapped=0x0) returned 1
	[0200.992] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0200.992] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0200.992] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000123c | out: pbBuffer=0xc00000123c) returned 1
	[0200.992] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000129f | out: pbBuffer=0xc00000129f) returned 1
	[0200.993] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0200.993] GetFileType (hFile=0xd4) returned 0x1
	[0200.993] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=4955) returned 1
	[0200.993] WriteFile (in: hFile=0xd4, lpBuffer=0xc0003d2000*, nNumberOfBytesToWrite=0x135b, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0003d2000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x135b, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.993] GetFileType (hFile=0xd4) returned 0x1
	[0200.994] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x135b, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=4955) returned 1
	[0200.994] GetFileType (hFile=0xd4) returned 0x1
	[0200.994] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=4955) returned 1
	[0200.994] WriteFile (in: hFile=0xd4, lpBuffer=0xc000381500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000381500*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x230, lpOverlapped=0xc0000e9ce8) returned 1
	[0200.994] GetFileType (hFile=0xd4) returned 0x1
	[0200.995] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x135b, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=4955) returned 1
	[0200.995] CloseHandle (hObject=0xd4) returned 1
	[0200.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.egmwv")) returned 0x20
	[0200.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.000] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20
	[0201.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x20) returned 1
	[0201.007] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.054] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0201.054] ReadFile (in: hFile=0x118, lpBuffer=0xc0002a6000, nNumberOfBytesToRead=0x1d9f, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a6000*, lpNumberOfBytesRead=0xc000387cec*=0x1d9f, lpOverlapped=0x0) returned 1
	[0201.060] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0201.061] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215402 | out: pbBuffer=0xc000215402) returned 1
	[0201.061] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0201.061] GetFileType (hFile=0x118) returned 0x1
	[0201.061] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=7583) returned 1
	[0201.061] WriteFile (in: hFile=0x118, lpBuffer=0xc0001c4000*, nNumberOfBytesToWrite=0x1d9f, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc0001c4000*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x1d9f, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.061] GetFileType (hFile=0x118) returned 0x1
	[0201.062] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1d9f, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=7583) returned 1
	[0201.062] GetFileType (hFile=0x118) returned 0x1
	[0201.062] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e5ca0*=7583) returned 1
	[0201.062] WriteFile (in: hFile=0x118, lpBuffer=0xc000125500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0000e5ccc, lpOverlapped=0xc0000e5ce8 | out: lpBuffer=0xc000125500*, lpNumberOfBytesWritten=0xc0000e5ccc*=0x236, lpOverlapped=0xc0000e5ce8) returned 1
	[0201.062] GetFileType (hFile=0x118) returned 0x1
	[0201.062] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1d9f, lpNewFilePointer=0xc0000e5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e5ca0*=7583) returned 1
	[0201.062] CloseHandle (hObject=0x118) returned 1
	[0201.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.egmwv")) returned 0x20
	[0201.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.097] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20
	[0201.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x20) returned 1
	[0201.115] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.145] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000171cc4 | out: lpMode=0xc000171cc4) returned 0
	[0201.145] ReadFile (in: hFile=0xd4, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x2186, lpNumberOfBytesRead=0xc000171cec, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000171cec*=0x2186, lpOverlapped=0x0) returned 1
	[0201.150] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0201.150] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d1a | out: pbBuffer=0xc000052d1a) returned 1
	[0201.150] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1c02 | out: pbBuffer=0xc0002c1c02) returned 1
	[0201.150] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1c39 | out: pbBuffer=0xc0002c1c39) returned 1
	[0201.150] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1c57 | out: pbBuffer=0xc0002c1c57) returned 1
	[0201.151] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0201.151] GetFileType (hFile=0xd4) returned 0x1
	[0201.151] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=8582) returned 1
	[0201.151] WriteFile (in: hFile=0xd4, lpBuffer=0xc000456000*, nNumberOfBytesToWrite=0x2186, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000456000*, lpNumberOfBytesWritten=0xc000411ccc*=0x2186, lpOverlapped=0xc000411ce8) returned 1
	[0201.152] GetFileType (hFile=0xd4) returned 0x1
	[0201.152] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2186, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=8582) returned 1
	[0201.152] GetFileType (hFile=0xd4) returned 0x1
	[0201.152] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=8582) returned 1
	[0201.152] WriteFile (in: hFile=0xd4, lpBuffer=0xc00044ce00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc00044ce00*, lpNumberOfBytesWritten=0xc000411ccc*=0x227, lpOverlapped=0xc000411ce8) returned 1
	[0201.152] GetFileType (hFile=0xd4) returned 0x1
	[0201.153] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2186, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=8582) returned 1
	[0201.153] CloseHandle (hObject=0xd4) returned 1
	[0201.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.egmwv")) returned 0x20
	[0201.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.154] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.167] SetEvent (hEvent=0x148) returned 1
	[0201.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20
	[0201.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x20) returned 1
	[0201.169] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4
	[0201.197] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0201.197] ReadFile (in: hFile=0xd4, lpBuffer=0xc00043ca00, nNumberOfBytesToRead=0x2420, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00043ca00*, lpNumberOfBytesRead=0xc000387cec*=0x2420, lpOverlapped=0x0) returned 1
	[0201.202] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0201.202] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00014aa02 | out: pbBuffer=0xc00014aa02) returned 1
	[0201.203] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0201.203] GetFileType (hFile=0xd4) returned 0x1
	[0201.203] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=9248) returned 1
	[0201.203] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001e8000*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0001e8000*, lpNumberOfBytesWritten=0xc000411ccc*=0x2420, lpOverlapped=0xc000411ce8) returned 1
	[0201.204] GetFileType (hFile=0xd4) returned 0x1
	[0201.204] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2420, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=9248) returned 1
	[0201.204] GetFileType (hFile=0xd4) returned 0x1
	[0201.204] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=9248) returned 1
	[0201.204] WriteFile (in: hFile=0xd4, lpBuffer=0xc0001d0700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0001d0700*, lpNumberOfBytesWritten=0xc000411ccc*=0x221, lpOverlapped=0xc000411ce8) returned 1
	[0201.204] GetFileType (hFile=0xd4) returned 0x1
	[0201.204] SetFilePointerEx (in: hFile=0xd4, liDistanceToMove=0x2420, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=9248) returned 1
	[0201.205] CloseHandle (hObject=0xd4) returned 1
	[0201.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.egmwv")) returned 0x20
	[0201.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.207] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.213] SetEvent (hEvent=0x148) returned 1
	[0201.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20
	[0201.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x20) returned 1
	[0201.215] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.egmwv"), dwFlags=0x1) returned 1
	[0201.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0201.250] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0201.250] ReadFile (in: hFile=0xe8, lpBuffer=0xc0004bb000, nNumberOfBytesToRead=0xf7e, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004bb000*, lpNumberOfBytesRead=0xc000387cec*=0xf7e, lpOverlapped=0x0) returned 1
	[0201.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0201.257] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003c5102 | out: pbBuffer=0xc0003c5102) returned 1
	[0201.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003c5125 | out: pbBuffer=0xc0003c5125) returned 1
	[0201.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003c5163 | out: pbBuffer=0xc0003c5163) returned 1
	[0201.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0201.257] GetFileType (hFile=0xe8) returned 0x1
	[0201.257] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3966) returned 1
	[0201.258] WriteFile (in: hFile=0xe8, lpBuffer=0xc00026a000*, nNumberOfBytesToWrite=0xf7e, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00026a000*, lpNumberOfBytesWritten=0xc000151ccc*=0xf7e, lpOverlapped=0xc000151ce8) returned 1
	[0201.258] GetFileType (hFile=0xe8) returned 0x1
	[0201.258] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xf7e, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3966) returned 1
	[0201.258] GetFileType (hFile=0xe8) returned 0x1
	[0201.258] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3966) returned 1
	[0201.259] WriteFile (in: hFile=0xe8, lpBuffer=0xc000254a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000254a80*, lpNumberOfBytesWritten=0xc000151ccc*=0x236, lpOverlapped=0xc000151ce8) returned 1
	[0201.259] GetFileType (hFile=0xe8) returned 0x1
	[0201.259] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xf7e, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3966) returned 1
	[0201.259] CloseHandle (hObject=0xe8) returned 1
	[0201.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.egmwv")) returned 0x20
	[0201.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.265] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.272] SetEvent (hEvent=0x148) returned 1
	[0201.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20
	[0201.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x20) returned 1
	[0201.274] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.311] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0201.311] ReadFile (in: hFile=0x118, lpBuffer=0xc000316000, nNumberOfBytesToRead=0xbd2, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000316000*, lpNumberOfBytesRead=0xc000387cec*=0xbd2, lpOverlapped=0x0) returned 1
	[0201.317] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6ac0 | out: pbBuffer=0xc0002b6ac0) returned 1
	[0201.317] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b6ada | out: pbBuffer=0xc0002b6ada) returned 1
	[0201.317] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f5d02 | out: pbBuffer=0xc0001f5d02) returned 1
	[0201.317] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f5dc9 | out: pbBuffer=0xc0001f5dc9) returned 1
	[0201.317] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6b00 | out: pbBuffer=0xc0002b6b00) returned 1
	[0201.318] GetFileType (hFile=0x118) returned 0x1
	[0201.318] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=3026) returned 1
	[0201.318] WriteFile (in: hFile=0x118, lpBuffer=0xc000332000*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000332000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0xbd2, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.318] GetFileType (hFile=0x118) returned 0x1
	[0201.318] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xbd2, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=3026) returned 1
	[0201.319] GetFileType (hFile=0x118) returned 0x1
	[0201.319] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=3026) returned 1
	[0201.319] WriteFile (in: hFile=0x118, lpBuffer=0xc000324a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000324a80*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22d, lpOverlapped=0xc0000e9ce8) returned 1
	[0201.319] GetFileType (hFile=0x118) returned 0x1
	[0201.319] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xbd2, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=3026) returned 1
	[0201.319] CloseHandle (hObject=0x118) returned 1
	[0201.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.egmwv")) returned 0x20
	[0201.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.323] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.335] SetEvent (hEvent=0x54) returned 1
	[0201.335] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.338] SetEvent (hEvent=0x148) returned 1
	[0201.338] SetEvent (hEvent=0xac) returned 1
	[0201.338] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.348] SetEvent (hEvent=0x148) returned 1
	[0201.348] SetEvent (hEvent=0x124) returned 1
	[0201.349] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0201.363] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.363] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0201.368] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.368] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0201.373] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.373] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0201.376] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.376] SetEvent (hEvent=0x70) returned 1
	[0201.376] SetEvent (hEvent=0x148) returned 1
	[0201.376] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x0
	[0201.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20
	[0201.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x20) returned 1
	[0201.378] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.379] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0201.379] ReadFile (in: hFile=0x118, lpBuffer=0xc0004c2000, nNumberOfBytesToRead=0x1ba0, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004c2000*, lpNumberOfBytesRead=0xc00038dcec*=0x1ba0, lpOverlapped=0x0) returned 1
	[0201.409] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0201.409] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0201.409] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000337102 | out: pbBuffer=0xc000337102) returned 1
	[0201.409] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0201.410] GetFileType (hFile=0x118) returned 0x1
	[0201.410] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7072) returned 1
	[0201.410] WriteFile (in: hFile=0x118, lpBuffer=0xc000122000*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000122000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1ba0, lpOverlapped=0xc000151ce8) returned 1
	[0201.411] GetFileType (hFile=0x118) returned 0x1
	[0201.411] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1ba0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7072) returned 1
	[0201.411] GetFileType (hFile=0x118) returned 0x1
	[0201.411] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=7072) returned 1
	[0201.411] WriteFile (in: hFile=0x118, lpBuffer=0xc00045e700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00045e700*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0201.412] GetFileType (hFile=0x118) returned 0x1
	[0201.412] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1ba0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=7072) returned 1
	[0201.412] CloseHandle (hObject=0x118) returned 1
	[0201.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.egmwv")) returned 0x20
	[0201.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1
	[0201.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf")) returned 0x20
	[0201.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x20) returned 1
	[0201.414] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.416] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0201.416] ReadFile (in: hFile=0x118, lpBuffer=0xc0001b3300, nNumberOfBytesToRead=0x1204, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001b3300*, lpNumberOfBytesRead=0xc00038dcec*=0x1204, lpOverlapped=0x0) returned 1
	[0201.451] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0201.451] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000337f02 | out: pbBuffer=0xc000337f02) returned 1
	[0201.451] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0201.451] GetFileType (hFile=0x118) returned 0x1
	[0201.451] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4612) returned 1
	[0201.452] WriteFile (in: hFile=0x118, lpBuffer=0xc0002c8000*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1204, lpOverlapped=0xc000151ce8) returned 1
	[0201.452] GetFileType (hFile=0x118) returned 0x1
	[0201.452] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1204, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4612) returned 1
	[0201.452] GetFileType (hFile=0x118) returned 0x1
	[0201.453] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4612) returned 1
	[0201.453] WriteFile (in: hFile=0x118, lpBuffer=0xc0002cc000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002cc000*, lpNumberOfBytesWritten=0xc000151ccc*=0x221, lpOverlapped=0xc000151ce8) returned 1
	[0201.453] GetFileType (hFile=0x118) returned 0x1
	[0201.453] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x1204, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4612) returned 1
	[0201.453] CloseHandle (hObject=0x118) returned 1
	[0201.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf.egmwv")) returned 0x20
	[0201.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0xc000155770 | out: lpFileInformation=0xc000155770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1
	[0201.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf")) returned 0x20
	[0201.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x20) returned 1
	[0201.456] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0201.457] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0201.457] ReadFile (in: hFile=0x118, lpBuffer=0xc00024a000, nNumberOfBytesToRead=0x212c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00024a000*, lpNumberOfBytesRead=0xc00038dcec*=0x212c, lpOverlapped=0x0) returned 1
	[0201.498] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0201.498] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020642a | out: pbBuffer=0xc00020642a) returned 1
	[0201.498] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215102 | out: pbBuffer=0xc000215102) returned 1
	[0201.498] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021511f | out: pbBuffer=0xc00021511f) returned 1
	[0201.498] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215174 | out: pbBuffer=0xc000215174) returned 1
	[0201.498] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0201.498] GetFileType (hFile=0x118) returned 0x1
	[0201.499] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8492) returned 1
	[0201.499] WriteFile (in: hFile=0x118, lpBuffer=0xc000444000*, nNumberOfBytesToWrite=0x212c, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000444000*, lpNumberOfBytesWritten=0xc000151ccc*=0x212c, lpOverlapped=0xc000151ce8) returned 1
	[0201.499] GetFileType (hFile=0x118) returned 0x1
	[0201.499] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x212c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8492) returned 1
	[0201.499] GetFileType (hFile=0x118) returned 0x1
	[0201.500] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8492) returned 1
	[0201.500] WriteFile (in: hFile=0x118, lpBuffer=0xc0002cd880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002cd880*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0201.500] GetFileType (hFile=0x118) returned 0x1
	[0201.512] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x212c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8492) returned 1
	[0201.512] CloseHandle (hObject=0x118) returned 1
	[0201.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf.egmwv")) returned 0x20
	[0201.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20
	[0201.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x20) returned 1
	[0201.523] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0201.527] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.681] SetEvent (hEvent=0x70) returned 1
	[0201.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0201.683] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0201.683] ReadFile (in: hFile=0x130, lpBuffer=0xc0003c2000, nNumberOfBytesToRead=0xd10, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c2000*, lpNumberOfBytesRead=0xc000425cec*=0xd10, lpOverlapped=0x0) returned 1
	[0201.687] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65c0 | out: pbBuffer=0xc0002b65c0) returned 1
	[0201.688] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026d702 | out: pbBuffer=0xc00026d702) returned 1
	[0201.688] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026d7bf | out: pbBuffer=0xc00026d7bf) returned 1
	[0201.688] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026d7c8 | out: pbBuffer=0xc00026d7c8) returned 1
	[0201.688] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6600 | out: pbBuffer=0xc0002b6600) returned 1
	[0201.688] GetFileType (hFile=0x130) returned 0x1
	[0201.688] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=3344) returned 1
	[0201.688] WriteFile (in: hFile=0x130, lpBuffer=0xc0001d6000*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0001d6000*, lpNumberOfBytesWritten=0xc000357ccc*=0xd10, lpOverlapped=0xc000357ce8) returned 1
	[0201.689] GetFileType (hFile=0x130) returned 0x1
	[0201.689] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xd10, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=3344) returned 1
	[0201.689] GetFileType (hFile=0x130) returned 0x1
	[0201.689] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000357ca0*=3344) returned 1
	[0201.689] WriteFile (in: hFile=0x130, lpBuffer=0xc0001da000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000357ccc, lpOverlapped=0xc000357ce8 | out: lpBuffer=0xc0001da000*, lpNumberOfBytesWritten=0xc000357ccc*=0x224, lpOverlapped=0xc000357ce8) returned 1
	[0201.689] GetFileType (hFile=0x130) returned 0x1
	[0201.690] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xd10, lpNewFilePointer=0xc000357ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000357ca0*=3344) returned 1
	[0201.690] CloseHandle (hObject=0x130) returned 1
	[0201.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.egmwv")) returned 0x20
	[0201.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.692] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf")) returned 0x20
	[0212.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF", dwFileAttributes=0x20) returned 1
	[0212.603] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0212.895] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000511cc4 | out: lpMode=0xc000511cc4) returned 0
	[0212.895] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000ff000, nNumberOfBytesToRead=0x4330, lpNumberOfBytesRead=0xc000511cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ff000*, lpNumberOfBytesRead=0xc000511cec*=0x4330, lpOverlapped=0x0) returned 1
	[0212.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206770 | out: pbBuffer=0xc000206770) returned 1
	[0212.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020678a | out: pbBuffer=0xc00020678a) returned 1
	[0212.901] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000264a02 | out: pbBuffer=0xc000264a02) returned 1
	[0212.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002067b0 | out: pbBuffer=0xc0002067b0) returned 1
	[0212.902] GetFileType (hFile=0xe8) returned 0x1
	[0212.902] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=17200) returned 1
	[0212.902] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004e0000*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0004e0000*, lpNumberOfBytesWritten=0xc000377ccc*=0x4330, lpOverlapped=0xc000377ce8) returned 1
	[0212.902] GetFileType (hFile=0xe8) returned 0x1
	[0212.903] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4330, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=17200) returned 1
	[0212.903] GetFileType (hFile=0xe8) returned 0x1
	[0212.903] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=17200) returned 1
	[0212.903] WriteFile (in: hFile=0xe8, lpBuffer=0xc0004a2a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0004a2a80*, lpNumberOfBytesWritten=0xc000377ccc*=0x227, lpOverlapped=0xc000377ce8) returned 1
	[0212.903] GetFileType (hFile=0xe8) returned 0x1
	[0212.903] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4330, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=17200) returned 1
	[0212.903] CloseHandle (hObject=0xe8) returned 1
	[0212.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf.egmwv")) returned 0x20
	[0212.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.926] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.932] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.948] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.964] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.975] SetEvent (hEvent=0xc4) returned 1
	[0212.976] SetEvent (hEvent=0x120) returned 1
	[0212.976] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0212.979] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.979] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0212.981] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.981] SetEvent (hEvent=0xac) returned 1
	[0212.981] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0212.983] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0212.984] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.273] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.352] SetEvent (hEvent=0xc4) returned 1
	[0213.352] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.356] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.369] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf")) returned 0x20
	[0213.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF", dwFileAttributes=0x20) returned 1
	[0213.405] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0213.452] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00014bcc4 | out: lpMode=0xc00014bcc4) returned 0
	[0213.453] ReadFile (in: hFile=0x170, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0x7680, lpNumberOfBytesRead=0xc00014bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc00014bcec*=0x7680, lpOverlapped=0x0) returned 1
	[0213.637] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.645] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6120 | out: pbBuffer=0xc0002b6120) returned 1
	[0213.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b613a | out: pbBuffer=0xc0002b613a) returned 1
	[0213.646] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1502 | out: pbBuffer=0xc0002c1502) returned 1
	[0213.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c15b7 | out: pbBuffer=0xc0002c15b7) returned 1
	[0213.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6160 | out: pbBuffer=0xc0002b6160) returned 1
	[0213.646] GetFileType (hFile=0x170) returned 0x1
	[0213.646] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=30336) returned 1
	[0213.647] WriteFile (in: hFile=0x170, lpBuffer=0xc000326000*, nNumberOfBytesToWrite=0x7680, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc000326000*, lpNumberOfBytesWritten=0xc000203ccc*=0x7680, lpOverlapped=0xc000203ce8) returned 1
	[0213.647] GetFileType (hFile=0x170) returned 0x1
	[0213.647] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7680, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=30336) returned 1
	[0213.647] GetFileType (hFile=0x170) returned 0x1
	[0213.647] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000203ca0*=30336) returned 1
	[0213.648] WriteFile (in: hFile=0x170, lpBuffer=0xc00025b500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000203ccc, lpOverlapped=0xc000203ce8 | out: lpBuffer=0xc00025b500*, lpNumberOfBytesWritten=0xc000203ccc*=0x22a, lpOverlapped=0xc000203ce8) returned 1
	[0213.648] GetFileType (hFile=0x170) returned 0x1
	[0213.648] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7680, lpNewFilePointer=0xc000203ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000203ca0*=30336) returned 1
	[0213.648] CloseHandle (hObject=0x170) returned 1
	[0213.658] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf.egmwv")) returned 0x20
	[0213.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.667] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.675] SetEvent (hEvent=0x108) returned 1
	[0213.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf")) returned 0x20
	[0213.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF", dwFileAttributes=0x20) returned 1
	[0213.681] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0213.733] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc000149cc4 | out: lpMode=0xc000149cc4) returned 0
	[0213.733] ReadFile (in: hFile=0xe8, lpBuffer=0xc000296000, nNumberOfBytesToRead=0x1f40, lpNumberOfBytesRead=0xc000149cec, lpOverlapped=0x0 | out: lpBuffer=0xc000296000*, lpNumberOfBytesRead=0xc000149cec*=0x1f40, lpOverlapped=0x0) returned 1
	[0213.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000070280 | out: pbBuffer=0xc000070280) returned 1
	[0213.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00007029a | out: pbBuffer=0xc00007029a) returned 1
	[0213.749] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215b02 | out: pbBuffer=0xc000215b02) returned 1
	[0213.749] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000702c0 | out: pbBuffer=0xc0000702c0) returned 1
	[0213.749] GetFileType (hFile=0xe8) returned 0x1
	[0213.749] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8000) returned 1
	[0213.749] WriteFile (in: hFile=0xe8, lpBuffer=0xc000476000*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000476000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1f40, lpOverlapped=0xc000155ce8) returned 1
	[0213.750] GetFileType (hFile=0xe8) returned 0x1
	[0213.750] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1f40, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8000) returned 1
	[0213.750] GetFileType (hFile=0xe8) returned 0x1
	[0213.750] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8000) returned 1
	[0213.750] WriteFile (in: hFile=0xe8, lpBuffer=0xc00041f180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00041f180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0213.751] GetFileType (hFile=0xe8) returned 0x1
	[0213.751] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1f40, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8000) returned 1
	[0213.751] CloseHandle (hObject=0xe8) returned 1
	[0213.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf.egmwv")) returned 0x20
	[0213.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.761] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.772] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.777] SetEvent (hEvent=0xe4) returned 1
	[0213.777] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf")) returned 0x20
	[0213.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF", dwFileAttributes=0x20) returned 1
	[0213.786] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0213.816] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0213.816] ReadFile (in: hFile=0xe8, lpBuffer=0xc0002ab300, nNumberOfBytesToRead=0x1068, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ab300*, lpNumberOfBytesRead=0xc00016dcec*=0x1068, lpOverlapped=0x0) returned 1
	[0213.847] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0213.847] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ca102 | out: pbBuffer=0xc0000ca102) returned 1
	[0213.847] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0213.847] GetFileType (hFile=0xe8) returned 0x1
	[0213.847] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015dca0*=4200) returned 1
	[0213.848] WriteFile (in: hFile=0xe8, lpBuffer=0xc000318000*, nNumberOfBytesToWrite=0x1068, lpNumberOfBytesWritten=0xc00015dccc, lpOverlapped=0xc00015dce8 | out: lpBuffer=0xc000318000*, lpNumberOfBytesWritten=0xc00015dccc*=0x1068, lpOverlapped=0xc00015dce8) returned 1
	[0213.848] GetFileType (hFile=0xe8) returned 0x1
	[0213.849] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1068, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015dca0*=4200) returned 1
	[0213.849] GetFileType (hFile=0xe8) returned 0x1
	[0213.849] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00015dca0*=4200) returned 1
	[0213.849] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000c8e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00015dccc, lpOverlapped=0xc00015dce8 | out: lpBuffer=0xc0000c8e00*, lpNumberOfBytesWritten=0xc00015dccc*=0x224, lpOverlapped=0xc00015dce8) returned 1
	[0213.849] GetFileType (hFile=0xe8) returned 0x1
	[0213.849] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1068, lpNewFilePointer=0xc00015dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00015dca0*=4200) returned 1
	[0213.850] CloseHandle (hObject=0xe8) returned 1
	[0213.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf.egmwv")) returned 0x20
	[0213.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.866] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.870] SetEvent (hEvent=0xe4) returned 1
	[0213.870] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf")) returned 0x20
	[0213.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF", dwFileAttributes=0x20) returned 1
	[0213.878] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf.egmwv"), dwFlags=0x1) returned 1
	[0213.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0213.940] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0213.940] ReadFile (in: hFile=0xd8, lpBuffer=0xc0002c3b00, nNumberOfBytesToRead=0x1a88, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c3b00*, lpNumberOfBytesRead=0xc0002d3cec*=0x1a88, lpOverlapped=0x0) returned 1
	[0213.965] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6780 | out: pbBuffer=0xc0002b6780) returned 1
	[0213.965] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b679a | out: pbBuffer=0xc0002b679a) returned 1
	[0213.966] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000304802 | out: pbBuffer=0xc000304802) returned 1
	[0213.966] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000304858 | out: pbBuffer=0xc000304858) returned 1
	[0213.966] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67c0 | out: pbBuffer=0xc0002b67c0) returned 1
	[0213.966] GetFileType (hFile=0xd8) returned 0x1
	[0213.966] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=6792) returned 1
	[0213.966] WriteFile (in: hFile=0xd8, lpBuffer=0xc000226000*, nNumberOfBytesToWrite=0x1a88, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000226000*, lpNumberOfBytesWritten=0xc00030dccc*=0x1a88, lpOverlapped=0xc00030dce8) returned 1
	[0213.967] GetFileType (hFile=0xd8) returned 0x1
	[0213.967] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x1a88, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=6792) returned 1
	[0213.967] GetFileType (hFile=0xd8) returned 0x1
	[0213.968] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=6792) returned 1
	[0213.968] WriteFile (in: hFile=0xd8, lpBuffer=0xc0002ff880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0002ff880*, lpNumberOfBytesWritten=0xc00030dccc*=0x227, lpOverlapped=0xc00030dce8) returned 1
	[0213.968] GetFileType (hFile=0xd8) returned 0x1
	[0213.968] SetFilePointerEx (in: hFile=0xd8, liDistanceToMove=0x1a88, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=6792) returned 1
	[0213.968] CloseHandle (hObject=0xd8) returned 1
	[0213.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf.egmwv")) returned 0x20
	[0213.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0213.985] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0213.994] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.057] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.157] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.191] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.287] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.297] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.299] SetEvent (hEvent=0x108) returned 1
	[0214.299] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.302] SetEvent (hEvent=0x108) returned 1
	[0214.302] SetEvent (hEvent=0x84) returned 1
	[0214.302] SwitchToThread () returned 1
	[0214.309] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.315] SetEvent (hEvent=0x84) returned 1
	[0214.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg")) returned 0x20
	[0214.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG", dwFileAttributes=0x20) returned 1
	[0214.317] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.339] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0214.339] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x5285, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc00016dcec*=0x5285, lpOverlapped=0x0) returned 1
	[0214.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0214.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0214.345] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0214.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0214.345] GetFileType (hFile=0xcc) returned 0x1
	[0214.346] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21125) returned 1
	[0214.346] WriteFile (in: hFile=0xcc, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x5285, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc000155ccc*=0x5285, lpOverlapped=0xc000155ce8) returned 1
	[0214.346] GetFileType (hFile=0xcc) returned 0x1
	[0214.346] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5285, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21125) returned 1
	[0214.347] GetFileType (hFile=0xcc) returned 0x1
	[0214.347] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=21125) returned 1
	[0214.347] WriteFile (in: hFile=0xcc, lpBuffer=0xc000073500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000073500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0214.347] GetFileType (hFile=0xcc) returned 0x1
	[0214.347] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x5285, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=21125) returned 1
	[0214.347] CloseHandle (hObject=0xcc) returned 1
	[0214.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.egmwv")) returned 0x20
	[0214.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.356] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.381] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.392] SetEvent (hEvent=0x124) returned 1
	[0214.392] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg")) returned 0x20
	[0214.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG", dwFileAttributes=0x20) returned 1
	[0214.396] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0214.428] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0214.428] ReadFile (in: hFile=0x118, lpBuffer=0xc000110000, nNumberOfBytesToRead=0x8a5b, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000110000*, lpNumberOfBytesRead=0xc0002d7cec*=0x8a5b, lpOverlapped=0x0) returned 1
	[0214.484] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6740 | out: pbBuffer=0xc0002b6740) returned 1
	[0214.484] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031fc02 | out: pbBuffer=0xc00031fc02) returned 1
	[0214.484] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6780 | out: pbBuffer=0xc0002b6780) returned 1
	[0214.484] GetFileType (hFile=0x118) returned 0x1
	[0214.485] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=35419) returned 1
	[0214.485] WriteFile (in: hFile=0x118, lpBuffer=0xc00043a000*, nNumberOfBytesToWrite=0x8a5b, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc00043a000*, lpNumberOfBytesWritten=0xc00030dccc*=0x8a5b, lpOverlapped=0xc00030dce8) returned 1
	[0214.485] GetFileType (hFile=0x118) returned 0x1
	[0214.486] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x8a5b, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=35419) returned 1
	[0214.486] GetFileType (hFile=0x118) returned 0x1
	[0214.486] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=35419) returned 1
	[0214.486] WriteFile (in: hFile=0x118, lpBuffer=0xc00012dc00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc00012dc00*, lpNumberOfBytesWritten=0xc00030dccc*=0x233, lpOverlapped=0xc00030dce8) returned 1
	[0214.486] GetFileType (hFile=0x118) returned 0x1
	[0214.486] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x8a5b, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=35419) returned 1
	[0214.487] CloseHandle (hObject=0x118) returned 1
	[0214.506] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.egmwv")) returned 0x20
	[0214.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.572] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.578] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b60f0 | out: pbBuffer=0xc0002b60f0) returned 1
	[0214.578] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b610a | out: pbBuffer=0xc0002b610a) returned 1
	[0214.578] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031e802 | out: pbBuffer=0xc00031e802) returned 1
	[0214.578] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00031e8a9 | out: pbBuffer=0xc00031e8a9) returned 1
	[0214.578] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6130 | out: pbBuffer=0xc0002b6130) returned 1
	[0214.578] GetFileType (hFile=0xe8) returned 0x1
	[0214.578] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=46508) returned 1
	[0214.579] WriteFile (in: hFile=0xe8, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0xb5ac, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc00030dccc*=0xb5ac, lpOverlapped=0xc00030dce8) returned 1
	[0214.579] GetFileType (hFile=0xe8) returned 0x1
	[0214.580] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xb5ac, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=46508) returned 1
	[0214.580] GetFileType (hFile=0xe8) returned 0x1
	[0214.580] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=46508) returned 1
	[0214.580] WriteFile (in: hFile=0xe8, lpBuffer=0xc000222a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000222a80*, lpNumberOfBytesWritten=0xc00030dccc*=0x236, lpOverlapped=0xc00030dce8) returned 1
	[0214.580] GetFileType (hFile=0xe8) returned 0x1
	[0214.580] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xb5ac, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=46508) returned 1
	[0214.581] CloseHandle (hObject=0xe8) returned 1
	[0214.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.egmwv")) returned 0x20
	[0214.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.584] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.588] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0214.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg")) returned 0x20
	[0214.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG", dwFileAttributes=0x20) returned 1
	[0214.603] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.egmwv"), dwFlags=0x1) returned 1
	[0214.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0214.628] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0214.628] ReadFile (in: hFile=0xcc, lpBuffer=0xc0001ba000, nNumberOfBytesToRead=0x6b01, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesRead=0xc0002d7cec*=0x6b01, lpOverlapped=0x0) returned 1
	[0214.769] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0214.770] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0214.770] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0214.770] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d33 | out: pbBuffer=0xc0002c0d33) returned 1
	[0214.770] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0214.770] GetFileType (hFile=0xcc) returned 0x1
	[0214.770] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=27393) returned 1
	[0214.770] WriteFile (in: hFile=0xcc, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x6b01, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc00030dccc*=0x6b01, lpOverlapped=0xc00030dce8) returned 1
	[0214.771] GetFileType (hFile=0xcc) returned 0x1
	[0214.771] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6b01, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=27393) returned 1
	[0214.771] GetFileType (hFile=0xcc) returned 0x1
	[0214.771] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00030dca0*=27393) returned 1
	[0214.771] WriteFile (in: hFile=0xcc, lpBuffer=0xc000223500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00030dccc, lpOverlapped=0xc00030dce8 | out: lpBuffer=0xc000223500*, lpNumberOfBytesWritten=0xc00030dccc*=0x22a, lpOverlapped=0xc00030dce8) returned 1
	[0214.771] GetFileType (hFile=0xcc) returned 0x1
	[0214.772] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x6b01, lpNewFilePointer=0xc00030dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00030dca0*=27393) returned 1
	[0214.772] CloseHandle (hObject=0xcc) returned 1
	[0214.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.egmwv")) returned 0x20
	[0214.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0214.784] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.159] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.162] SetEvent (hEvent=0xe4) returned 1
	[0215.163] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.165] SetEvent (hEvent=0xe4) returned 1
	[0215.165] SwitchToThread () returned 1
	[0215.168] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.180] SetEvent (hEvent=0xc4) returned 1
	[0215.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf")) returned 0x20
	[0215.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF", dwFileAttributes=0x20) returned 1
	[0215.185] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.212] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0215.212] ReadFile (in: hFile=0xe8, lpBuffer=0xc00016e000, nNumberOfBytesToRead=0x2584, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesRead=0xc00016bcec*=0x2584, lpOverlapped=0x0) returned 1
	[0215.218] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0215.218] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0215.218] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215b02 | out: pbBuffer=0xc000215b02) returned 1
	[0215.218] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0215.218] GetFileType (hFile=0xe8) returned 0x1
	[0215.219] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=9604) returned 1
	[0215.219] WriteFile (in: hFile=0xe8, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x2584, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc000343ccc*=0x2584, lpOverlapped=0xc000343ce8) returned 1
	[0215.219] GetFileType (hFile=0xe8) returned 0x1
	[0215.219] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2584, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=9604) returned 1
	[0215.220] GetFileType (hFile=0xe8) returned 0x1
	[0215.220] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=9604) returned 1
	[0215.220] WriteFile (in: hFile=0xe8, lpBuffer=0xc00037d180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc00037d180*, lpNumberOfBytesWritten=0xc000343ccc*=0x227, lpOverlapped=0xc000343ce8) returned 1
	[0215.220] GetFileType (hFile=0xe8) returned 0x1
	[0215.220] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2584, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=9604) returned 1
	[0215.221] CloseHandle (hObject=0xe8) returned 1
	[0215.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf.egmwv")) returned 0x20
	[0215.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.223] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.227] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.238] SetEvent (hEvent=0xc4) returned 1
	[0215.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf")) returned 0x20
	[0215.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF", dwFileAttributes=0x20) returned 1
	[0215.240] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.277] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0215.277] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000bc000, nNumberOfBytesToRead=0x8774, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000bc000*, lpNumberOfBytesRead=0xc00016bcec*=0x8774, lpOverlapped=0x0) returned 1
	[0215.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8110 | out: pbBuffer=0xc0001b8110) returned 1
	[0215.282] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000372802 | out: pbBuffer=0xc000372802) returned 1
	[0215.282] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8150 | out: pbBuffer=0xc0001b8150) returned 1
	[0215.283] GetFileType (hFile=0xe8) returned 0x1
	[0215.283] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=34676) returned 1
	[0215.283] WriteFile (in: hFile=0xe8, lpBuffer=0xc000444000*, nNumberOfBytesToWrite=0x8774, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc000444000*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x8774, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.284] GetFileType (hFile=0xe8) returned 0x1
	[0215.284] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x8774, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=34676) returned 1
	[0215.284] GetFileType (hFile=0xe8) returned 0x1
	[0215.284] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c7ca0*=34676) returned 1
	[0215.284] WriteFile (in: hFile=0xe8, lpBuffer=0xc0003cf500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0003c7ccc, lpOverlapped=0xc0003c7ce8 | out: lpBuffer=0xc0003cf500*, lpNumberOfBytesWritten=0xc0003c7ccc*=0x233, lpOverlapped=0xc0003c7ce8) returned 1
	[0215.284] GetFileType (hFile=0xe8) returned 0x1
	[0215.284] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x8774, lpNewFilePointer=0xc0003c7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c7ca0*=34676) returned 1
	[0215.285] CloseHandle (hObject=0xe8) returned 1
	[0215.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf.egmwv")) returned 0x20
	[0215.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.287] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf")) returned 0x20
	[0215.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF", dwFileAttributes=0x20) returned 1
	[0215.294] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.418] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0215.419] ReadFile (in: hFile=0xa8, lpBuffer=0xc000306000, nNumberOfBytesToRead=0x1c98, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000306000*, lpNumberOfBytesRead=0xc000389cec*=0x1c98, lpOverlapped=0x0) returned 1
	[0215.425] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b85c0 | out: pbBuffer=0xc0001b85c0) returned 1
	[0215.425] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000308802 | out: pbBuffer=0xc000308802) returned 1
	[0215.425] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003088d6 | out: pbBuffer=0xc0003088d6) returned 1
	[0215.426] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001b8600 | out: pbBuffer=0xc0001b8600) returned 1
	[0215.426] GetFileType (hFile=0xa8) returned 0x1
	[0215.426] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c3ca0*=7320) returned 1
	[0215.426] WriteFile (in: hFile=0xa8, lpBuffer=0xc00011e000*, nNumberOfBytesToWrite=0x1c98, lpNumberOfBytesWritten=0xc0003c3ccc, lpOverlapped=0xc0003c3ce8 | out: lpBuffer=0xc00011e000*, lpNumberOfBytesWritten=0xc0003c3ccc*=0x1c98, lpOverlapped=0xc0003c3ce8) returned 1
	[0215.426] GetFileType (hFile=0xa8) returned 0x1
	[0215.427] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1c98, lpNewFilePointer=0xc0003c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c3ca0*=7320) returned 1
	[0215.427] GetFileType (hFile=0xa8) returned 0x1
	[0215.427] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0003c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003c3ca0*=7320) returned 1
	[0215.427] WriteFile (in: hFile=0xa8, lpBuffer=0xc000122000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0003c3ccc, lpOverlapped=0xc0003c3ce8 | out: lpBuffer=0xc000122000*, lpNumberOfBytesWritten=0xc0003c3ccc*=0x22a, lpOverlapped=0xc0003c3ce8) returned 1
	[0215.428] GetFileType (hFile=0xa8) returned 0x1
	[0215.428] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x1c98, lpNewFilePointer=0xc0003c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003c3ca0*=7320) returned 1
	[0215.428] CloseHandle (hObject=0xa8) returned 1
	[0215.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf.egmwv")) returned 0x20
	[0215.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.433] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf")) returned 0x20
	[0215.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF", dwFileAttributes=0x20) returned 1
	[0215.440] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.492] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0215.493] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002a0300, nNumberOfBytesToRead=0x674, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a0300*, lpNumberOfBytesRead=0xc0002d7cec*=0x674, lpOverlapped=0x0) returned 1
	[0215.499] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206760 | out: pbBuffer=0xc000206760) returned 1
	[0215.499] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020677a | out: pbBuffer=0xc00020677a) returned 1
	[0215.499] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000220402 | out: pbBuffer=0xc000220402) returned 1
	[0215.499] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002067a0 | out: pbBuffer=0xc0002067a0) returned 1
	[0215.499] GetFileType (hFile=0xcc) returned 0x1
	[0215.499] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=1652) returned 1
	[0215.500] WriteFile (in: hFile=0xcc, lpBuffer=0xc00022a000*, nNumberOfBytesToWrite=0x674, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc00022a000*, lpNumberOfBytesWritten=0xc000343ccc*=0x674, lpOverlapped=0xc000343ce8) returned 1
	[0215.500] GetFileType (hFile=0xcc) returned 0x1
	[0215.500] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x674, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=1652) returned 1
	[0215.501] GetFileType (hFile=0xcc) returned 0x1
	[0215.501] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000343ca0*=1652) returned 1
	[0215.501] WriteFile (in: hFile=0xcc, lpBuffer=0xc00014bc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000343ccc, lpOverlapped=0xc000343ce8 | out: lpBuffer=0xc00014bc00*, lpNumberOfBytesWritten=0xc000343ccc*=0x22a, lpOverlapped=0xc000343ce8) returned 1
	[0215.501] GetFileType (hFile=0xcc) returned 0x1
	[0215.501] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x674, lpNewFilePointer=0xc000343ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000343ca0*=1652) returned 1
	[0215.502] CloseHandle (hObject=0xcc) returned 1
	[0215.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf.egmwv")) returned 0x20
	[0215.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.507] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.522] SetEvent (hEvent=0x120) returned 1
	[0215.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf")) returned 0x20
	[0215.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF", dwFileAttributes=0x20) returned 1
	[0215.526] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.606] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0215.607] ReadFile (in: hFile=0xe8, lpBuffer=0xc0000dc000, nNumberOfBytesToRead=0x1b6c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000dc000*, lpNumberOfBytesRead=0xc00038dcec*=0x1b6c, lpOverlapped=0x0) returned 1
	[0215.612] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0215.612] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0a02 | out: pbBuffer=0xc0002c0a02) returned 1
	[0215.612] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0a62 | out: pbBuffer=0xc0002c0a62) returned 1
	[0215.612] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0215.612] GetFileType (hFile=0xe8) returned 0x1
	[0215.612] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7020) returned 1
	[0215.613] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000aa000*, nNumberOfBytesToWrite=0x1b6c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1b6c, lpOverlapped=0xc000155ce8) returned 1
	[0215.613] GetFileType (hFile=0xe8) returned 0x1
	[0215.613] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b6c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7020) returned 1
	[0215.613] GetFileType (hFile=0xe8) returned 0x1
	[0215.613] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7020) returned 1
	[0215.614] WriteFile (in: hFile=0xe8, lpBuffer=0xc000261880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000261880*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0215.614] GetFileType (hFile=0xe8) returned 0x1
	[0215.614] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1b6c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7020) returned 1
	[0215.614] CloseHandle (hObject=0xe8) returned 1
	[0215.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf.egmwv")) returned 0x20
	[0215.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.616] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.628] SetEvent (hEvent=0xe4) returned 1
	[0215.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf")) returned 0x20
	[0215.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF", dwFileAttributes=0x20) returned 1
	[0215.630] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.663] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0215.663] ReadFile (in: hFile=0xe8, lpBuffer=0xc0001ba000, nNumberOfBytesToRead=0x2370, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesRead=0xc00038dcec*=0x2370, lpOverlapped=0x0) returned 1
	[0215.669] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0215.669] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0215.669] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039468 | out: pbBuffer=0xc000039468) returned 1
	[0215.669] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394e2 | out: pbBuffer=0xc0000394e2) returned 1
	[0215.669] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0215.669] GetFileType (hFile=0xe8) returned 0x1
	[0215.669] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=9072) returned 1
	[0215.670] WriteFile (in: hFile=0xe8, lpBuffer=0xc000376000*, nNumberOfBytesToWrite=0x2370, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc000376000*, lpNumberOfBytesWritten=0xc00017fccc*=0x2370, lpOverlapped=0xc00017fce8) returned 1
	[0215.670] GetFileType (hFile=0xe8) returned 0x1
	[0215.670] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2370, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=9072) returned 1
	[0215.671] GetFileType (hFile=0xe8) returned 0x1
	[0215.671] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=9072) returned 1
	[0215.671] WriteFile (in: hFile=0xe8, lpBuffer=0xc0002c7500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0002c7500*, lpNumberOfBytesWritten=0xc00017fccc*=0x22a, lpOverlapped=0xc00017fce8) returned 1
	[0215.671] GetFileType (hFile=0xe8) returned 0x1
	[0215.671] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2370, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=9072) returned 1
	[0215.671] CloseHandle (hObject=0xe8) returned 1
	[0215.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf.egmwv")) returned 0x20
	[0215.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.674] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf")) returned 0x20
	[0215.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF", dwFileAttributes=0x20) returned 1
	[0215.681] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0215.719] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0215.719] ReadFile (in: hFile=0xa8, lpBuffer=0xc00034c000, nNumberOfBytesToRead=0x29ac, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00034c000*, lpNumberOfBytesRead=0xc00038dcec*=0x29ac, lpOverlapped=0x0) returned 1
	[0215.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053010 | out: pbBuffer=0xc000053010) returned 1
	[0215.727] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000399102 | out: pbBuffer=0xc000399102) returned 1
	[0215.727] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053050 | out: pbBuffer=0xc000053050) returned 1
	[0215.728] GetFileType (hFile=0xa8) returned 0x1
	[0215.728] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10668) returned 1
	[0215.728] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0x29ac, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc000155ccc*=0x29ac, lpOverlapped=0xc000155ce8) returned 1
	[0215.729] GetFileType (hFile=0xa8) returned 0x1
	[0215.729] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x29ac, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10668) returned 1
	[0215.729] GetFileType (hFile=0xa8) returned 0x1
	[0215.729] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=10668) returned 1
	[0215.729] WriteFile (in: hFile=0xa8, lpBuffer=0xc000360380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000360380*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0215.730] GetFileType (hFile=0xa8) returned 0x1
	[0215.730] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x29ac, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=10668) returned 1
	[0215.730] CloseHandle (hObject=0xa8) returned 1
	[0215.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf.egmwv")) returned 0x20
	[0215.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.735] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.740] SetEvent (hEvent=0xe4) returned 1
	[0215.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf")) returned 0x20
	[0215.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF", dwFileAttributes=0x20) returned 1
	[0215.741] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0215.776] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0215.776] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002fc000, nNumberOfBytesToRead=0x812c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002fc000*, lpNumberOfBytesRead=0xc00038dcec*=0x812c, lpOverlapped=0x0) returned 1
	[0215.783] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0215.784] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0215.784] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000403b02 | out: pbBuffer=0xc000403b02) returned 1
	[0215.784] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0215.784] GetFileType (hFile=0xcc) returned 0x1
	[0215.784] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=33068) returned 1
	[0215.785] WriteFile (in: hFile=0xcc, lpBuffer=0xc0004ac000*, nNumberOfBytesToWrite=0x812c, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesWritten=0xc00017fccc*=0x812c, lpOverlapped=0xc00017fce8) returned 1
	[0215.785] GetFileType (hFile=0xcc) returned 0x1
	[0215.785] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x812c, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=33068) returned 1
	[0215.786] GetFileType (hFile=0xcc) returned 0x1
	[0215.786] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=33068) returned 1
	[0215.786] WriteFile (in: hFile=0xcc, lpBuffer=0xc000456000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc000456000*, lpNumberOfBytesWritten=0xc00017fccc*=0x22a, lpOverlapped=0xc00017fce8) returned 1
	[0215.786] GetFileType (hFile=0xcc) returned 0x1
	[0215.786] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x812c, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=33068) returned 1
	[0215.786] CloseHandle (hObject=0xcc) returned 1
	[0215.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf.egmwv")) returned 0x20
	[0215.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.792] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.804] SetEvent (hEvent=0xe4) returned 1
	[0215.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf")) returned 0x20
	[0215.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF", dwFileAttributes=0x20) returned 1
	[0215.806] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.836] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0215.836] ReadFile (in: hFile=0xe8, lpBuffer=0xc000116000, nNumberOfBytesToRead=0x1fc8, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000116000*, lpNumberOfBytesRead=0xc00038dcec*=0x1fc8, lpOverlapped=0x0) returned 1
	[0215.841] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0215.841] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000120302 | out: pbBuffer=0xc000120302) returned 1
	[0215.842] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0215.842] GetFileType (hFile=0xe8) returned 0x1
	[0215.842] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002f5ca0*=8136) returned 1
	[0215.842] WriteFile (in: hFile=0xe8, lpBuffer=0xc000138000*, nNumberOfBytesToWrite=0x1fc8, lpNumberOfBytesWritten=0xc0002f5ccc, lpOverlapped=0xc0002f5ce8 | out: lpBuffer=0xc000138000*, lpNumberOfBytesWritten=0xc0002f5ccc*=0x1fc8, lpOverlapped=0xc0002f5ce8) returned 1
	[0215.843] GetFileType (hFile=0xe8) returned 0x1
	[0215.843] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1fc8, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002f5ca0*=8136) returned 1
	[0215.843] GetFileType (hFile=0xe8) returned 0x1
	[0215.843] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002f5ca0*=8136) returned 1
	[0215.843] WriteFile (in: hFile=0xe8, lpBuffer=0xc000124e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0002f5ccc, lpOverlapped=0xc0002f5ce8 | out: lpBuffer=0xc000124e00*, lpNumberOfBytesWritten=0xc0002f5ccc*=0x230, lpOverlapped=0xc0002f5ce8) returned 1
	[0215.844] GetFileType (hFile=0xe8) returned 0x1
	[0215.844] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1fc8, lpNewFilePointer=0xc0002f5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002f5ca0*=8136) returned 1
	[0215.844] CloseHandle (hObject=0xe8) returned 1
	[0215.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf.egmwv")) returned 0x20
	[0215.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.846] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.859] SetEvent (hEvent=0xe4) returned 1
	[0215.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf")) returned 0x20
	[0215.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF", dwFileAttributes=0x20) returned 1
	[0215.862] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf.egmwv"), dwFlags=0x1) returned 1
	[0215.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0215.891] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0215.891] ReadFile (in: hFile=0xe8, lpBuffer=0xc00022a000, nNumberOfBytesToRead=0xbc0, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00022a000*, lpNumberOfBytesRead=0xc0002d3cec*=0xbc0, lpOverlapped=0x0) returned 1
	[0215.898] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053340 | out: pbBuffer=0xc000053340) returned 1
	[0215.898] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005335a | out: pbBuffer=0xc00005335a) returned 1
	[0215.898] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001d8e02 | out: pbBuffer=0xc0001d8e02) returned 1
	[0215.898] SetEvent (hEvent=0xe4) returned 1
	[0215.898] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053380 | out: pbBuffer=0xc000053380) returned 1
	[0215.898] GetFileType (hFile=0xe8) returned 0x1
	[0215.899] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3008) returned 1
	[0215.899] WriteFile (in: hFile=0xe8, lpBuffer=0xc000250000*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000250000*, lpNumberOfBytesWritten=0xc000155ccc*=0xbc0, lpOverlapped=0xc000155ce8) returned 1
	[0215.899] GetFileType (hFile=0xe8) returned 0x1
	[0215.899] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbc0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3008) returned 1
	[0215.899] GetFileType (hFile=0xe8) returned 0x1
	[0215.900] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3008) returned 1
	[0215.900] WriteFile (in: hFile=0xe8, lpBuffer=0xc000235500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000235500*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0215.900] GetFileType (hFile=0xe8) returned 0x1
	[0215.900] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0xbc0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3008) returned 1
	[0215.900] CloseHandle (hObject=0xe8) returned 1
	[0215.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf.egmwv")) returned 0x20
	[0215.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0215.906] SwitchToThread () returned 1
	[0215.909] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.914] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.946] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.965] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.976] SetEvent (hEvent=0x104) returned 1
	[0215.976] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.981] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0215.993] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.018] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.036] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.051] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.066] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.090] SetEvent (hEvent=0xe4) returned 1
	[0216.091] SetEvent (hEvent=0x90) returned 1
	[0216.091] SetEvent (hEvent=0x124) returned 1
	[0216.091] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x0
	[0216.095] SetEvent (hEvent=0x124) returned 1
	[0216.095] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0216.107] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.107] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.769] SetEvent (hEvent=0x104) returned 1
	[0216.769] SetEvent (hEvent=0x90) returned 1
	[0216.769] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0216.996] SetEvent (hEvent=0xc4) returned 1
	[0216.996] SetEvent (hEvent=0x104) returned 1
	[0216.996] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0217.177] SetEvent (hEvent=0x104) returned 1
	[0217.177] SetEvent (hEvent=0xc4) returned 1
	[0217.177] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0217.509] SetEvent (hEvent=0xc4) returned 1
	[0217.509] SetEvent (hEvent=0x104) returned 1
	[0217.509] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0217.967] SetEvent (hEvent=0x104) returned 1
	[0217.967] SetEvent (hEvent=0xc4) returned 1
	[0217.967] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0218.200] SetEvent (hEvent=0x104) returned 1
	[0218.200] SetEvent (hEvent=0x120) returned 1
	[0218.200] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0218.415] SetEvent (hEvent=0x104) returned 1
	[0218.416] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.076] SetEvent (hEvent=0x90) returned 1
	[0219.077] SetEvent (hEvent=0xe4) returned 1
	[0219.077] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.088] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.213] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.215] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.217] SetEvent (hEvent=0xe4) returned 1
	[0219.217] SetEvent (hEvent=0x104) returned 1
	[0219.217] SwitchToThread () returned 1
	[0219.219] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.230] SetEvent (hEvent=0x104) returned 1
	[0219.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf")) returned 0x20
	[0219.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF", dwFileAttributes=0x20) returned 1
	[0219.231] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.252] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0219.252] ReadFile (in: hFile=0xcc, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x35bc, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc0002d7cec*=0x35bc, lpOverlapped=0x0) returned 1
	[0219.258] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0219.258] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0219.258] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0219.258] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0219.258] GetFileType (hFile=0xcc) returned 0x1
	[0219.258] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=13756) returned 1
	[0219.259] WriteFile (in: hFile=0xcc, lpBuffer=0xc000364000*, nNumberOfBytesToWrite=0x35bc, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc000364000*, lpNumberOfBytesWritten=0xc000465ccc*=0x35bc, lpOverlapped=0xc000465ce8) returned 1
	[0219.259] GetFileType (hFile=0xcc) returned 0x1
	[0219.259] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x35bc, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=13756) returned 1
	[0219.259] GetFileType (hFile=0xcc) returned 0x1
	[0219.259] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000465ca0*=13756) returned 1
	[0219.260] WriteFile (in: hFile=0xcc, lpBuffer=0xc00027b500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000465ccc, lpOverlapped=0xc000465ce8 | out: lpBuffer=0xc00027b500*, lpNumberOfBytesWritten=0xc000465ccc*=0x233, lpOverlapped=0xc000465ce8) returned 1
	[0219.260] GetFileType (hFile=0xcc) returned 0x1
	[0219.260] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x35bc, lpNewFilePointer=0xc000465ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000465ca0*=13756) returned 1
	[0219.260] CloseHandle (hObject=0xcc) returned 1
	[0219.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf.egmwv")) returned 0x20
	[0219.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.263] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.276] SetEvent (hEvent=0x104) returned 1
	[0219.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf")) returned 0x20
	[0219.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF", dwFileAttributes=0x20) returned 1
	[0219.278] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc
	[0219.317] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0xc0002f5cc4 | out: lpMode=0xc0002f5cc4) returned 0
	[0219.318] ReadFile (in: hFile=0xcc, lpBuffer=0xc00034e000, nNumberOfBytesToRead=0x27b4, lpNumberOfBytesRead=0xc0002f5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034e000*, lpNumberOfBytesRead=0xc0002f5cec*=0x27b4, lpOverlapped=0x0) returned 1
	[0219.325] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8110 | out: pbBuffer=0xc0001d8110) returned 1
	[0219.325] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000326a02 | out: pbBuffer=0xc000326a02) returned 1
	[0219.325] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8150 | out: pbBuffer=0xc0001d8150) returned 1
	[0219.325] GetFileType (hFile=0xcc) returned 0x1
	[0219.325] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=10164) returned 1
	[0219.326] WriteFile (in: hFile=0xcc, lpBuffer=0xc000240000*, nNumberOfBytesToWrite=0x27b4, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc000240000*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x27b4, lpOverlapped=0xc0002a5ce8) returned 1
	[0219.327] GetFileType (hFile=0xcc) returned 0x1
	[0219.327] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x27b4, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=10164) returned 1
	[0219.327] GetFileType (hFile=0xcc) returned 0x1
	[0219.327] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=10164) returned 1
	[0219.327] WriteFile (in: hFile=0xcc, lpBuffer=0xc0002ab500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc0002ab500*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x230, lpOverlapped=0xc0002a5ce8) returned 1
	[0219.328] GetFileType (hFile=0xcc) returned 0x1
	[0219.328] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x27b4, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=10164) returned 1
	[0219.328] CloseHandle (hObject=0xcc) returned 1
	[0219.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf.egmwv")) returned 0x20
	[0219.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.331] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.334] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.337] SetEvent (hEvent=0x124) returned 1
	[0219.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf")) returned 0x20
	[0219.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF", dwFileAttributes=0x20) returned 1
	[0219.338] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0219.366] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0xc0002f1cc4 | out: lpMode=0xc0002f1cc4) returned 0
	[0219.366] ReadFile (in: hFile=0xe8, lpBuffer=0xc0003fe000, nNumberOfBytesToRead=0x1c0c, lpNumberOfBytesRead=0xc0002f1cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003fe000*, lpNumberOfBytesRead=0xc0002f1cec*=0x1c0c, lpOverlapped=0x0) returned 1
	[0219.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82b0 | out: pbBuffer=0xc0001d82b0) returned 1
	[0219.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d82ca | out: pbBuffer=0xc0001d82ca) returned 1
	[0219.372] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000327802 | out: pbBuffer=0xc000327802) returned 1
	[0219.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d82f0 | out: pbBuffer=0xc0001d82f0) returned 1
	[0219.372] GetFileType (hFile=0xe8) returned 0x1
	[0219.372] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=7180) returned 1
	[0219.372] WriteFile (in: hFile=0xe8, lpBuffer=0xc0000e8000*, nNumberOfBytesToWrite=0x1c0c, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc0000e8000*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x1c0c, lpOverlapped=0xc0002a5ce8) returned 1
	[0219.373] GetFileType (hFile=0xe8) returned 0x1
	[0219.373] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1c0c, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=7180) returned 1
	[0219.373] GetFileType (hFile=0xe8) returned 0x1
	[0219.373] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=7180) returned 1
	[0219.374] WriteFile (in: hFile=0xe8, lpBuffer=0xc00040ae00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc00040ae00*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x227, lpOverlapped=0xc0002a5ce8) returned 1
	[0219.374] GetFileType (hFile=0xe8) returned 0x1
	[0219.374] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1c0c, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=7180) returned 1
	[0219.374] CloseHandle (hObject=0xe8) returned 1
	[0219.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf.egmwv")) returned 0x20
	[0219.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0219.378] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0219.383] SetEvent (hEvent=0x124) returned 1
	[0219.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf")) returned 0x20
	[0219.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF", dwFileAttributes=0x20) returned 1
	[0219.385] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf.egmwv"), dwFlags=0x1) returned 1
	[0219.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0219.422] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0xc0002f3cc4 | out: lpMode=0xc0002f3cc4) returned 0
	[0219.422] ReadFile (in: hFile=0xa8, lpBuffer=0xc0002f6000, nNumberOfBytesToRead=0x7a46, lpNumberOfBytesRead=0xc0002f3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f6000*, lpNumberOfBytesRead=0xc0002f3cec*=0x7a46, lpOverlapped=0x0) returned 1
	[0219.762] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8440 | out: pbBuffer=0xc0001d8440) returned 1
	[0219.762] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000202602 | out: pbBuffer=0xc000202602) returned 1
	[0219.762] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0001d8480 | out: pbBuffer=0xc0001d8480) returned 1
	[0219.762] GetFileType (hFile=0xa8) returned 0x1
	[0219.762] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=31302) returned 1
	[0219.762] WriteFile (in: hFile=0xa8, lpBuffer=0xc0003b4000*, nNumberOfBytesToWrite=0x7a46, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc0003b4000*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x7a46, lpOverlapped=0xc0002a5ce8) returned 1
	[0219.763] GetFileType (hFile=0xa8) returned 0x1
	[0219.763] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7a46, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=31302) returned 1
	[0219.763] GetFileType (hFile=0xa8) returned 0x1
	[0219.763] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002a5ca0*=31302) returned 1
	[0219.764] WriteFile (in: hFile=0xa8, lpBuffer=0xc000308700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0002a5ccc, lpOverlapped=0xc0002a5ce8 | out: lpBuffer=0xc000308700*, lpNumberOfBytesWritten=0xc0002a5ccc*=0x230, lpOverlapped=0xc0002a5ce8) returned 1
	[0219.764] GetFileType (hFile=0xa8) returned 0x1
	[0219.764] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x7a46, lpNewFilePointer=0xc0002a5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002a5ca0*=31302) returned 1
	[0219.764] CloseHandle (hObject=0xa8) returned 1
	[0220.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf.egmwv")) returned 0x20
	[0220.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0220.476] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0220.523] SetEvent (hEvent=0xe4) returned 1
	[0220.524] SetEvent (hEvent=0x120) returned 1
	[0220.525] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0220.535] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0220.536] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0220.545] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0220.545] SetEvent (hEvent=0xe4) returned 1
	[0220.545] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x1) returned 0x102
	[0220.634] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0
	[0220.634] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) 

Thread:
	id = 45
	os_tid = 0xabc

	[0119.209] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x608feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x608feb0*=0x154) returned 1
	[0119.209] VirtualQuery (in: lpAddress=0x608fed0, lpBuffer=0x608fed0, dwLength=0x30 | out: lpBuffer=0x608fed0*(BaseAddress=0x608f000, AllocationBase=0x5e90000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0119.209] SetEvent (hEvent=0x14c) returned 1
	[0119.209] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x150
	[0119.209] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0119.214] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0201.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf")) returned 0x20
	[0201.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x20) returned 1
	[0201.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0201.918] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0201.918] ReadFile (in: hFile=0x17c, lpBuffer=0xc000444a80, nNumberOfBytesToRead=0x9bc, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000444a80*, lpNumberOfBytesRead=0xc000199cec*=0x9bc, lpOverlapped=0x0) returned 1
	[0201.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414d90 | out: pbBuffer=0xc000414d90) returned 1
	[0201.925] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000458c02 | out: pbBuffer=0xc000458c02) returned 1
	[0201.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000458c03 | out: pbBuffer=0xc000458c03) returned 1
	[0201.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000458c0f | out: pbBuffer=0xc000458c0f) returned 1
	[0201.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000458c77 | out: pbBuffer=0xc000458c77) returned 1
	[0201.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000458cc9 | out: pbBuffer=0xc000458cc9) returned 1
	[0201.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414dd0 | out: pbBuffer=0xc000414dd0) returned 1
	[0201.926] GetFileType (hFile=0x17c) returned 0x1
	[0201.926] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=2492) returned 1
	[0201.926] WriteFile (in: hFile=0x17c, lpBuffer=0xc000318000*, nNumberOfBytesToWrite=0x9bc, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc000318000*, lpNumberOfBytesWritten=0xc000353ccc*=0x9bc, lpOverlapped=0xc000353ce8) returned 1
	[0201.926] GetFileType (hFile=0x17c) returned 0x1
	[0201.927] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9bc, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=2492) returned 1
	[0201.927] GetFileType (hFile=0x17c) returned 0x1
	[0201.927] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=2492) returned 1
	[0201.927] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003a5c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc0003a5c00*, lpNumberOfBytesWritten=0xc000353ccc*=0x22d, lpOverlapped=0xc000353ce8) returned 1
	[0201.928] GetFileType (hFile=0x17c) returned 0x1
	[0201.928] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9bc, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=2492) returned 1
	[0201.928] CloseHandle (hObject=0x17c) returned 1
	[0201.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf.egmwv")) returned 0x20
	[0201.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.932] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0201.936] SetEvent (hEvent=0x14c) returned 1
	[0201.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf")) returned 0x20
	[0201.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x20) returned 1
	[0201.938] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0201.964] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0201.964] ReadFile (in: hFile=0x164, lpBuffer=0xc0003acd80, nNumberOfBytesToRead=0xc9c, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003acd80*, lpNumberOfBytesRead=0xc000199cec*=0xc9c, lpOverlapped=0x0) returned 1
	[0201.971] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068f0 | out: pbBuffer=0xc0002068f0) returned 1
	[0201.971] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020690a | out: pbBuffer=0xc00020690a) returned 1
	[0201.971] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031aa02 | out: pbBuffer=0xc00031aa02) returned 1
	[0201.972] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206930 | out: pbBuffer=0xc000206930) returned 1
	[0201.972] GetFileType (hFile=0x164) returned 0x1
	[0201.972] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3228) returned 1
	[0201.973] WriteFile (in: hFile=0x164, lpBuffer=0xc000248000*, nNumberOfBytesToWrite=0xc9c, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000248000*, lpNumberOfBytesWritten=0xc000151ccc*=0xc9c, lpOverlapped=0xc000151ce8) returned 1
	[0201.973] GetFileType (hFile=0x164) returned 0x1
	[0201.973] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xc9c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3228) returned 1
	[0201.973] GetFileType (hFile=0x164) returned 0x1
	[0201.973] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3228) returned 1
	[0201.974] WriteFile (in: hFile=0x164, lpBuffer=0xc000242a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000242a80*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0201.974] GetFileType (hFile=0x164) returned 0x1
	[0201.974] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xc9c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3228) returned 1
	[0201.974] CloseHandle (hObject=0x164) returned 1
	[0201.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf.egmwv")) returned 0x20
	[0201.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.980] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0201.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf")) returned 0x20
	[0201.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x20) returned 1
	[0201.987] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.029] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00015fcc4 | out: lpMode=0xc00015fcc4) returned 0
	[0202.029] ReadFile (in: hFile=0xe0, lpBuffer=0xc000416000, nNumberOfBytesToRead=0x138c, lpNumberOfBytesRead=0xc00015fcec, lpOverlapped=0x0 | out: lpBuffer=0xc000416000*, lpNumberOfBytesRead=0xc00015fcec*=0x138c, lpOverlapped=0x0) returned 1
	[0202.034] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0202.034] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0202.034] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0202.034] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0202.034] GetFileType (hFile=0xe0) returned 0x1
	[0202.035] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=5004) returned 1
	[0202.035] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001a0000*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0001a0000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x138c, lpOverlapped=0xc0000dbce8) returned 1
	[0202.035] GetFileType (hFile=0xe0) returned 0x1
	[0202.036] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x138c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=5004) returned 1
	[0202.036] GetFileType (hFile=0xe0) returned 0x1
	[0202.036] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=5004) returned 1
	[0202.036] WriteFile (in: hFile=0xe0, lpBuffer=0xc000157500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc000157500*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22a, lpOverlapped=0xc0000dbce8) returned 1
	[0202.036] GetFileType (hFile=0xe0) returned 0x1
	[0202.036] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x138c, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=5004) returned 1
	[0202.037] CloseHandle (hObject=0xe0) returned 1
	[0202.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf.egmwv")) returned 0x20
	[0202.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.040] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x20
	[0202.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x20) returned 1
	[0202.069] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.122] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.122] ReadFile (in: hFile=0x17c, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0x6906, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc00016bcec*=0x6906, lpOverlapped=0x0) returned 1
	[0202.129] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ea0 | out: pbBuffer=0xc000052ea0) returned 1
	[0202.129] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eba | out: pbBuffer=0xc000052eba) returned 1
	[0202.129] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000234f02 | out: pbBuffer=0xc000234f02) returned 1
	[0202.130] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000234f8c | out: pbBuffer=0xc000234f8c) returned 1
	[0202.130] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ee0 | out: pbBuffer=0xc000052ee0) returned 1
	[0202.130] GetFileType (hFile=0x17c) returned 0x1
	[0202.130] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=26886) returned 1
	[0202.131] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002c8000*, nNumberOfBytesToWrite=0x6906, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesWritten=0xc0000dbccc*=0x6906, lpOverlapped=0xc0000dbce8) returned 1
	[0202.131] GetFileType (hFile=0x17c) returned 0x1
	[0202.131] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x6906, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=26886) returned 1
	[0202.131] GetFileType (hFile=0x17c) returned 0x1
	[0202.131] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000dbca0*=26886) returned 1
	[0202.132] WriteFile (in: hFile=0x17c, lpBuffer=0xc00022a700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000dbccc, lpOverlapped=0xc0000dbce8 | out: lpBuffer=0xc00022a700*, lpNumberOfBytesWritten=0xc0000dbccc*=0x22a, lpOverlapped=0xc0000dbce8) returned 1
	[0202.132] GetFileType (hFile=0x17c) returned 0x1
	[0202.132] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x6906, lpNewFilePointer=0xc0000dbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000dbca0*=26886) returned 1
	[0202.132] CloseHandle (hObject=0x17c) returned 1
	[0202.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf.egmwv")) returned 0x20
	[0202.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.136] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.139] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.152] SetEvent (hEvent=0x15c) returned 1
	[0202.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x20
	[0202.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x20) returned 1
	[0202.154] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.184] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0202.185] ReadFile (in: hFile=0x164, lpBuffer=0xc0004bc000, nNumberOfBytesToRead=0x57f4, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc0004bc000*, lpNumberOfBytesRead=0xc00016bcec*=0x57f4, lpOverlapped=0x0) returned 1
	[0202.192] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0202.192] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001502 | out: pbBuffer=0xc000001502) returned 1
	[0202.192] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001516 | out: pbBuffer=0xc000001516) returned 1
	[0202.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001539 | out: pbBuffer=0xc000001539) returned 1
	[0202.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0202.193] GetFileType (hFile=0x164) returned 0x1
	[0202.193] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040fca0*=22516) returned 1
	[0202.193] WriteFile (in: hFile=0x164, lpBuffer=0xc0000fa000*, nNumberOfBytesToWrite=0x57f4, lpNumberOfBytesWritten=0xc00040fccc, lpOverlapped=0xc00040fce8 | out: lpBuffer=0xc0000fa000*, lpNumberOfBytesWritten=0xc00040fccc*=0x57f4, lpOverlapped=0xc00040fce8) returned 1
	[0202.194] GetFileType (hFile=0x164) returned 0x1
	[0202.194] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x57f4, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040fca0*=22516) returned 1
	[0202.194] GetFileType (hFile=0x164) returned 0x1
	[0202.194] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040fca0*=22516) returned 1
	[0202.194] WriteFile (in: hFile=0x164, lpBuffer=0xc00043b500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00040fccc, lpOverlapped=0xc00040fce8 | out: lpBuffer=0xc00043b500*, lpNumberOfBytesWritten=0xc00040fccc*=0x236, lpOverlapped=0xc00040fce8) returned 1
	[0202.195] GetFileType (hFile=0x164) returned 0x1
	[0202.195] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x57f4, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040fca0*=22516) returned 1
	[0202.195] CloseHandle (hObject=0x164) returned 1
	[0202.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf.egmwv")) returned 0x20
	[0202.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.198] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.201] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.204] SetEvent (hEvent=0x15c) returned 1
	[0202.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x20
	[0202.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x20) returned 1
	[0202.205] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.239] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0202.239] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003d0000, nNumberOfBytesToRead=0x3ef0, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003d0000*, lpNumberOfBytesRead=0xc000169cec*=0x3ef0, lpOverlapped=0x0) returned 1
	[0202.244] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0202.245] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001e2202 | out: pbBuffer=0xc0001e2202) returned 1
	[0202.245] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0202.245] GetFileType (hFile=0x17c) returned 0x1
	[0202.245] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040fca0*=16112) returned 1
	[0202.245] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002e4000*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0xc00040fccc, lpOverlapped=0xc00040fce8 | out: lpBuffer=0xc0002e4000*, lpNumberOfBytesWritten=0xc00040fccc*=0x3ef0, lpOverlapped=0xc00040fce8) returned 1
	[0202.246] GetFileType (hFile=0x17c) returned 0x1
	[0202.246] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x3ef0, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040fca0*=16112) returned 1
	[0202.246] GetFileType (hFile=0x17c) returned 0x1
	[0202.246] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040fca0*=16112) returned 1
	[0202.246] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001e0e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00040fccc, lpOverlapped=0xc00040fce8 | out: lpBuffer=0xc0001e0e00*, lpNumberOfBytesWritten=0xc00040fccc*=0x233, lpOverlapped=0xc00040fce8) returned 1
	[0202.247] GetFileType (hFile=0x17c) returned 0x1
	[0202.247] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x3ef0, lpNewFilePointer=0xc00040fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040fca0*=16112) returned 1
	[0202.247] CloseHandle (hObject=0x17c) returned 1
	[0202.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf.egmwv")) returned 0x20
	[0202.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.252] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x20
	[0202.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x20) returned 1
	[0202.260] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.300] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0202.300] ReadFile (in: hFile=0xe0, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x133c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc00038dcec*=0x133c, lpOverlapped=0x0) returned 1
	[0202.306] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414100 | out: pbBuffer=0xc000414100) returned 1
	[0202.306] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041411a | out: pbBuffer=0xc00041411a) returned 1
	[0202.306] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0202.306] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000128b | out: pbBuffer=0xc00000128b) returned 1
	[0202.306] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414140 | out: pbBuffer=0xc000414140) returned 1
	[0202.307] GetFileType (hFile=0xe0) returned 0x1
	[0202.307] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014dca0*=4924) returned 1
	[0202.307] WriteFile (in: hFile=0xe0, lpBuffer=0xc000212000*, nNumberOfBytesToWrite=0x133c, lpNumberOfBytesWritten=0xc00014dccc, lpOverlapped=0xc00014dce8 | out: lpBuffer=0xc000212000*, lpNumberOfBytesWritten=0xc00014dccc*=0x133c, lpOverlapped=0xc00014dce8) returned 1
	[0202.307] GetFileType (hFile=0xe0) returned 0x1
	[0202.307] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x133c, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014dca0*=4924) returned 1
	[0202.308] GetFileType (hFile=0xe0) returned 0x1
	[0202.308] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014dca0*=4924) returned 1
	[0202.308] WriteFile (in: hFile=0xe0, lpBuffer=0xc000417500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00014dccc, lpOverlapped=0xc00014dce8 | out: lpBuffer=0xc000417500*, lpNumberOfBytesWritten=0xc00014dccc*=0x22d, lpOverlapped=0xc00014dce8) returned 1
	[0202.308] GetFileType (hFile=0xe0) returned 0x1
	[0202.308] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x133c, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014dca0*=4924) returned 1
	[0202.308] CloseHandle (hObject=0xe0) returned 1
	[0202.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf.egmwv")) returned 0x20
	[0202.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.312] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x20
	[0202.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x20) returned 1
	[0202.330] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.348] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0202.365] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0202.365] ReadFile (in: hFile=0x174, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x60ca, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc00038dcec*=0x60ca, lpOverlapped=0x0) returned 1
	[0202.371] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0202.371] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0202.371] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f15 | out: pbBuffer=0xc000214f15) returned 1
	[0202.371] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f1a | out: pbBuffer=0xc000214f1a) returned 1
	[0202.372] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0202.372] GetFileType (hFile=0x174) returned 0x1
	[0202.372] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000071ca0*=24778) returned 1
	[0202.372] WriteFile (in: hFile=0x174, lpBuffer=0xc00034e000*, nNumberOfBytesToWrite=0x60ca, lpNumberOfBytesWritten=0xc000071ccc, lpOverlapped=0xc000071ce8 | out: lpBuffer=0xc00034e000*, lpNumberOfBytesWritten=0xc000071ccc*=0x60ca, lpOverlapped=0xc000071ce8) returned 1
	[0202.373] GetFileType (hFile=0x174) returned 0x1
	[0202.373] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x60ca, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000071ca0*=24778) returned 1
	[0202.373] GetFileType (hFile=0x174) returned 0x1
	[0202.374] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000071ca0*=24778) returned 1
	[0202.374] WriteFile (in: hFile=0x174, lpBuffer=0xc0002c3500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000071ccc, lpOverlapped=0xc000071ce8 | out: lpBuffer=0xc0002c3500*, lpNumberOfBytesWritten=0xc000071ccc*=0x22a, lpOverlapped=0xc000071ce8) returned 1
	[0202.374] GetFileType (hFile=0x174) returned 0x1
	[0202.374] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x60ca, lpNewFilePointer=0xc000071ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000071ca0*=24778) returned 1
	[0202.374] CloseHandle (hObject=0x174) returned 1
	[0202.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf.egmwv")) returned 0x20
	[0202.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.378] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.403] SetEvent (hEvent=0xc8) returned 1
	[0202.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x20
	[0202.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x20) returned 1
	[0202.405] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.435] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000163cc4 | out: lpMode=0xc000163cc4) returned 0
	[0202.435] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000e2000, nNumberOfBytesToRead=0xbaaa, lpNumberOfBytesRead=0xc000163cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e2000*, lpNumberOfBytesRead=0xc000163cec*=0xbaaa, lpOverlapped=0x0) returned 1
	[0202.441] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0202.441] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041446a | out: pbBuffer=0xc00041446a) returned 1
	[0202.441] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000125a02 | out: pbBuffer=0xc000125a02) returned 1
	[0202.441] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414490 | out: pbBuffer=0xc000414490) returned 1
	[0202.442] GetFileType (hFile=0x17c) returned 0x1
	[0202.442] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014dca0*=47786) returned 1
	[0202.442] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003fe000*, nNumberOfBytesToWrite=0xbaaa, lpNumberOfBytesWritten=0xc00014dccc, lpOverlapped=0xc00014dce8 | out: lpBuffer=0xc0003fe000*, lpNumberOfBytesWritten=0xc00014dccc*=0xbaaa, lpOverlapped=0xc00014dce8) returned 1
	[0202.443] GetFileType (hFile=0x17c) returned 0x1
	[0202.443] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xbaaa, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014dca0*=47786) returned 1
	[0202.443] GetFileType (hFile=0x17c) returned 0x1
	[0202.443] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014dca0*=47786) returned 1
	[0202.443] WriteFile (in: hFile=0x17c, lpBuffer=0xc000346700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00014dccc, lpOverlapped=0xc00014dce8 | out: lpBuffer=0xc000346700*, lpNumberOfBytesWritten=0xc00014dccc*=0x236, lpOverlapped=0xc00014dce8) returned 1
	[0202.443] GetFileType (hFile=0x17c) returned 0x1
	[0202.444] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xbaaa, lpNewFilePointer=0xc00014dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014dca0*=47786) returned 1
	[0202.444] CloseHandle (hObject=0x17c) returned 1
	[0202.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf.egmwv")) returned 0x20
	[0202.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.446] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.458] SetEvent (hEvent=0xc8) returned 1
	[0202.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x20
	[0202.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x20) returned 1
	[0202.459] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.501] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0202.501] ReadFile (in: hFile=0x164, lpBuffer=0xc000262000, nNumberOfBytesToRead=0x1f1e, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000262000*, lpNumberOfBytesRead=0xc00038dcec*=0x1f1e, lpOverlapped=0x0) returned 1
	[0202.506] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0202.506] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0202.506] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001081 | out: pbBuffer=0xc000001081) returned 1
	[0202.506] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0202.506] GetFileType (hFile=0x164) returned 0x1
	[0202.506] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=7966) returned 1
	[0202.507] WriteFile (in: hFile=0x164, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x1f1e, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x1f1e, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.507] GetFileType (hFile=0x164) returned 0x1
	[0202.507] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1f1e, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=7966) returned 1
	[0202.507] GetFileType (hFile=0x164) returned 0x1
	[0202.507] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=7966) returned 1
	[0202.507] WriteFile (in: hFile=0x164, lpBuffer=0xc0003d2e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0003d2e00*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x233, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.508] GetFileType (hFile=0x164) returned 0x1
	[0202.508] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1f1e, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=7966) returned 1
	[0202.508] CloseHandle (hObject=0x164) returned 1
	[0202.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf.egmwv")) returned 0x20
	[0202.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.511] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.514] SetEvent (hEvent=0xe4) returned 1
	[0202.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif")) returned 0x20
	[0202.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x20) returned 1
	[0202.515] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.egmwv"), dwFlags=0x1) returned 1
	[0202.554] SetEvent (hEvent=0x70) returned 1
	[0202.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0202.556] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0202.556] ReadFile (in: hFile=0x17c, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x4fe6, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc000387cec*=0x4fe6, lpOverlapped=0x0) returned 1
	[0202.561] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d20 | out: pbBuffer=0xc000052d20) returned 1
	[0202.561] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1902 | out: pbBuffer=0xc0002c1902) returned 1
	[0202.561] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d60 | out: pbBuffer=0xc000052d60) returned 1
	[0202.562] GetFileType (hFile=0x17c) returned 0x1
	[0202.562] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=20454) returned 1
	[0202.562] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002ae000*, nNumberOfBytesToWrite=0x4fe6, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0002ae000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x4fe6, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.563] GetFileType (hFile=0x17c) returned 0x1
	[0202.563] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x4fe6, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=20454) returned 1
	[0202.563] GetFileType (hFile=0x17c) returned 0x1
	[0202.563] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=20454) returned 1
	[0202.563] WriteFile (in: hFile=0x17c, lpBuffer=0xc000070e00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc000070e00*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x236, lpOverlapped=0xc0004a3ce8) returned 1
	[0202.564] GetFileType (hFile=0x17c) returned 0x1
	[0202.564] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x4fe6, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=20454) returned 1
	[0202.564] CloseHandle (hObject=0x17c) returned 1
	[0202.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.egmwv")) returned 0x20
	[0202.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.567] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x20
	[0202.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x20) returned 1
	[0202.582] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.611] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0202.611] ReadFile (in: hFile=0x164, lpBuffer=0xc0001ac000, nNumberOfBytesToRead=0x25ee, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac000*, lpNumberOfBytesRead=0xc000429cec*=0x25ee, lpOverlapped=0x0) returned 1
	[0202.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0202.617] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0202.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f54 | out: pbBuffer=0xc000001f54) returned 1
	[0202.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001fa9 | out: pbBuffer=0xc000001fa9) returned 1
	[0202.617] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0202.617] GetFileType (hFile=0x164) returned 0x1
	[0202.617] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=9710) returned 1
	[0202.618] WriteFile (in: hFile=0x164, lpBuffer=0xc0000ae000*, nNumberOfBytesToWrite=0x25ee, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0000ae000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x25ee, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.618] GetFileType (hFile=0x164) returned 0x1
	[0202.618] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x25ee, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=9710) returned 1
	[0202.618] GetFileType (hFile=0x164) returned 0x1
	[0202.618] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=9710) returned 1
	[0202.619] WriteFile (in: hFile=0x164, lpBuffer=0xc0001c4700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0001c4700*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x233, lpOverlapped=0xc0004a7ce8) returned 1
	[0202.619] GetFileType (hFile=0x164) returned 0x1
	[0202.619] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x25ee, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=9710) returned 1
	[0202.619] CloseHandle (hObject=0x164) returned 1
	[0202.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf.egmwv")) returned 0x20
	[0202.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.622] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.636] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.645] SetEvent (hEvent=0xe4) returned 1
	[0202.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x20
	[0202.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x20) returned 1
	[0202.648] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0202.680] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0202.681] ReadFile (in: hFile=0x164, lpBuffer=0xc00043c000, nNumberOfBytesToRead=0x4780, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc00043c000*, lpNumberOfBytesRead=0xc000199cec*=0x4780, lpOverlapped=0x0) returned 1
	[0202.689] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0202.689] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215402 | out: pbBuffer=0xc000215402) returned 1
	[0202.689] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0202.690] GetFileType (hFile=0x164) returned 0x1
	[0202.690] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=18304) returned 1
	[0202.690] WriteFile (in: hFile=0x164, lpBuffer=0xc0000f4000*, nNumberOfBytesToWrite=0x4780, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesWritten=0xc000151ccc*=0x4780, lpOverlapped=0xc000151ce8) returned 1
	[0202.691] GetFileType (hFile=0x164) returned 0x1
	[0202.691] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4780, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=18304) returned 1
	[0202.691] GetFileType (hFile=0x164) returned 0x1
	[0202.691] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=18304) returned 1
	[0202.692] WriteFile (in: hFile=0x164, lpBuffer=0xc00013f500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00013f500*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0202.692] GetFileType (hFile=0x164) returned 0x1
	[0202.692] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4780, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=18304) returned 1
	[0202.692] CloseHandle (hObject=0x164) returned 1
	[0202.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf.egmwv")) returned 0x20
	[0202.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.695] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.698] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.703] SetEvent (hEvent=0xe4) returned 1
	[0202.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x20
	[0202.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x20) returned 1
	[0202.704] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.741] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0202.741] SetEvent (hEvent=0x14c) returned 1
	[0202.741] ReadFile (in: hFile=0xe0, lpBuffer=0xc0002fe000, nNumberOfBytesToRead=0x265a, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002fe000*, lpNumberOfBytesRead=0xc000169cec*=0x265a, lpOverlapped=0x0) returned 1
	[0202.751] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0202.751] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00031a102 | out: pbBuffer=0xc00031a102) returned 1
	[0202.752] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00031a127 | out: pbBuffer=0xc00031a127) returned 1
	[0202.752] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0202.752] GetFileType (hFile=0xe0) returned 0x1
	[0202.752] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=9818) returned 1
	[0202.753] WriteFile (in: hFile=0xe0, lpBuffer=0xc00033e000*, nNumberOfBytesToWrite=0x265a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00033e000*, lpNumberOfBytesWritten=0xc000151ccc*=0x265a, lpOverlapped=0xc000151ce8) returned 1
	[0202.753] GetFileType (hFile=0xe0) returned 0x1
	[0202.753] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x265a, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=9818) returned 1
	[0202.754] GetFileType (hFile=0xe0) returned 0x1
	[0202.754] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=9818) returned 1
	[0202.754] WriteFile (in: hFile=0xe0, lpBuffer=0xc000318e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000318e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0202.754] GetFileType (hFile=0xe0) returned 0x1
	[0202.754] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x265a, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=9818) returned 1
	[0202.754] CloseHandle (hObject=0xe0) returned 1
	[0202.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf.egmwv")) returned 0x20
	[0202.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.768] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.771] SetEvent (hEvent=0x15c) returned 1
	[0202.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x20
	[0202.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x20) returned 1
	[0202.773] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.804] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0202.804] ReadFile (in: hFile=0xe0, lpBuffer=0xc00019c000, nNumberOfBytesToRead=0x370, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00019c000*, lpNumberOfBytesRead=0xc00016dcec*=0x370, lpOverlapped=0x0) returned 1
	[0202.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0202.810] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0202.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214dc5 | out: pbBuffer=0xc000214dc5) returned 1
	[0202.810] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0202.810] GetFileType (hFile=0xe0) returned 0x1
	[0202.810] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=880) returned 1
	[0202.810] WriteFile (in: hFile=0xe0, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc000175ccc*=0x370, lpOverlapped=0xc000175ce8) returned 1
	[0202.811] GetFileType (hFile=0xe0) returned 0x1
	[0202.811] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x370, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=880) returned 1
	[0202.812] GetFileType (hFile=0xe0) returned 0x1
	[0202.812] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000175ca0*=880) returned 1
	[0202.812] WriteFile (in: hFile=0xe0, lpBuffer=0xc00019d880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000175ccc, lpOverlapped=0xc000175ce8 | out: lpBuffer=0xc00019d880*, lpNumberOfBytesWritten=0xc000175ccc*=0x227, lpOverlapped=0xc000175ce8) returned 1
	[0202.812] GetFileType (hFile=0xe0) returned 0x1
	[0202.812] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x370, lpNewFilePointer=0xc000175ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000175ca0*=880) returned 1
	[0202.813] CloseHandle (hObject=0xe0) returned 1
	[0202.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf.egmwv")) returned 0x20
	[0202.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.817] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.819] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.832] SetEvent (hEvent=0x15c) returned 1
	[0202.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x20
	[0202.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x20) returned 1
	[0202.835] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0202.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0202.861] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0202.862] ReadFile (in: hFile=0xe0, lpBuffer=0xc00006c000, nNumberOfBytesToRead=0x6a0, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00006c000*, lpNumberOfBytesRead=0xc00016dcec*=0x6a0, lpOverlapped=0x0) returned 1
	[0202.868] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0202.868] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039702 | out: pbBuffer=0xc000039702) returned 1
	[0202.868] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0202.868] GetFileType (hFile=0xe0) returned 0x1
	[0202.869] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1696) returned 1
	[0202.869] WriteFile (in: hFile=0xe0, lpBuffer=0xc000117000*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000117000*, lpNumberOfBytesWritten=0xc000151ccc*=0x6a0, lpOverlapped=0xc000151ce8) returned 1
	[0202.869] GetFileType (hFile=0xe0) returned 0x1
	[0202.869] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x6a0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1696) returned 1
	[0202.869] GetFileType (hFile=0xe0) returned 0x1
	[0202.870] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1696) returned 1
	[0202.870] WriteFile (in: hFile=0xe0, lpBuffer=0xc000395500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000395500*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0202.870] GetFileType (hFile=0xe0) returned 0x1
	[0202.870] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x6a0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1696) returned 1
	[0202.870] CloseHandle (hObject=0xe0) returned 1
	[0202.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf.egmwv")) returned 0x20
	[0202.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0202.877] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0202.882] SetEvent (hEvent=0x15c) returned 1
	[0202.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x20
	[0202.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x20) returned 1
	[0202.883] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.002] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0203.002] ReadFile (in: hFile=0x17c, lpBuffer=0xc000370000, nNumberOfBytesToRead=0x1f86, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000370000*, lpNumberOfBytesRead=0xc00016dcec*=0x1f86, lpOverlapped=0x0) returned 1
	[0203.008] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068f0 | out: pbBuffer=0xc0002068f0) returned 1
	[0203.008] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020690a | out: pbBuffer=0xc00020690a) returned 1
	[0203.008] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000124602 | out: pbBuffer=0xc000124602) returned 1
	[0203.008] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001246b2 | out: pbBuffer=0xc0001246b2) returned 1
	[0203.008] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206930 | out: pbBuffer=0xc000206930) returned 1
	[0203.009] GetFileType (hFile=0x17c) returned 0x1
	[0203.009] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=8070) returned 1
	[0203.009] WriteFile (in: hFile=0x17c, lpBuffer=0xc00034c000*, nNumberOfBytesToWrite=0x1f86, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc00034c000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x1f86, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.009] GetFileType (hFile=0x17c) returned 0x1
	[0203.009] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1f86, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=8070) returned 1
	[0203.010] GetFileType (hFile=0x17c) returned 0x1
	[0203.010] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=8070) returned 1
	[0203.010] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002a2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0002a2a80*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x230, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.011] GetFileType (hFile=0x17c) returned 0x1
	[0203.011] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1f86, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=8070) returned 1
	[0203.011] CloseHandle (hObject=0x17c) returned 1
	[0203.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf.egmwv")) returned 0x20
	[0203.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.016] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x20
	[0203.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x20) returned 1
	[0203.026] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.059] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0203.060] ReadFile (in: hFile=0x164, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x386c, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000425cec*=0x386c, lpOverlapped=0x0) returned 1
	[0203.066] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a70 | out: pbBuffer=0xc000206a70) returned 1
	[0203.066] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000125602 | out: pbBuffer=0xc000125602) returned 1
	[0203.067] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206ab0 | out: pbBuffer=0xc000206ab0) returned 1
	[0203.067] GetFileType (hFile=0x164) returned 0x1
	[0203.067] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=14444) returned 1
	[0203.067] WriteFile (in: hFile=0x164, lpBuffer=0xc0000ee000*, nNumberOfBytesToWrite=0x386c, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0000ee000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x386c, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.068] GetFileType (hFile=0x164) returned 0x1
	[0203.068] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x386c, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=14444) returned 1
	[0203.068] GetFileType (hFile=0x164) returned 0x1
	[0203.068] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=14444) returned 1
	[0203.068] WriteFile (in: hFile=0x164, lpBuffer=0xc0000ba380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0000ba380*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.068] GetFileType (hFile=0x164) returned 0x1
	[0203.069] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x386c, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=14444) returned 1
	[0203.069] CloseHandle (hObject=0x164) returned 1
	[0203.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf.egmwv")) returned 0x20
	[0203.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.073] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x20
	[0203.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x20) returned 1
	[0203.144] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.176] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0203.176] ReadFile (in: hFile=0x164, lpBuffer=0xc0000a2e00, nNumberOfBytesToRead=0x6c8, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000a2e00*, lpNumberOfBytesRead=0xc000425cec*=0x6c8, lpOverlapped=0x0) returned 1
	[0203.309] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0203.309] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000302b02 | out: pbBuffer=0xc000302b02) returned 1
	[0203.309] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0203.310] GetFileType (hFile=0x164) returned 0x1
	[0203.310] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=1736) returned 1
	[0203.310] WriteFile (in: hFile=0x164, lpBuffer=0xc0003be000*, nNumberOfBytesToWrite=0x6c8, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0003be000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x6c8, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.311] GetFileType (hFile=0x164) returned 0x1
	[0203.311] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x6c8, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=1736) returned 1
	[0203.311] GetFileType (hFile=0x164) returned 0x1
	[0203.311] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=1736) returned 1
	[0203.311] WriteFile (in: hFile=0x164, lpBuffer=0xc0003bae00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0003bae00*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x227, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.312] GetFileType (hFile=0x164) returned 0x1
	[0203.312] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x6c8, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=1736) returned 1
	[0203.312] CloseHandle (hObject=0x164) returned 1
	[0203.338] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf.egmwv")) returned 0x20
	[0203.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.360] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0203.360] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0203.360] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0203.361] GetFileType (hFile=0x170) returned 0x1
	[0203.361] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=3780) returned 1
	[0203.361] WriteFile (in: hFile=0x170, lpBuffer=0xc0004c4000*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0004c4000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0xec4, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.361] GetFileType (hFile=0x170) returned 0x1
	[0203.361] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xec4, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=3780) returned 1
	[0203.362] GetFileType (hFile=0x170) returned 0x1
	[0203.362] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=3780) returned 1
	[0203.362] WriteFile (in: hFile=0x170, lpBuffer=0xc00041e000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc00041e000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x22a, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.362] GetFileType (hFile=0x170) returned 0x1
	[0203.363] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xec4, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=3780) returned 1
	[0203.363] CloseHandle (hObject=0x170) returned 1
	[0203.368] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf.egmwv")) returned 0x20
	[0203.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.379] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x20
	[0203.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x20) returned 1
	[0203.412] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.442] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0203.442] ReadFile (in: hFile=0x168, lpBuffer=0xc000390000, nNumberOfBytesToRead=0x1b54, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000390000*, lpNumberOfBytesRead=0xc0002d3cec*=0x1b54, lpOverlapped=0x0) returned 1
	[0203.449] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0203.450] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020642a | out: pbBuffer=0xc00020642a) returned 1
	[0203.450] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0203.450] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d42 | out: pbBuffer=0xc0002c0d42) returned 1
	[0203.450] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0203.450] GetFileType (hFile=0x168) returned 0x1
	[0203.450] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=6996) returned 1
	[0203.450] WriteFile (in: hFile=0x168, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0x1b54, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x1b54, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.451] GetFileType (hFile=0x168) returned 0x1
	[0203.451] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1b54, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=6996) returned 1
	[0203.451] GetFileType (hFile=0x168) returned 0x1
	[0203.451] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=6996) returned 1
	[0203.451] WriteFile (in: hFile=0x168, lpBuffer=0xc00014b880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc00014b880*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x22d, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.452] GetFileType (hFile=0x168) returned 0x1
	[0203.452] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1b54, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=6996) returned 1
	[0203.452] CloseHandle (hObject=0x168) returned 1
	[0203.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf.egmwv")) returned 0x20
	[0203.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.455] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.462] SetEvent (hEvent=0xe4) returned 1
	[0203.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x20
	[0203.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x20) returned 1
	[0203.464] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.497] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0203.497] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000e5000, nNumberOfBytesToRead=0x2cec, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000e5000*, lpNumberOfBytesRead=0xc000193cec*=0x2cec, lpOverlapped=0x0) returned 1
	[0203.504] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065a0 | out: pbBuffer=0xc0002065a0) returned 1
	[0203.504] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065ba | out: pbBuffer=0xc0002065ba) returned 1
	[0203.504] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1a02 | out: pbBuffer=0xc0002c1a02) returned 1
	[0203.504] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1a34 | out: pbBuffer=0xc0002c1a34) returned 1
	[0203.504] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065e0 | out: pbBuffer=0xc0002065e0) returned 1
	[0203.504] GetFileType (hFile=0x17c) returned 0x1
	[0203.505] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=11500) returned 1
	[0203.505] WriteFile (in: hFile=0x17c, lpBuffer=0xc00043c000*, nNumberOfBytesToWrite=0x2cec, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc00043c000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x2cec, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.505] GetFileType (hFile=0x17c) returned 0x1
	[0203.506] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2cec, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=11500) returned 1
	[0203.506] GetFileType (hFile=0x17c) returned 0x1
	[0203.506] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=11500) returned 1
	[0203.507] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003d9180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc0003d9180*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x230, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.507] GetFileType (hFile=0x17c) returned 0x1
	[0203.507] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2cec, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=11500) returned 1
	[0203.507] CloseHandle (hObject=0x17c) returned 1
	[0203.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf.egmwv")) returned 0x20
	[0203.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.512] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.517] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.521] SetEvent (hEvent=0x90) returned 1
	[0203.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x20
	[0203.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x20) returned 1
	[0203.523] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.550] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000229cc4 | out: lpMode=0xc000229cc4) returned 0
	[0203.551] ReadFile (in: hFile=0x164, lpBuffer=0xc000475000, nNumberOfBytesToRead=0x4c14, lpNumberOfBytesRead=0xc000229cec, lpOverlapped=0x0 | out: lpBuffer=0xc000475000*, lpNumberOfBytesRead=0xc000229cec*=0x4c14, lpOverlapped=0x0) returned 1
	[0203.556] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206730 | out: pbBuffer=0xc000206730) returned 1
	[0203.556] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020674a | out: pbBuffer=0xc00020674a) returned 1
	[0203.557] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00015c602 | out: pbBuffer=0xc00015c602) returned 1
	[0203.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00015c651 | out: pbBuffer=0xc00015c651) returned 1
	[0203.557] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206770 | out: pbBuffer=0xc000206770) returned 1
	[0203.557] GetFileType (hFile=0x164) returned 0x1
	[0203.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=19476) returned 1
	[0203.557] WriteFile (in: hFile=0x164, lpBuffer=0xc000300000*, nNumberOfBytesToWrite=0x4c14, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000300000*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x4c14, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.558] GetFileType (hFile=0x164) returned 0x1
	[0203.558] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4c14, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=19476) returned 1
	[0203.558] GetFileType (hFile=0x164) returned 0x1
	[0203.559] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a7ca0*=19476) returned 1
	[0203.559] WriteFile (in: hFile=0x164, lpBuffer=0xc000162a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004a7ccc, lpOverlapped=0xc0004a7ce8 | out: lpBuffer=0xc000162a80*, lpNumberOfBytesWritten=0xc0004a7ccc*=0x227, lpOverlapped=0xc0004a7ce8) returned 1
	[0203.559] GetFileType (hFile=0x164) returned 0x1
	[0203.559] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4c14, lpNewFilePointer=0xc0004a7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a7ca0*=19476) returned 1
	[0203.559] CloseHandle (hObject=0x164) returned 1
	[0203.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf.egmwv")) returned 0x20
	[0203.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.563] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.570] SetEvent (hEvent=0xe4) returned 1
	[0203.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf")) returned 0x20
	[0203.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x20) returned 1
	[0203.573] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.617] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0203.617] ReadFile (in: hFile=0x168, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0x714c, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc000423cec*=0x714c, lpOverlapped=0x0) returned 1
	[0203.623] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0203.623] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0203.623] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0203.624] GetFileType (hFile=0x168) returned 0x1
	[0203.624] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=29004) returned 1
	[0203.624] WriteFile (in: hFile=0x168, lpBuffer=0xc000462000*, nNumberOfBytesToWrite=0x714c, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000462000*, lpNumberOfBytesWritten=0xc000151ccc*=0x714c, lpOverlapped=0xc000151ce8) returned 1
	[0203.625] GetFileType (hFile=0x168) returned 0x1
	[0203.625] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x714c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=29004) returned 1
	[0203.625] GetFileType (hFile=0x168) returned 0x1
	[0203.625] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=29004) returned 1
	[0203.626] WriteFile (in: hFile=0x168, lpBuffer=0xc0004e3880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004e3880*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0203.626] GetFileType (hFile=0x168) returned 0x1
	[0203.627] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x714c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=29004) returned 1
	[0203.627] CloseHandle (hObject=0x168) returned 1
	[0203.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf.egmwv")) returned 0x20
	[0203.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.631] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.650] SetEvent (hEvent=0x60) returned 1
	[0203.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x20
	[0203.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x20) returned 1
	[0203.654] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.679] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0203.679] ReadFile (in: hFile=0x168, lpBuffer=0xc00021a000, nNumberOfBytesToRead=0x1f26, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc00021a000*, lpNumberOfBytesRead=0xc000193cec*=0x1f26, lpOverlapped=0x0) returned 1
	[0203.686] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0203.686] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142aa | out: pbBuffer=0xc0004142aa) returned 1
	[0203.686] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214402 | out: pbBuffer=0xc000214402) returned 1
	[0203.686] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0203.686] GetFileType (hFile=0x168) returned 0x1
	[0203.686] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=7974) returned 1
	[0203.687] WriteFile (in: hFile=0x168, lpBuffer=0xc0003dc000*, nNumberOfBytesToWrite=0x1f26, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc0003dc000*, lpNumberOfBytesWritten=0xc0000ddccc*=0x1f26, lpOverlapped=0xc0000ddce8) returned 1
	[0203.687] GetFileType (hFile=0x168) returned 0x1
	[0203.687] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1f26, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=7974) returned 1
	[0203.687] GetFileType (hFile=0x168) returned 0x1
	[0203.687] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=7974) returned 1
	[0203.688] WriteFile (in: hFile=0x168, lpBuffer=0xc00028ce00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc00028ce00*, lpNumberOfBytesWritten=0xc0000ddccc*=0x230, lpOverlapped=0xc0000ddce8) returned 1
	[0203.688] GetFileType (hFile=0x168) returned 0x1
	[0203.688] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1f26, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=7974) returned 1
	[0203.689] CloseHandle (hObject=0x168) returned 1
	[0203.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf.egmwv")) returned 0x20
	[0203.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.692] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.697] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.707] SetEvent (hEvent=0x60) returned 1
	[0203.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x20
	[0203.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x20) returned 1
	[0203.711] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.736] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0203.737] ReadFile (in: hFile=0x168, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x876, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000193cec*=0x876, lpOverlapped=0x0) returned 1
	[0203.742] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b80 | out: pbBuffer=0xc000052b80) returned 1
	[0203.742] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039802 | out: pbBuffer=0xc000039802) returned 1
	[0203.742] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bc0 | out: pbBuffer=0xc000052bc0) returned 1
	[0203.742] GetFileType (hFile=0x168) returned 0x1
	[0203.742] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=2166) returned 1
	[0203.743] WriteFile (in: hFile=0x168, lpBuffer=0xc000372000*, nNumberOfBytesToWrite=0x876, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc000372000*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x876, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.743] GetFileType (hFile=0x168) returned 0x1
	[0203.743] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x876, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=2166) returned 1
	[0203.743] GetFileType (hFile=0x168) returned 0x1
	[0203.743] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=2166) returned 1
	[0203.743] WriteFile (in: hFile=0x168, lpBuffer=0xc000397500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc000397500*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x22a, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.744] GetFileType (hFile=0x168) returned 0x1
	[0203.744] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x876, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=2166) returned 1
	[0203.744] CloseHandle (hObject=0x168) returned 1
	[0203.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf.egmwv")) returned 0x20
	[0203.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.746] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x20
	[0203.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x20) returned 1
	[0203.759] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0203.795] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0203.795] ReadFile (in: hFile=0x164, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1370, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000193cec*=0x1370, lpOverlapped=0x0) returned 1
	[0203.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068d0 | out: pbBuffer=0xc0002068d0) returned 1
	[0203.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002068ea | out: pbBuffer=0xc0002068ea) returned 1
	[0203.802] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004bc902 | out: pbBuffer=0xc0004bc902) returned 1
	[0203.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004bc916 | out: pbBuffer=0xc0004bc916) returned 1
	[0203.802] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206910 | out: pbBuffer=0xc000206910) returned 1
	[0203.802] GetFileType (hFile=0x164) returned 0x1
	[0203.802] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4976) returned 1
	[0203.803] WriteFile (in: hFile=0x164, lpBuffer=0xc0000ca000*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0000ca000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1370, lpOverlapped=0xc000151ce8) returned 1
	[0203.803] GetFileType (hFile=0x164) returned 0x1
	[0203.803] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1370, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4976) returned 1
	[0203.803] GetFileType (hFile=0x164) returned 0x1
	[0203.804] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=4976) returned 1
	[0203.804] WriteFile (in: hFile=0x164, lpBuffer=0xc0000af500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0000af500*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0203.804] GetFileType (hFile=0x164) returned 0x1
	[0203.804] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1370, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=4976) returned 1
	[0203.804] CloseHandle (hObject=0x164) returned 1
	[0203.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf.egmwv")) returned 0x20
	[0203.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.808] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x20
	[0203.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x20) returned 1
	[0203.817] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0203.849] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0203.850] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003d0000, nNumberOfBytesToRead=0x634, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003d0000*, lpNumberOfBytesRead=0xc000199cec*=0x634, lpOverlapped=0x0) returned 1
	[0203.855] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a60 | out: pbBuffer=0xc000206a60) returned 1
	[0203.855] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000206a7a | out: pbBuffer=0xc000206a7a) returned 1
	[0203.855] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004bd802 | out: pbBuffer=0xc0004bd802) returned 1
	[0203.855] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206aa0 | out: pbBuffer=0xc000206aa0) returned 1
	[0203.855] GetFileType (hFile=0x17c) returned 0x1
	[0203.855] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1588) returned 1
	[0203.855] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000f0000*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0000f0000*, lpNumberOfBytesWritten=0xc000151ccc*=0x634, lpOverlapped=0xc000151ce8) returned 1
	[0203.856] GetFileType (hFile=0x17c) returned 0x1
	[0203.856] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x634, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1588) returned 1
	[0203.856] GetFileType (hFile=0x17c) returned 0x1
	[0203.856] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=1588) returned 1
	[0203.857] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000eae00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0000eae00*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0203.857] GetFileType (hFile=0x17c) returned 0x1
	[0203.857] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x634, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=1588) returned 1
	[0203.857] CloseHandle (hObject=0x17c) returned 1
	[0203.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf.egmwv")) returned 0x20
	[0203.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.860] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x20
	[0203.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x20) returned 1
	[0203.884] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.916] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0203.916] ReadFile (in: hFile=0x168, lpBuffer=0xc0001da000, nNumberOfBytesToRead=0x15cc, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001da000*, lpNumberOfBytesRead=0xc000199cec*=0x15cc, lpOverlapped=0x0) returned 1
	[0203.920] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145b0 | out: pbBuffer=0xc0004145b0) returned 1
	[0203.920] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145ca | out: pbBuffer=0xc0004145ca) returned 1
	[0203.920] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ea102 | out: pbBuffer=0xc0001ea102) returned 1
	[0203.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145f0 | out: pbBuffer=0xc0004145f0) returned 1
	[0203.921] GetFileType (hFile=0x168) returned 0x1
	[0203.921] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=5580) returned 1
	[0203.921] WriteFile (in: hFile=0x168, lpBuffer=0xc0001f8000*, nNumberOfBytesToWrite=0x15cc, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc0001f8000*, lpNumberOfBytesWritten=0xc0000ddccc*=0x15cc, lpOverlapped=0xc0000ddce8) returned 1
	[0203.921] GetFileType (hFile=0x168) returned 0x1
	[0203.922] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x15cc, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=5580) returned 1
	[0203.922] GetFileType (hFile=0x168) returned 0x1
	[0203.922] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000ddca0*=5580) returned 1
	[0203.922] WriteFile (in: hFile=0x168, lpBuffer=0xc0001fa000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0000ddccc, lpOverlapped=0xc0000ddce8 | out: lpBuffer=0xc0001fa000*, lpNumberOfBytesWritten=0xc0000ddccc*=0x22d, lpOverlapped=0xc0000ddce8) returned 1
	[0203.922] GetFileType (hFile=0x168) returned 0x1
	[0203.922] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x15cc, lpNewFilePointer=0xc0000ddca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000ddca0*=5580) returned 1
	[0203.923] CloseHandle (hObject=0x168) returned 1
	[0203.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf.egmwv")) returned 0x20
	[0203.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.926] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.940] SetEvent (hEvent=0x60) returned 1
	[0203.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x20
	[0203.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x20) returned 1
	[0203.943] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0203.971] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0203.971] ReadFile (in: hFile=0x168, lpBuffer=0xc0002a5c00, nNumberOfBytesToRead=0x68c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002a5c00*, lpNumberOfBytesRead=0xc0002d3cec*=0x68c, lpOverlapped=0x0) returned 1
	[0203.976] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053050 | out: pbBuffer=0xc000053050) returned 1
	[0203.976] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005306a | out: pbBuffer=0xc00005306a) returned 1
	[0203.977] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000403f02 | out: pbBuffer=0xc000403f02) returned 1
	[0203.977] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000403fba | out: pbBuffer=0xc000403fba) returned 1
	[0203.977] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053090 | out: pbBuffer=0xc000053090) returned 1
	[0203.977] GetFileType (hFile=0x168) returned 0x1
	[0203.977] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=1676) returned 1
	[0203.977] WriteFile (in: hFile=0x168, lpBuffer=0xc000277000*, nNumberOfBytesToWrite=0x68c, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc000277000*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x68c, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.978] GetFileType (hFile=0x168) returned 0x1
	[0203.978] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x68c, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=1676) returned 1
	[0203.978] GetFileType (hFile=0x168) returned 0x1
	[0203.978] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000d9ca0*=1676) returned 1
	[0203.978] WriteFile (in: hFile=0x168, lpBuffer=0xc00027a000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000d9ccc, lpOverlapped=0xc0000d9ce8 | out: lpBuffer=0xc00027a000*, lpNumberOfBytesWritten=0xc0000d9ccc*=0x227, lpOverlapped=0xc0000d9ce8) returned 1
	[0203.979] GetFileType (hFile=0x168) returned 0x1
	[0203.979] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x68c, lpNewFilePointer=0xc0000d9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000d9ca0*=1676) returned 1
	[0203.979] CloseHandle (hObject=0x168) returned 1
	[0203.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf.egmwv")) returned 0x20
	[0203.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.981] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0203.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x20
	[0203.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x20) returned 1
	[0203.987] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.025] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.025] ReadFile (in: hFile=0x164, lpBuffer=0xc000246a80, nNumberOfBytesToRead=0x984, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000246a80*, lpNumberOfBytesRead=0xc0002d3cec*=0x984, lpOverlapped=0x0) returned 1
	[0204.030] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x0
	[0204.031] SetEvent (hEvent=0x70) returned 1
	[0204.032] SetEvent (hEvent=0xc0) returned 1
	[0204.032] SetEvent (hEvent=0x60) returned 1
	[0204.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6740 | out: pbBuffer=0xc0002b6740) returned 1
	[0204.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b675a | out: pbBuffer=0xc0002b675a) returned 1
	[0204.032] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00024dd02 | out: pbBuffer=0xc00024dd02) returned 1
	[0204.032] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6780 | out: pbBuffer=0xc0002b6780) returned 1
	[0204.033] GetFileType (hFile=0x164) returned 0x1
	[0204.033] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2436) returned 1
	[0204.033] WriteFile (in: hFile=0x164, lpBuffer=0xc00030b000*, nNumberOfBytesToWrite=0x984, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc00030b000*, lpNumberOfBytesWritten=0xc00014bccc*=0x984, lpOverlapped=0xc00014bce8) returned 1
	[0204.033] GetFileType (hFile=0x164) returned 0x1
	[0204.033] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x984, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2436) returned 1
	[0204.034] GetFileType (hFile=0x164) returned 0x1
	[0204.034] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=2436) returned 1
	[0204.034] WriteFile (in: hFile=0x164, lpBuffer=0xc0002fb880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0002fb880*, lpNumberOfBytesWritten=0xc00014bccc*=0x224, lpOverlapped=0xc00014bce8) returned 1
	[0204.034] GetFileType (hFile=0x164) returned 0x1
	[0204.035] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x984, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=2436) returned 1
	[0204.035] CloseHandle (hObject=0x164) returned 1
	[0204.037] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf.egmwv")) returned 0x20
	[0204.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.042] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.045] SetEvent (hEvent=0xc8) returned 1
	[0204.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x20
	[0204.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x20) returned 1
	[0204.047] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.077] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0204.078] ReadFile (in: hFile=0x17c, lpBuffer=0xc000208000, nNumberOfBytesToRead=0xda6, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000208000*, lpNumberOfBytesRead=0xc000197cec*=0xda6, lpOverlapped=0x0) returned 1
	[0204.085] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414410 | out: pbBuffer=0xc000414410) returned 1
	[0204.085] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041442a | out: pbBuffer=0xc00041442a) returned 1
	[0204.085] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001302 | out: pbBuffer=0xc000001302) returned 1
	[0204.085] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000133e | out: pbBuffer=0xc00000133e) returned 1
	[0204.086] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0204.086] GetFileType (hFile=0x17c) returned 0x1
	[0204.086] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=3494) returned 1
	[0204.087] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003b2000*, nNumberOfBytesToWrite=0xda6, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc0003b2000*, lpNumberOfBytesWritten=0xc00014bccc*=0xda6, lpOverlapped=0xc00014bce8) returned 1
	[0204.087] GetFileType (hFile=0x17c) returned 0x1
	[0204.087] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xda6, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=3494) returned 1
	[0204.087] GetFileType (hFile=0x17c) returned 0x1
	[0204.087] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00014bca0*=3494) returned 1
	[0204.088] WriteFile (in: hFile=0x17c, lpBuffer=0xc000434000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00014bccc, lpOverlapped=0xc00014bce8 | out: lpBuffer=0xc000434000*, lpNumberOfBytesWritten=0xc00014bccc*=0x22d, lpOverlapped=0xc00014bce8) returned 1
	[0204.088] GetFileType (hFile=0x17c) returned 0x1
	[0204.088] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xda6, lpNewFilePointer=0xc00014bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00014bca0*=3494) returned 1
	[0204.088] CloseHandle (hObject=0x17c) returned 1
	[0204.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf.egmwv")) returned 0x20
	[0204.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.092] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.110] SetEvent (hEvent=0xc8) returned 1
	[0204.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x20
	[0204.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x20) returned 1
	[0204.114] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.199] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0204.199] ReadFile (in: hFile=0x168, lpBuffer=0xc0004a0000, nNumberOfBytesToRead=0xf6c, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004a0000*, lpNumberOfBytesRead=0xc000197cec*=0xf6c, lpOverlapped=0x0) returned 1
	[0204.204] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0204.205] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1202 | out: pbBuffer=0xc0002c1202) returned 1
	[0204.205] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0204.205] GetFileType (hFile=0x168) returned 0x1
	[0204.205] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=3948) returned 1
	[0204.205] WriteFile (in: hFile=0x168, lpBuffer=0xc0003ee000*, nNumberOfBytesToWrite=0xf6c, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc0003ee000*, lpNumberOfBytesWritten=0xc000147ccc*=0xf6c, lpOverlapped=0xc000147ce8) returned 1
	[0204.205] GetFileType (hFile=0x168) returned 0x1
	[0204.206] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xf6c, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=3948) returned 1
	[0204.206] GetFileType (hFile=0x168) returned 0x1
	[0204.206] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000147ca0*=3948) returned 1
	[0204.206] WriteFile (in: hFile=0x168, lpBuffer=0xc0003d9500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000147ccc, lpOverlapped=0xc000147ce8 | out: lpBuffer=0xc0003d9500*, lpNumberOfBytesWritten=0xc000147ccc*=0x230, lpOverlapped=0xc000147ce8) returned 1
	[0204.207] GetFileType (hFile=0x168) returned 0x1
	[0204.207] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xf6c, lpNewFilePointer=0xc000147ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000147ca0*=3948) returned 1
	[0204.207] CloseHandle (hObject=0x168) returned 1
	[0204.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf.egmwv")) returned 0x20
	[0204.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.234] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.249] SetEvent (hEvent=0xc8) returned 1
	[0204.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid")) returned 0x20
	[0204.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x20) returned 1
	[0204.254] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0204.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.288] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0204.288] ReadFile (in: hFile=0x168, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x246a, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc000197cec*=0x246a, lpOverlapped=0x0) returned 1
	[0204.297] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0204.297] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215102 | out: pbBuffer=0xc000215102) returned 1
	[0204.297] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0204.297] GetFileType (hFile=0x168) returned 0x1
	[0204.297] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=9322) returned 1
	[0204.297] WriteFile (in: hFile=0x168, lpBuffer=0xc0002a0000*, nNumberOfBytesToWrite=0x246a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x246a, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.298] GetFileType (hFile=0x168) returned 0x1
	[0204.298] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x246a, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=9322) returned 1
	[0204.298] GetFileType (hFile=0x168) returned 0x1
	[0204.298] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=9322) returned 1
	[0204.299] WriteFile (in: hFile=0x168, lpBuffer=0xc0000f1500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0000f1500*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22a, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.299] GetFileType (hFile=0x168) returned 0x1
	[0204.299] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x246a, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=9322) returned 1
	[0204.299] CloseHandle (hObject=0x168) returned 1
	[0204.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid.egmwv")) returned 0x20
	[0204.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0204.302] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.306] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.308] SetEvent (hEvent=0xc8) returned 1
	[0204.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf")) returned 0x20
	[0204.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x20) returned 1
	[0204.310] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.341] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0204.341] ReadFile (in: hFile=0x164, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x8d6, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000199cec*=0x8d6, lpOverlapped=0x0) returned 1
	[0204.347] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0204.347] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215d02 | out: pbBuffer=0xc000215d02) returned 1
	[0204.347] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215dc9 | out: pbBuffer=0xc000215dc9) returned 1
	[0204.347] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0204.348] GetFileType (hFile=0x164) returned 0x1
	[0204.348] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=2262) returned 1
	[0204.348] WriteFile (in: hFile=0x164, lpBuffer=0xc0001d9000*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0001d9000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x8d6, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.350] GetFileType (hFile=0x164) returned 0x1
	[0204.350] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8d6, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=2262) returned 1
	[0204.350] GetFileType (hFile=0x164) returned 0x1
	[0204.350] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=2262) returned 1
	[0204.350] WriteFile (in: hFile=0x164, lpBuffer=0xc0001dce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0001dce00*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22a, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.351] GetFileType (hFile=0x164) returned 0x1
	[0204.351] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8d6, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=2262) returned 1
	[0204.351] CloseHandle (hObject=0x164) returned 1
	[0204.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf.egmwv")) returned 0x20
	[0204.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.359] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf")) returned 0x20
	[0204.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x20) returned 1
	[0204.366] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.414] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0204.414] ReadFile (in: hFile=0x17c, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1496, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000199cec*=0x1496, lpOverlapped=0x0) returned 1
	[0204.422] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065d0 | out: pbBuffer=0xc0002065d0) returned 1
	[0204.422] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065ea | out: pbBuffer=0xc0002065ea) returned 1
	[0204.423] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001bf302 | out: pbBuffer=0xc0001bf302) returned 1
	[0204.423] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001bf32e | out: pbBuffer=0xc0001bf32e) returned 1
	[0204.423] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206610 | out: pbBuffer=0xc000206610) returned 1
	[0204.423] GetFileType (hFile=0x17c) returned 0x1
	[0204.423] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=5270) returned 1
	[0204.423] WriteFile (in: hFile=0x17c, lpBuffer=0xc000402000*, nNumberOfBytesToWrite=0x1496, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000402000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x1496, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.424] GetFileType (hFile=0x17c) returned 0x1
	[0204.424] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1496, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=5270) returned 1
	[0204.424] GetFileType (hFile=0x17c) returned 0x1
	[0204.424] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=5270) returned 1
	[0204.424] WriteFile (in: hFile=0x17c, lpBuffer=0xc000404000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc000404000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x22a, lpOverlapped=0xc0000e9ce8) returned 1
	[0204.425] GetFileType (hFile=0x17c) returned 0x1
	[0204.425] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1496, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=5270) returned 1
	[0204.425] CloseHandle (hObject=0x17c) returned 1
	[0204.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf.egmwv")) returned 0x20
	[0204.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.431] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.442] SetEvent (hEvent=0xc8) returned 1
	[0204.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf")) returned 0x20
	[0204.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x20) returned 1
	[0204.454] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.492] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0204.492] ReadFile (in: hFile=0x168, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x2856, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc00038dcec*=0x2856, lpOverlapped=0x0) returned 1
	[0204.497] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0204.497] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0204.497] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0204.497] GetFileType (hFile=0x168) returned 0x1
	[0204.497] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=10326) returned 1
	[0204.497] WriteFile (in: hFile=0x168, lpBuffer=0xc00018e000*, nNumberOfBytesToWrite=0x2856, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesWritten=0xc000231ccc*=0x2856, lpOverlapped=0xc000231ce8) returned 1
	[0204.498] GetFileType (hFile=0x168) returned 0x1
	[0204.498] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2856, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=10326) returned 1
	[0204.498] GetFileType (hFile=0x168) returned 0x1
	[0204.498] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=10326) returned 1
	[0204.498] WriteFile (in: hFile=0x168, lpBuffer=0xc000208000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc000208000*, lpNumberOfBytesWritten=0xc000231ccc*=0x22a, lpOverlapped=0xc000231ce8) returned 1
	[0204.499] GetFileType (hFile=0x168) returned 0x1
	[0204.499] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2856, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=10326) returned 1
	[0204.499] CloseHandle (hObject=0x168) returned 1
	[0204.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf.egmwv")) returned 0x20
	[0204.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.501] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.525] SetEvent (hEvent=0xc0) returned 1
	[0204.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x20
	[0204.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x20) returned 1
	[0204.531] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.560] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0204.560] ReadFile (in: hFile=0x168, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x73bc, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000389cec*=0x73bc, lpOverlapped=0x0) returned 1
	[0204.566] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0204.566] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1902 | out: pbBuffer=0xc0002c1902) returned 1
	[0204.567] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6350 | out: pbBuffer=0xc0002b6350) returned 1
	[0204.567] GetFileType (hFile=0x168) returned 0x1
	[0204.567] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=29628) returned 1
	[0204.567] WriteFile (in: hFile=0x168, lpBuffer=0xc00042a000*, nNumberOfBytesToWrite=0x73bc, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesWritten=0xc000231ccc*=0x73bc, lpOverlapped=0xc000231ce8) returned 1
	[0204.568] GetFileType (hFile=0x168) returned 0x1
	[0204.568] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x73bc, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=29628) returned 1
	[0204.568] GetFileType (hFile=0x168) returned 0x1
	[0204.569] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=29628) returned 1
	[0204.569] WriteFile (in: hFile=0x168, lpBuffer=0xc000209880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc000209880*, lpNumberOfBytesWritten=0xc000231ccc*=0x236, lpOverlapped=0xc000231ce8) returned 1
	[0204.569] GetFileType (hFile=0x168) returned 0x1
	[0204.569] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x73bc, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=29628) returned 1
	[0204.569] CloseHandle (hObject=0x168) returned 1
	[0204.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf.egmwv")) returned 0x20
	[0204.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.572] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.576] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.579] SetEvent (hEvent=0xc0) returned 1
	[0204.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x20
	[0204.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x20) returned 1
	[0204.581] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.616] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.617] ReadFile (in: hFile=0x164, lpBuffer=0xc00043c000, nNumberOfBytesToRead=0x9456, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00043c000*, lpNumberOfBytesRead=0xc0002d3cec*=0x9456, lpOverlapped=0x0) returned 1
	[0204.623] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0204.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ba | out: pbBuffer=0xc0004142ba) returned 1
	[0204.624] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001eb802 | out: pbBuffer=0xc0001eb802) returned 1
	[0204.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001eb857 | out: pbBuffer=0xc0001eb857) returned 1
	[0204.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001eb8b0 | out: pbBuffer=0xc0001eb8b0) returned 1
	[0204.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0204.624] GetFileType (hFile=0x164) returned 0x1
	[0204.625] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=37974) returned 1
	[0204.625] WriteFile (in: hFile=0x164, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x9456, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc000143ccc*=0x9456, lpOverlapped=0xc000143ce8) returned 1
	[0204.626] GetFileType (hFile=0x164) returned 0x1
	[0204.626] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9456, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=37974) returned 1
	[0204.626] GetFileType (hFile=0x164) returned 0x1
	[0204.626] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=37974) returned 1
	[0204.626] WriteFile (in: hFile=0x164, lpBuffer=0xc0001eee00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc0001eee00*, lpNumberOfBytesWritten=0xc000143ccc*=0x230, lpOverlapped=0xc000143ce8) returned 1
	[0204.627] GetFileType (hFile=0x164) returned 0x1
	[0204.627] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9456, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=37974) returned 1
	[0204.627] CloseHandle (hObject=0x164) returned 1
	[0204.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf.egmwv")) returned 0x20
	[0204.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.632] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x20
	[0204.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x20) returned 1
	[0204.638] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.675] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.675] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001b2000, nNumberOfBytesToRead=0x44b0, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001b2000*, lpNumberOfBytesRead=0xc0002d3cec*=0x44b0, lpOverlapped=0x0) returned 1
	[0204.682] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0204.682] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0204.682] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001602 | out: pbBuffer=0xc000001602) returned 1
	[0204.682] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000016e4 | out: pbBuffer=0xc0000016e4) returned 1
	[0204.682] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0204.683] GetFileType (hFile=0x17c) returned 0x1
	[0204.683] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=17584) returned 1
	[0204.683] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000ee000*, nNumberOfBytesToWrite=0x44b0, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0000ee000*, lpNumberOfBytesWritten=0xc000151ccc*=0x44b0, lpOverlapped=0xc000151ce8) returned 1
	[0204.684] GetFileType (hFile=0x17c) returned 0x1
	[0204.684] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x44b0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=17584) returned 1
	[0204.684] GetFileType (hFile=0x17c) returned 0x1
	[0204.685] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=17584) returned 1
	[0204.685] WriteFile (in: hFile=0x17c, lpBuffer=0xc000347500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000347500*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0204.686] GetFileType (hFile=0x17c) returned 0x1
	[0204.686] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x44b0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=17584) returned 1
	[0204.686] CloseHandle (hObject=0x17c) returned 1
	[0204.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf.egmwv")) returned 0x20
	[0204.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.692] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.705] SetEvent (hEvent=0xc0) returned 1
	[0204.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x20
	[0204.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x20) returned 1
	[0204.707] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.746] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.746] ReadFile (in: hFile=0x168, lpBuffer=0xc000364000, nNumberOfBytesToRead=0xa79c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc0002d3cec*=0xa79c, lpOverlapped=0x0) returned 1
	[0204.751] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0204.751] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214e02 | out: pbBuffer=0xc000214e02) returned 1
	[0204.751] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214e49 | out: pbBuffer=0xc000214e49) returned 1
	[0204.752] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0204.752] GetFileType (hFile=0x168) returned 0x1
	[0204.752] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=42908) returned 1
	[0204.752] WriteFile (in: hFile=0x168, lpBuffer=0xc0004d2000*, nNumberOfBytesToWrite=0xa79c, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0004d2000*, lpNumberOfBytesWritten=0xc000151ccc*=0xa79c, lpOverlapped=0xc000151ce8) returned 1
	[0204.753] GetFileType (hFile=0x168) returned 0x1
	[0204.753] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xa79c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=42908) returned 1
	[0204.753] GetFileType (hFile=0x168) returned 0x1
	[0204.753] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=42908) returned 1
	[0204.754] WriteFile (in: hFile=0x168, lpBuffer=0xc00026b880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00026b880*, lpNumberOfBytesWritten=0xc000151ccc*=0x236, lpOverlapped=0xc000151ce8) returned 1
	[0204.754] GetFileType (hFile=0x168) returned 0x1
	[0204.754] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xa79c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=42908) returned 1
	[0204.754] CloseHandle (hObject=0x168) returned 1
	[0204.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf.egmwv")) returned 0x20
	[0204.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.756] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.767] SetEvent (hEvent=0xc8) returned 1
	[0204.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x20
	[0204.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x20) returned 1
	[0204.770] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.798] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.802] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.802] ReadFile (in: hFile=0x168, lpBuffer=0xc000470000, nNumberOfBytesToRead=0xb88, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000470000*, lpNumberOfBytesRead=0xc0002d3cec*=0xb88, lpOverlapped=0x0) returned 1
	[0204.811] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0204.811] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0204.812] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001243 | out: pbBuffer=0xc000001243) returned 1
	[0204.812] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0204.812] GetFileType (hFile=0x168) returned 0x1
	[0204.812] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00037fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00037fca0*=2952) returned 1
	[0204.812] WriteFile (in: hFile=0x168, lpBuffer=0xc0002c4000*, nNumberOfBytesToWrite=0xb88, lpNumberOfBytesWritten=0xc00037fccc, lpOverlapped=0xc00037fce8 | out: lpBuffer=0xc0002c4000*, lpNumberOfBytesWritten=0xc00037fccc*=0xb88, lpOverlapped=0xc00037fce8) returned 1
	[0204.813] GetFileType (hFile=0x168) returned 0x1
	[0204.813] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb88, lpNewFilePointer=0xc00037fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00037fca0*=2952) returned 1
	[0204.813] GetFileType (hFile=0x168) returned 0x1
	[0204.813] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00037fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00037fca0*=2952) returned 1
	[0204.813] WriteFile (in: hFile=0x168, lpBuffer=0xc000431500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00037fccc, lpOverlapped=0xc00037fce8 | out: lpBuffer=0xc000431500*, lpNumberOfBytesWritten=0xc00037fccc*=0x227, lpOverlapped=0xc00037fce8) returned 1
	[0204.814] GetFileType (hFile=0x168) returned 0x1
	[0204.814] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb88, lpNewFilePointer=0xc00037fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00037fca0*=2952) returned 1
	[0204.814] CloseHandle (hObject=0x168) returned 1
	[0204.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf.egmwv")) returned 0x20
	[0204.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.817] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.822] SetEvent (hEvent=0xc8) returned 1
	[0204.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x20
	[0204.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x20) returned 1
	[0204.823] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.856] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.856] ReadFile (in: hFile=0x164, lpBuffer=0xc000442000, nNumberOfBytesToRead=0x600c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000442000*, lpNumberOfBytesRead=0xc0002d3cec*=0x600c, lpOverlapped=0x0) returned 1
	[0204.862] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414430 | out: pbBuffer=0xc000414430) returned 1
	[0204.862] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000458702 | out: pbBuffer=0xc000458702) returned 1
	[0204.862] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414470 | out: pbBuffer=0xc000414470) returned 1
	[0204.862] GetFileType (hFile=0x164) returned 0x1
	[0204.862] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=24588) returned 1
	[0204.862] WriteFile (in: hFile=0x164, lpBuffer=0xc00032c000*, nNumberOfBytesToWrite=0x600c, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc00032c000*, lpNumberOfBytesWritten=0xc000383ccc*=0x600c, lpOverlapped=0xc000383ce8) returned 1
	[0204.863] GetFileType (hFile=0x164) returned 0x1
	[0204.863] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x600c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=24588) returned 1
	[0204.863] GetFileType (hFile=0x164) returned 0x1
	[0204.863] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=24588) returned 1
	[0204.864] WriteFile (in: hFile=0x164, lpBuffer=0xc0001b0700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc0001b0700*, lpNumberOfBytesWritten=0xc000383ccc*=0x224, lpOverlapped=0xc000383ce8) returned 1
	[0204.864] GetFileType (hFile=0x164) returned 0x1
	[0204.864] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x600c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=24588) returned 1
	[0204.864] CloseHandle (hObject=0x164) returned 1
	[0204.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf.egmwv")) returned 0x20
	[0204.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.870] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0204.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x20
	[0204.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x20) returned 1
	[0204.878] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.916] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0204.917] ReadFile (in: hFile=0x17c, lpBuffer=0xc00040f000, nNumberOfBytesToRead=0xe6c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc00040f000*, lpNumberOfBytesRead=0xc0002d3cec*=0xe6c, lpOverlapped=0x0) returned 1
	[0204.924] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414760 | out: pbBuffer=0xc000414760) returned 1
	[0204.924] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000459d02 | out: pbBuffer=0xc000459d02) returned 1
	[0204.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004147a0 | out: pbBuffer=0xc0004147a0) returned 1
	[0204.925] GetFileType (hFile=0x17c) returned 0x1
	[0204.925] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=3692) returned 1
	[0204.925] WriteFile (in: hFile=0x17c, lpBuffer=0xc00010a000*, nNumberOfBytesToWrite=0xe6c, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc00010a000*, lpNumberOfBytesWritten=0xc000383ccc*=0xe6c, lpOverlapped=0xc000383ce8) returned 1
	[0204.927] GetFileType (hFile=0x17c) returned 0x1
	[0204.927] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xe6c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=3692) returned 1
	[0204.927] GetFileType (hFile=0x17c) returned 0x1
	[0204.928] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=3692) returned 1
	[0204.928] WriteFile (in: hFile=0x17c, lpBuffer=0xc000413880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc000413880*, lpNumberOfBytesWritten=0xc000383ccc*=0x22d, lpOverlapped=0xc000383ce8) returned 1
	[0204.928] GetFileType (hFile=0x17c) returned 0x1
	[0204.928] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xe6c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=3692) returned 1
	[0204.929] CloseHandle (hObject=0x17c) returned 1
	[0205.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf.egmwv")) returned 0x20
	[0205.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.021] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.036] SetEvent (hEvent=0xc8) returned 1
	[0205.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x20
	[0205.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x20) returned 1
	[0205.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.069] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0205.069] ReadFile (in: hFile=0x168, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x85c, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc000197cec*=0x85c, lpOverlapped=0x0) returned 1
	[0205.074] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0205.074] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003b8602 | out: pbBuffer=0xc0003b8602) returned 1
	[0205.074] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0205.074] GetFileType (hFile=0x168) returned 0x1
	[0205.074] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=2140) returned 1
	[0205.075] WriteFile (in: hFile=0x168, lpBuffer=0xc0003bb000*, nNumberOfBytesToWrite=0x85c, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc0003bb000*, lpNumberOfBytesWritten=0xc000383ccc*=0x85c, lpOverlapped=0xc000383ce8) returned 1
	[0205.075] GetFileType (hFile=0x168) returned 0x1
	[0205.075] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x85c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=2140) returned 1
	[0205.075] GetFileType (hFile=0x168) returned 0x1
	[0205.075] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=2140) returned 1
	[0205.076] WriteFile (in: hFile=0x168, lpBuffer=0xc0003bee00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc0003bee00*, lpNumberOfBytesWritten=0xc000383ccc*=0x227, lpOverlapped=0xc000383ce8) returned 1
	[0205.076] GetFileType (hFile=0x168) returned 0x1
	[0205.076] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x85c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=2140) returned 1
	[0205.076] CloseHandle (hObject=0x168) returned 1
	[0205.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf.egmwv")) returned 0x20
	[0205.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.079] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.093] SetEvent (hEvent=0xc8) returned 1
	[0205.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x20
	[0205.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x20) returned 1
	[0205.095] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.207] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.207] ReadFile (in: hFile=0x168, lpBuffer=0xc000104400, nNumberOfBytesToRead=0xb90, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000104400*, lpNumberOfBytesRead=0xc000387cec*=0xb90, lpOverlapped=0x0) returned 1
	[0205.213] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414a90 | out: pbBuffer=0xc000414a90) returned 1
	[0205.213] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000414aaa | out: pbBuffer=0xc000414aaa) returned 1
	[0205.213] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f9602 | out: pbBuffer=0xc0001f9602) returned 1
	[0205.213] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f962f | out: pbBuffer=0xc0001f962f) returned 1
	[0205.213] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001f9668 | out: pbBuffer=0xc0001f9668) returned 1
	[0205.213] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414ad0 | out: pbBuffer=0xc000414ad0) returned 1
	[0205.214] GetFileType (hFile=0x168) returned 0x1
	[0205.214] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003cfca0*=2960) returned 1
	[0205.214] WriteFile (in: hFile=0x168, lpBuffer=0xc000148000*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0xc0003cfccc, lpOverlapped=0xc0003cfce8 | out: lpBuffer=0xc000148000*, lpNumberOfBytesWritten=0xc0003cfccc*=0xb90, lpOverlapped=0xc0003cfce8) returned 1
	[0205.214] GetFileType (hFile=0x168) returned 0x1
	[0205.214] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb90, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003cfca0*=2960) returned 1
	[0205.215] GetFileType (hFile=0x168) returned 0x1
	[0205.215] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0003cfca0*=2960) returned 1
	[0205.215] WriteFile (in: hFile=0x168, lpBuffer=0xc00013ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0003cfccc, lpOverlapped=0xc0003cfce8 | out: lpBuffer=0xc00013ea80*, lpNumberOfBytesWritten=0xc0003cfccc*=0x227, lpOverlapped=0xc0003cfce8) returned 1
	[0205.215] GetFileType (hFile=0x168) returned 0x1
	[0205.215] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb90, lpNewFilePointer=0xc0003cfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0003cfca0*=2960) returned 1
	[0205.215] CloseHandle (hObject=0x168) returned 1
	[0205.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf.egmwv")) returned 0x20
	[0205.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.228] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.232] SetEvent (hEvent=0xc8) returned 1
	[0205.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x20
	[0205.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x20) returned 1
	[0205.234] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.270] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.270] ReadFile (in: hFile=0x164, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x8b4, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000387cec*=0x8b4, lpOverlapped=0x0) returned 1
	[0205.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6410 | out: pbBuffer=0xc0002b6410) returned 1
	[0205.277] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1502 | out: pbBuffer=0xc0002c1502) returned 1
	[0205.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0205.277] GetFileType (hFile=0x164) returned 0x1
	[0205.277] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2228) returned 1
	[0205.277] WriteFile (in: hFile=0x164, lpBuffer=0xc00020b000*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00020b000*, lpNumberOfBytesWritten=0xc000151ccc*=0x8b4, lpOverlapped=0xc000151ce8) returned 1
	[0205.278] GetFileType (hFile=0x164) returned 0x1
	[0205.278] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8b4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2228) returned 1
	[0205.278] GetFileType (hFile=0x164) returned 0x1
	[0205.278] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2228) returned 1
	[0205.278] WriteFile (in: hFile=0x164, lpBuffer=0xc0002be700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002be700*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0205.279] GetFileType (hFile=0x164) returned 0x1
	[0205.279] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x8b4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2228) returned 1
	[0205.279] CloseHandle (hObject=0x164) returned 1
	[0205.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf.egmwv")) returned 0x20
	[0205.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.285] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x20
	[0205.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x20) returned 1
	[0205.292] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.326] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0205.327] ReadFile (in: hFile=0x17c, lpBuffer=0xc000093200, nNumberOfBytesToRead=0x820, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000093200*, lpNumberOfBytesRead=0xc00038dcec*=0x820, lpOverlapped=0x0) returned 1
	[0205.332] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65a0 | out: pbBuffer=0xc0002b65a0) returned 1
	[0205.332] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ba | out: pbBuffer=0xc0002b65ba) returned 1
	[0205.332] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00006e302 | out: pbBuffer=0xc00006e302) returned 1
	[0205.332] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00006e324 | out: pbBuffer=0xc00006e324) returned 1
	[0205.333] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65e0 | out: pbBuffer=0xc0002b65e0) returned 1
	[0205.333] GetFileType (hFile=0x17c) returned 0x1
	[0205.333] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.333] WriteFile (in: hFile=0x17c, lpBuffer=0xc000170000*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000170000*, lpNumberOfBytesWritten=0xc000151ccc*=0x820, lpOverlapped=0xc000151ce8) returned 1
	[0205.333] GetFileType (hFile=0x17c) returned 0x1
	[0205.334] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x820, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.334] GetFileType (hFile=0x17c) returned 0x1
	[0205.334] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.334] WriteFile (in: hFile=0x17c, lpBuffer=0xc000172000*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000172000*, lpNumberOfBytesWritten=0xc000151ccc*=0x21e, lpOverlapped=0xc000151ce8) returned 1
	[0205.334] GetFileType (hFile=0x17c) returned 0x1
	[0205.334] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x820, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2080) returned 1
	[0205.335] CloseHandle (hObject=0x17c) returned 1
	[0205.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf.egmwv")) returned 0x20
	[0205.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.341] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x20
	[0205.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x20) returned 1
	[0205.356] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.385] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0205.385] ReadFile (in: hFile=0x168, lpBuffer=0xc000432800, nNumberOfBytesToRead=0x7e4, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000432800*, lpNumberOfBytesRead=0xc000389cec*=0x7e4, lpOverlapped=0x0) returned 1
	[0205.391] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6890 | out: pbBuffer=0xc0002b6890) returned 1
	[0205.391] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00006f802 | out: pbBuffer=0xc00006f802) returned 1
	[0205.391] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b68d0 | out: pbBuffer=0xc0002b68d0) returned 1
	[0205.391] GetFileType (hFile=0x168) returned 0x1
	[0205.392] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2020) returned 1
	[0205.392] WriteFile (in: hFile=0x168, lpBuffer=0xc000397000*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000397000*, lpNumberOfBytesWritten=0xc000151ccc*=0x7e4, lpOverlapped=0xc000151ce8) returned 1
	[0205.393] GetFileType (hFile=0x168) returned 0x1
	[0205.393] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x7e4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2020) returned 1
	[0205.393] GetFileType (hFile=0x168) returned 0x1
	[0205.393] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2020) returned 1
	[0205.393] WriteFile (in: hFile=0x168, lpBuffer=0xc0002d1180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002d1180*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0205.394] GetFileType (hFile=0x168) returned 0x1
	[0205.394] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x7e4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2020) returned 1
	[0205.394] CloseHandle (hObject=0x168) returned 1
	[0205.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf.egmwv")) returned 0x20
	[0205.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.397] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.400] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.423] SetEvent (hEvent=0xc0) returned 1
	[0205.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x20
	[0205.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x20) returned 1
	[0205.427] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.456] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0205.456] ReadFile (in: hFile=0x168, lpBuffer=0xc000288900, nNumberOfBytesToRead=0x8b8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288900*, lpNumberOfBytesRead=0xc000389cec*=0x8b8, lpOverlapped=0x0) returned 1
	[0205.463] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142c0 | out: pbBuffer=0xc0004142c0) returned 1
	[0205.463] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142da | out: pbBuffer=0xc0004142da) returned 1
	[0205.463] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000142102 | out: pbBuffer=0xc000142102) returned 1
	[0205.463] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000142157 | out: pbBuffer=0xc000142157) returned 1
	[0205.463] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001421d5 | out: pbBuffer=0xc0001421d5) returned 1
	[0205.463] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414300 | out: pbBuffer=0xc000414300) returned 1
	[0205.463] GetFileType (hFile=0x168) returned 0x1
	[0205.463] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2232) returned 1
	[0205.464] WriteFile (in: hFile=0x168, lpBuffer=0xc00013d000*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc00013d000*, lpNumberOfBytesWritten=0xc00022bccc*=0x8b8, lpOverlapped=0xc00022bce8) returned 1
	[0205.464] GetFileType (hFile=0x168) returned 0x1
	[0205.464] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8b8, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2232) returned 1
	[0205.464] GetFileType (hFile=0x168) returned 0x1
	[0205.465] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2232) returned 1
	[0205.465] WriteFile (in: hFile=0x168, lpBuffer=0xc000140e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc000140e00*, lpNumberOfBytesWritten=0xc00022bccc*=0x227, lpOverlapped=0xc00022bce8) returned 1
	[0205.465] GetFileType (hFile=0x168) returned 0x1
	[0205.465] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8b8, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2232) returned 1
	[0205.465] CloseHandle (hObject=0x168) returned 1
	[0205.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf.egmwv")) returned 0x20
	[0205.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.468] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.473] SetEvent (hEvent=0xc0) returned 1
	[0205.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x20
	[0205.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x20) returned 1
	[0205.475] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.510] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0205.510] ReadFile (in: hFile=0x164, lpBuffer=0xc0001ba000, nNumberOfBytesToRead=0xed4, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesRead=0xc000389cec*=0xed4, lpOverlapped=0x0) returned 1
	[0205.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6a20 | out: pbBuffer=0xc0002b6a20) returned 1
	[0205.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b6a3a | out: pbBuffer=0xc0002b6a3a) returned 1
	[0205.519] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002b2a02 | out: pbBuffer=0xc0002b2a02) returned 1
	[0205.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6a60 | out: pbBuffer=0xc0002b6a60) returned 1
	[0205.519] GetFileType (hFile=0x164) returned 0x1
	[0205.519] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3796) returned 1
	[0205.520] WriteFile (in: hFile=0x164, lpBuffer=0xc00026a000*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00026a000*, lpNumberOfBytesWritten=0xc000151ccc*=0xed4, lpOverlapped=0xc000151ce8) returned 1
	[0205.521] GetFileType (hFile=0x164) returned 0x1
	[0205.521] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xed4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3796) returned 1
	[0205.521] GetFileType (hFile=0x164) returned 0x1
	[0205.521] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3796) returned 1
	[0205.521] WriteFile (in: hFile=0x164, lpBuffer=0xc0001c4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001c4a80*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0205.522] GetFileType (hFile=0x164) returned 0x1
	[0205.522] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xed4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3796) returned 1
	[0205.522] CloseHandle (hObject=0x164) returned 1
	[0205.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf.egmwv")) returned 0x20
	[0205.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.529] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x20
	[0205.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x20) returned 1
	[0205.537] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.571] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0205.571] ReadFile (in: hFile=0x17c, lpBuffer=0xc0002b5800, nNumberOfBytesToRead=0x5a8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002b5800*, lpNumberOfBytesRead=0xc000389cec*=0x5a8, lpOverlapped=0x0) returned 1
	[0205.579] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206be0 | out: pbBuffer=0xc000206be0) returned 1
	[0205.579] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000206bfa | out: pbBuffer=0xc000206bfa) returned 1
	[0205.579] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000bb102 | out: pbBuffer=0xc0000bb102) returned 1
	[0205.579] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000bb146 | out: pbBuffer=0xc0000bb146) returned 1
	[0205.579] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206c20 | out: pbBuffer=0xc000206c20) returned 1
	[0205.579] GetFileType (hFile=0x17c) returned 0x1
	[0205.579] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1448) returned 1
	[0205.580] WriteFile (in: hFile=0x17c, lpBuffer=0xc000401000*, nNumberOfBytesToWrite=0x5a8, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000401000*, lpNumberOfBytesWritten=0xc000227ccc*=0x5a8, lpOverlapped=0xc000227ce8) returned 1
	[0205.580] GetFileType (hFile=0x17c) returned 0x1
	[0205.580] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5a8, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1448) returned 1
	[0205.581] GetFileType (hFile=0x17c) returned 0x1
	[0205.581] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1448) returned 1
	[0205.581] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003fe380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0003fe380*, lpNumberOfBytesWritten=0xc000227ccc*=0x227, lpOverlapped=0xc000227ce8) returned 1
	[0205.582] GetFileType (hFile=0x17c) returned 0x1
	[0205.582] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5a8, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1448) returned 1
	[0205.582] CloseHandle (hObject=0x17c) returned 1
	[0205.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf.egmwv")) returned 0x20
	[0205.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.588] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.602] SetEvent (hEvent=0xc0) returned 1
	[0205.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x20
	[0205.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x20) returned 1
	[0205.606] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.639] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.639] ReadFile (in: hFile=0x168, lpBuffer=0xc0002e0000, nNumberOfBytesToRead=0x2174, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesRead=0xc000387cec*=0x2174, lpOverlapped=0x0) returned 1
	[0205.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6bb0 | out: pbBuffer=0xc0002b6bb0) returned 1
	[0205.646] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b6bca | out: pbBuffer=0xc0002b6bca) returned 1
	[0205.646] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002b3902 | out: pbBuffer=0xc0002b3902) returned 1
	[0205.647] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6bf0 | out: pbBuffer=0xc0002b6bf0) returned 1
	[0205.647] GetFileType (hFile=0x168) returned 0x1
	[0205.647] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8564) returned 1
	[0205.647] WriteFile (in: hFile=0x168, lpBuffer=0xc00011a000*, nNumberOfBytesToWrite=0x2174, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00011a000*, lpNumberOfBytesWritten=0xc000151ccc*=0x2174, lpOverlapped=0xc000151ce8) returned 1
	[0205.647] GetFileType (hFile=0x168) returned 0x1
	[0205.648] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2174, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8564) returned 1
	[0205.648] GetFileType (hFile=0x168) returned 0x1
	[0205.648] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=8564) returned 1
	[0205.648] WriteFile (in: hFile=0x168, lpBuffer=0xc000110380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000110380*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0205.648] GetFileType (hFile=0x168) returned 0x1
	[0205.648] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2174, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=8564) returned 1
	[0205.649] CloseHandle (hObject=0x168) returned 1
	[0205.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf.egmwv")) returned 0x20
	[0205.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.652] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.655] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.666] SetEvent (hEvent=0xc0) returned 1
	[0205.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x20
	[0205.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x20) returned 1
	[0205.667] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.692] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.692] ReadFile (in: hFile=0x168, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x9dc, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc000387cec*=0x9dc, lpOverlapped=0x0) returned 1
	[0205.697] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414600 | out: pbBuffer=0xc000414600) returned 1
	[0205.697] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000143f02 | out: pbBuffer=0xc000143f02) returned 1
	[0205.697] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000143fe7 | out: pbBuffer=0xc000143fe7) returned 1
	[0205.697] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414640 | out: pbBuffer=0xc000414640) returned 1
	[0205.698] GetFileType (hFile=0x168) returned 0x1
	[0205.698] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2524) returned 1
	[0205.698] WriteFile (in: hFile=0x168, lpBuffer=0xc0000fb000*, nNumberOfBytesToWrite=0x9dc, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc0000fb000*, lpNumberOfBytesWritten=0xc00022bccc*=0x9dc, lpOverlapped=0xc00022bce8) returned 1
	[0205.698] GetFileType (hFile=0x168) returned 0x1
	[0205.698] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x9dc, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2524) returned 1
	[0205.698] GetFileType (hFile=0x168) returned 0x1
	[0205.699] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2524) returned 1
	[0205.699] WriteFile (in: hFile=0x168, lpBuffer=0xc00010a000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc00010a000*, lpNumberOfBytesWritten=0xc00022bccc*=0x22d, lpOverlapped=0xc00022bce8) returned 1
	[0205.699] GetFileType (hFile=0x168) returned 0x1
	[0205.699] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x9dc, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2524) returned 1
	[0205.699] CloseHandle (hObject=0x168) returned 1
	[0205.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf.egmwv")) returned 0x20
	[0205.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.702] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.707] SetEvent (hEvent=0xc0) returned 1
	[0205.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x20
	[0205.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x20) returned 1
	[0205.709] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.748] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.748] ReadFile (in: hFile=0x164, lpBuffer=0xc0000a6000, nNumberOfBytesToRead=0x244, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000a6000*, lpNumberOfBytesRead=0xc000387cec*=0x244, lpOverlapped=0x0) returned 1
	[0205.752] SetEvent (hEvent=0x15c) returned 1
	[0205.752] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6ef0 | out: pbBuffer=0xc0002b6ef0) returned 1
	[0205.752] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b6f0a | out: pbBuffer=0xc0002b6f0a) returned 1
	[0205.752] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00010d302 | out: pbBuffer=0xc00010d302) returned 1
	[0205.752] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010d373 | out: pbBuffer=0xc00010d373) returned 1
	[0205.752] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010d38d | out: pbBuffer=0xc00010d38d) returned 1
	[0205.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6f30 | out: pbBuffer=0xc0002b6f30) returned 1
	[0205.753] GetFileType (hFile=0x164) returned 0x1
	[0205.753] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=580) returned 1
	[0205.753] WriteFile (in: hFile=0x164, lpBuffer=0xc000115800*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000115800*, lpNumberOfBytesWritten=0xc000151ccc*=0x244, lpOverlapped=0xc000151ce8) returned 1
	[0205.754] GetFileType (hFile=0x164) returned 0x1
	[0205.754] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x244, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=580) returned 1
	[0205.754] GetFileType (hFile=0x164) returned 0x1
	[0205.754] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=580) returned 1
	[0205.754] WriteFile (in: hFile=0x164, lpBuffer=0xc00032b500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00032b500*, lpNumberOfBytesWritten=0xc000151ccc*=0x221, lpOverlapped=0xc000151ce8) returned 1
	[0205.755] GetFileType (hFile=0x164) returned 0x1
	[0205.755] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x244, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=580) returned 1
	[0205.755] CloseHandle (hObject=0x164) returned 1
	[0205.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf.egmwv")) returned 0x20
	[0205.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.813] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.818] SetEvent (hEvent=0xc8) returned 1
	[0205.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x20
	[0205.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x20) returned 1
	[0205.820] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.850] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.850] ReadFile (in: hFile=0x168, lpBuffer=0xc000296000, nNumberOfBytesToRead=0x1034, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000296000*, lpNumberOfBytesRead=0xc000387cec*=0x1034, lpOverlapped=0x0) returned 1
	[0205.856] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0205.856] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0205.856] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0205.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f83 | out: pbBuffer=0xc000214f83) returned 1
	[0205.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214fae | out: pbBuffer=0xc000214fae) returned 1
	[0205.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214fae | out: pbBuffer=0xc000214fae) returned 1
	[0205.857] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0205.857] GetFileType (hFile=0x168) returned 0x1
	[0205.857] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=4148) returned 1
	[0205.857] WriteFile (in: hFile=0x168, lpBuffer=0xc000108000*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000108000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x1034, lpOverlapped=0xc0001a1ce8) returned 1
	[0205.858] GetFileType (hFile=0x168) returned 0x1
	[0205.858] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1034, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=4148) returned 1
	[0205.858] GetFileType (hFile=0x168) returned 0x1
	[0205.858] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=4148) returned 1
	[0205.858] WriteFile (in: hFile=0x168, lpBuffer=0xc000201500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000201500*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x224, lpOverlapped=0xc0001a1ce8) returned 1
	[0205.859] GetFileType (hFile=0x168) returned 0x1
	[0205.859] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1034, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=4148) returned 1
	[0205.859] CloseHandle (hObject=0x168) returned 1
	[0205.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf.egmwv")) returned 0x20
	[0205.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.865] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid")) returned 0x20
	[0205.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x20) returned 1
	[0205.883] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0205.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.913] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0205.913] ReadFile (in: hFile=0x164, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0x1815, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc00038dcec*=0x1815, lpOverlapped=0x0) returned 1
	[0205.919] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0205.919] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001402 | out: pbBuffer=0xc000001402) returned 1
	[0205.919] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000140a | out: pbBuffer=0xc00000140a) returned 1
	[0205.919] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0205.919] GetFileType (hFile=0x164) returned 0x1
	[0205.919] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=6165) returned 1
	[0205.920] WriteFile (in: hFile=0x164, lpBuffer=0xc000262000*, nNumberOfBytesToWrite=0x1815, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000262000*, lpNumberOfBytesWritten=0xc00019dccc*=0x1815, lpOverlapped=0xc00019dce8) returned 1
	[0205.920] GetFileType (hFile=0x164) returned 0x1
	[0205.920] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1815, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=6165) returned 1
	[0205.920] GetFileType (hFile=0x164) returned 0x1
	[0205.920] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=6165) returned 1
	[0205.921] WriteFile (in: hFile=0x164, lpBuffer=0xc000171500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000171500*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0205.921] GetFileType (hFile=0x164) returned 0x1
	[0205.921] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1815, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=6165) returned 1
	[0205.921] CloseHandle (hObject=0x164) returned 1
	[0205.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid.egmwv")) returned 0x20
	[0205.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0205.924] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.935] SetEvent (hEvent=0xc8) returned 1
	[0205.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x20
	[0205.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x20) returned 1
	[0205.938] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.973] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.973] ReadFile (in: hFile=0x164, lpBuffer=0xc0002b0000, nNumberOfBytesToRead=0xa8c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002b0000*, lpNumberOfBytesRead=0xc000387cec*=0xa8c, lpOverlapped=0x0) returned 1
	[0205.981] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0205.982] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0205.982] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00010c002 | out: pbBuffer=0xc00010c002) returned 1
	[0205.982] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0205.982] GetFileType (hFile=0x164) returned 0x1
	[0205.982] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2700) returned 1
	[0205.982] WriteFile (in: hFile=0x164, lpBuffer=0xc000136000*, nNumberOfBytesToWrite=0xa8c, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000136000*, lpNumberOfBytesWritten=0xc00019dccc*=0xa8c, lpOverlapped=0xc00019dce8) returned 1
	[0205.983] GetFileType (hFile=0x164) returned 0x1
	[0205.983] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa8c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2700) returned 1
	[0205.983] GetFileType (hFile=0x164) returned 0x1
	[0205.983] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2700) returned 1
	[0205.984] WriteFile (in: hFile=0x164, lpBuffer=0xc0001bee00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0001bee00*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0205.984] GetFileType (hFile=0x164) returned 0x1
	[0205.984] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa8c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2700) returned 1
	[0205.984] CloseHandle (hObject=0x164) returned 1
	[0205.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf.egmwv")) returned 0x20
	[0205.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.987] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.991] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0205.993] SetEvent (hEvent=0xc8) returned 1
	[0205.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf")) returned 0x20
	[0205.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x20) returned 1
	[0205.995] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.032] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.032] ReadFile (in: hFile=0x17c, lpBuffer=0xc000124000, nNumberOfBytesToRead=0x1b1a, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000124000*, lpNumberOfBytesRead=0xc000389cec*=0x1b1a, lpOverlapped=0x0) returned 1
	[0206.039] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0206.039] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020644a | out: pbBuffer=0xc00020644a) returned 1
	[0206.040] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00010d602 | out: pbBuffer=0xc00010d602) returned 1
	[0206.040] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010d664 | out: pbBuffer=0xc00010d664) returned 1
	[0206.040] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0206.040] GetFileType (hFile=0x17c) returned 0x1
	[0206.040] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=6938) returned 1
	[0206.040] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000b2000*, nNumberOfBytesToWrite=0x1b1a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000b2000*, lpNumberOfBytesWritten=0xc00019dccc*=0x1b1a, lpOverlapped=0xc00019dce8) returned 1
	[0206.041] GetFileType (hFile=0x17c) returned 0x1
	[0206.041] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1b1a, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=6938) returned 1
	[0206.041] GetFileType (hFile=0x17c) returned 0x1
	[0206.041] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=6938) returned 1
	[0206.042] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000aa700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0000aa700*, lpNumberOfBytesWritten=0xc00019dccc*=0x22d, lpOverlapped=0xc00019dce8) returned 1
	[0206.042] GetFileType (hFile=0x17c) returned 0x1
	[0206.042] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1b1a, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=6938) returned 1
	[0206.042] CloseHandle (hObject=0x17c) returned 1
	[0206.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf.egmwv")) returned 0x20
	[0206.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.047] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf")) returned 0x20
	[0206.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x20) returned 1
	[0206.053] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.086] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.086] ReadFile (in: hFile=0x168, lpBuffer=0xc0001d6000, nNumberOfBytesToRead=0x8e8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001d6000*, lpNumberOfBytesRead=0xc000389cec*=0x8e8, lpOverlapped=0x0) returned 1
	[0206.092] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0206.092] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0206.092] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000413202 | out: pbBuffer=0xc000413202) returned 1
	[0206.092] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004132c4 | out: pbBuffer=0xc0004132c4) returned 1
	[0206.092] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0206.092] GetFileType (hFile=0x168) returned 0x1
	[0206.092] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2280) returned 1
	[0206.093] WriteFile (in: hFile=0x168, lpBuffer=0xc0001df000*, nNumberOfBytesToWrite=0x8e8, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001df000*, lpNumberOfBytesWritten=0xc000151ccc*=0x8e8, lpOverlapped=0xc000151ce8) returned 1
	[0206.093] GetFileType (hFile=0x168) returned 0x1
	[0206.094] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8e8, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2280) returned 1
	[0206.094] GetFileType (hFile=0x168) returned 0x1
	[0206.094] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2280) returned 1
	[0206.094] WriteFile (in: hFile=0x168, lpBuffer=0xc0001e8000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001e8000*, lpNumberOfBytesWritten=0xc000151ccc*=0x227, lpOverlapped=0xc000151ce8) returned 1
	[0206.094] GetFileType (hFile=0x168) returned 0x1
	[0206.094] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8e8, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2280) returned 1
	[0206.095] CloseHandle (hObject=0x168) returned 1
	[0206.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf.egmwv")) returned 0x20
	[0206.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.101] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.114] SetEvent (hEvent=0xc8) returned 1
	[0206.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf")) returned 0x20
	[0206.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x20) returned 1
	[0206.119] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.146] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0206.147] ReadFile (in: hFile=0x164, lpBuffer=0xc0003bc000, nNumberOfBytesToRead=0x1f08, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesRead=0xc000425cec*=0x1f08, lpOverlapped=0x0) returned 1
	[0206.151] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145a0 | out: pbBuffer=0xc0004145a0) returned 1
	[0206.151] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145ba | out: pbBuffer=0xc0004145ba) returned 1
	[0206.151] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1f02 | out: pbBuffer=0xc0002c1f02) returned 1
	[0206.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1f02 | out: pbBuffer=0xc0002c1f02) returned 1
	[0206.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1fc0 | out: pbBuffer=0xc0002c1fc0) returned 1
	[0206.175] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145e0 | out: pbBuffer=0xc0004145e0) returned 1
	[0206.175] GetFileType (hFile=0x164) returned 0x1
	[0206.175] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7944) returned 1
	[0206.175] WriteFile (in: hFile=0x164, lpBuffer=0xc0002f8000*, nNumberOfBytesToWrite=0x1f08, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1f08, lpOverlapped=0xc000155ce8) returned 1
	[0206.176] GetFileType (hFile=0x164) returned 0x1
	[0206.176] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1f08, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7944) returned 1
	[0206.176] GetFileType (hFile=0x164) returned 0x1
	[0206.176] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7944) returned 1
	[0206.176] WriteFile (in: hFile=0x164, lpBuffer=0xc0003c5180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c5180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0206.177] GetFileType (hFile=0x164) returned 0x1
	[0206.177] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1f08, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7944) returned 1
	[0206.177] CloseHandle (hObject=0x164) returned 1
	[0206.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf.egmwv")) returned 0x20
	[0206.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.180] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.188] SetEvent (hEvent=0xc8) returned 1
	[0206.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x20
	[0206.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x20) returned 1
	[0206.193] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.197] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.235] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.235] ReadFile (in: hFile=0x168, lpBuffer=0xc000110000, nNumberOfBytesToRead=0x45ba, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000110000*, lpNumberOfBytesRead=0xc000387cec*=0x45ba, lpOverlapped=0x0) returned 1
	[0206.240] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0206.240] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0206.240] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0206.241] GetFileType (hFile=0x168) returned 0x1
	[0206.241] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17850) returned 1
	[0206.241] WriteFile (in: hFile=0x168, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0x45ba, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc000155ccc*=0x45ba, lpOverlapped=0xc000155ce8) returned 1
	[0206.241] GetFileType (hFile=0x168) returned 0x1
	[0206.242] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x45ba, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17850) returned 1
	[0206.242] GetFileType (hFile=0x168) returned 0x1
	[0206.242] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17850) returned 1
	[0206.242] WriteFile (in: hFile=0x168, lpBuffer=0xc000162700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000162700*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0206.242] GetFileType (hFile=0x168) returned 0x1
	[0206.242] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x45ba, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17850) returned 1
	[0206.242] CloseHandle (hObject=0x168) returned 1
	[0206.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf.egmwv")) returned 0x20
	[0206.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.246] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x20
	[0206.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x20) returned 1
	[0206.262] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.289] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.289] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000ee000, nNumberOfBytesToRead=0x721c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ee000*, lpNumberOfBytesRead=0xc000387cec*=0x721c, lpOverlapped=0x0) returned 1
	[0206.294] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0206.294] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0206.294] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0206.294] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000394af | out: pbBuffer=0xc0000394af) returned 1
	[0206.295] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0206.295] GetFileType (hFile=0x17c) returned 0x1
	[0206.295] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=29212) returned 1
	[0206.295] WriteFile (in: hFile=0x17c, lpBuffer=0xc000370000*, nNumberOfBytesToWrite=0x721c, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000370000*, lpNumberOfBytesWritten=0xc000411ccc*=0x721c, lpOverlapped=0xc000411ce8) returned 1
	[0206.296] GetFileType (hFile=0x17c) returned 0x1
	[0206.296] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x721c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=29212) returned 1
	[0206.296] GetFileType (hFile=0x17c) returned 0x1
	[0206.296] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=29212) returned 1
	[0206.296] WriteFile (in: hFile=0x17c, lpBuffer=0xc00042f500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc00042f500*, lpNumberOfBytesWritten=0xc000411ccc*=0x22d, lpOverlapped=0xc000411ce8) returned 1
	[0206.296] GetFileType (hFile=0x17c) returned 0x1
	[0206.297] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x721c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=29212) returned 1
	[0206.297] CloseHandle (hObject=0x17c) returned 1
	[0206.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf.egmwv")) returned 0x20
	[0206.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.298] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.310] SetEvent (hEvent=0x60) returned 1
	[0206.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x20
	[0206.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x20) returned 1
	[0206.314] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.338] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0206.339] ReadFile (in: hFile=0x164, lpBuffer=0xc0000c0000, nNumberOfBytesToRead=0x3df0, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000c0000*, lpNumberOfBytesRead=0xc000197cec*=0x3df0, lpOverlapped=0x0) returned 1
	[0206.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0206.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b645a | out: pbBuffer=0xc0002b645a) returned 1
	[0206.345] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00030e802 | out: pbBuffer=0xc00030e802) returned 1
	[0206.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0206.345] GetFileType (hFile=0x164) returned 0x1
	[0206.345] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026fca0*=15856) returned 1
	[0206.345] WriteFile (in: hFile=0x164, lpBuffer=0xc0003b6000*, nNumberOfBytesToWrite=0x3df0, lpNumberOfBytesWritten=0xc00026fccc, lpOverlapped=0xc00026fce8 | out: lpBuffer=0xc0003b6000*, lpNumberOfBytesWritten=0xc00026fccc*=0x3df0, lpOverlapped=0xc00026fce8) returned 1
	[0206.346] GetFileType (hFile=0x164) returned 0x1
	[0206.346] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3df0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026fca0*=15856) returned 1
	[0206.346] GetFileType (hFile=0x164) returned 0x1
	[0206.346] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026fca0*=15856) returned 1
	[0206.347] WriteFile (in: hFile=0x164, lpBuffer=0xc0003a4700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00026fccc, lpOverlapped=0xc00026fce8 | out: lpBuffer=0xc0003a4700*, lpNumberOfBytesWritten=0xc00026fccc*=0x233, lpOverlapped=0xc00026fce8) returned 1
	[0206.347] GetFileType (hFile=0x164) returned 0x1
	[0206.347] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3df0, lpNewFilePointer=0xc00026fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026fca0*=15856) returned 1
	[0206.347] CloseHandle (hObject=0x164) returned 1
	[0206.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf.egmwv")) returned 0x20
	[0206.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.359] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.363] SetEvent (hEvent=0x60) returned 1
	[0206.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x20
	[0206.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x20) returned 1
	[0206.365] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.391] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0206.392] ReadFile (in: hFile=0x17c, lpBuffer=0xc000218000, nNumberOfBytesToRead=0x17b4, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc000197cec*=0x17b4, lpOverlapped=0x0) returned 1
	[0206.398] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0206.398] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020646a | out: pbBuffer=0xc00020646a) returned 1
	[0206.398] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043ee02 | out: pbBuffer=0xc00043ee02) returned 1
	[0206.398] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043ee9d | out: pbBuffer=0xc00043ee9d) returned 1
	[0206.398] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043eeb3 | out: pbBuffer=0xc00043eeb3) returned 1
	[0206.398] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0206.400] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.400] SetEvent (hEvent=0x70) returned 1
	[0206.400] SetEvent (hEvent=0x15c) returned 1
	[0206.400] SetEvent (hEvent=0x60) returned 1
	[0206.401] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206490 | out: pbBuffer=0xc000206490) returned 1
	[0206.401] GetFileType (hFile=0x17c) returned 0x1
	[0206.401] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=6068) returned 1
	[0206.401] WriteFile (in: hFile=0x17c, lpBuffer=0xc00023c000*, nNumberOfBytesToWrite=0x17b4, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc00023c000*, lpNumberOfBytesWritten=0xc000411ccc*=0x17b4, lpOverlapped=0xc000411ce8) returned 1
	[0206.402] GetFileType (hFile=0x17c) returned 0x1
	[0206.402] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x17b4, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=6068) returned 1
	[0206.402] GetFileType (hFile=0x17c) returned 0x1
	[0206.402] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=6068) returned 1
	[0206.402] WriteFile (in: hFile=0x17c, lpBuffer=0xc000230700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000230700*, lpNumberOfBytesWritten=0xc000411ccc*=0x230, lpOverlapped=0xc000411ce8) returned 1
	[0206.402] GetFileType (hFile=0x17c) returned 0x1
	[0206.402] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x17b4, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=6068) returned 1
	[0206.403] CloseHandle (hObject=0x17c) returned 1
	[0206.405] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf.egmwv")) returned 0x20
	[0206.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.410] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.413] SetEvent (hEvent=0xe4) returned 1
	[0206.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x20
	[0206.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x20) returned 1
	[0206.414] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.455] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0206.455] ReadFile (in: hFile=0x164, lpBuffer=0xc000444a00, nNumberOfBytesToRead=0x20e8, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000444a00*, lpNumberOfBytesRead=0xc000193cec*=0x20e8, lpOverlapped=0x0) returned 1
	[0206.460] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0206.460] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0206.460] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039f6c | out: pbBuffer=0xc000039f6c) returned 1
	[0206.460] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039fb6 | out: pbBuffer=0xc000039fb6) returned 1
	[0206.461] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0206.461] GetFileType (hFile=0x164) returned 0x1
	[0206.461] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=8424) returned 1
	[0206.461] WriteFile (in: hFile=0x164, lpBuffer=0xc0004a4000*, nNumberOfBytesToWrite=0x20e8, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc0004a4000*, lpNumberOfBytesWritten=0xc00040dccc*=0x20e8, lpOverlapped=0xc00040dce8) returned 1
	[0206.462] GetFileType (hFile=0x164) returned 0x1
	[0206.462] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x20e8, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=8424) returned 1
	[0206.462] GetFileType (hFile=0x164) returned 0x1
	[0206.462] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=8424) returned 1
	[0206.462] WriteFile (in: hFile=0x164, lpBuffer=0xc000466e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000466e00*, lpNumberOfBytesWritten=0xc00040dccc*=0x227, lpOverlapped=0xc00040dce8) returned 1
	[0206.462] GetFileType (hFile=0x164) returned 0x1
	[0206.462] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x20e8, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=8424) returned 1
	[0206.463] CloseHandle (hObject=0x164) returned 1
	[0206.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf.egmwv")) returned 0x20
	[0206.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.467] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x20
	[0206.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x20) returned 1
	[0206.483] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.508] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.508] ReadFile (in: hFile=0x164, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0x2afa, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000387cec*=0x2afa, lpOverlapped=0x0) returned 1
	[0206.515] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0206.515] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020644a | out: pbBuffer=0xc00020644a) returned 1
	[0206.515] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001302 | out: pbBuffer=0xc000001302) returned 1
	[0206.515] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002064b0 | out: pbBuffer=0xc0002064b0) returned 1
	[0206.515] GetFileType (hFile=0x164) returned 0x1
	[0206.515] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=11002) returned 1
	[0206.515] WriteFile (in: hFile=0x164, lpBuffer=0xc0002ae000*, nNumberOfBytesToWrite=0x2afa, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc0002ae000*, lpNumberOfBytesWritten=0xc00040dccc*=0x2afa, lpOverlapped=0xc00040dce8) returned 1
	[0206.516] GetFileType (hFile=0x164) returned 0x1
	[0206.516] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2afa, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=11002) returned 1
	[0206.516] GetFileType (hFile=0x164) returned 0x1
	[0206.517] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=11002) returned 1
	[0206.517] WriteFile (in: hFile=0x164, lpBuffer=0xc00035a700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc00035a700*, lpNumberOfBytesWritten=0xc00040dccc*=0x233, lpOverlapped=0xc00040dce8) returned 1
	[0206.517] GetFileType (hFile=0x164) returned 0x1
	[0206.517] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2afa, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=11002) returned 1
	[0206.517] CloseHandle (hObject=0x164) returned 1
	[0206.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf.egmwv")) returned 0x20
	[0206.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.521] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.535] SetEvent (hEvent=0xe4) returned 1
	[0206.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x20
	[0206.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x20) returned 1
	[0206.539] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.567] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.567] ReadFile (in: hFile=0x164, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x83c, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000387cec*=0x83c, lpOverlapped=0x0) returned 1
	[0206.573] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0206.573] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215c02 | out: pbBuffer=0xc000215c02) returned 1
	[0206.573] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215ce7 | out: pbBuffer=0xc000215ce7) returned 1
	[0206.573] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0206.573] GetFileType (hFile=0x164) returned 0x1
	[0206.574] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2108) returned 1
	[0206.574] WriteFile (in: hFile=0x164, lpBuffer=0xc0002ea000*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002ea000*, lpNumberOfBytesWritten=0xc000155ccc*=0x83c, lpOverlapped=0xc000155ce8) returned 1
	[0206.574] GetFileType (hFile=0x164) returned 0x1
	[0206.574] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x83c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2108) returned 1
	[0206.575] GetFileType (hFile=0x164) returned 0x1
	[0206.575] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2108) returned 1
	[0206.575] WriteFile (in: hFile=0x164, lpBuffer=0xc000191880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000191880*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0206.575] GetFileType (hFile=0x164) returned 0x1
	[0206.575] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x83c, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2108) returned 1
	[0206.575] CloseHandle (hObject=0x164) returned 1
	[0206.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf.egmwv")) returned 0x20
	[0206.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.578] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.583] SetEvent (hEvent=0xe4) returned 1
	[0206.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x20
	[0206.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x20) returned 1
	[0206.585] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.621] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.621] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003fb000, nNumberOfBytesToRead=0x43fe, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003fb000*, lpNumberOfBytesRead=0xc000387cec*=0x43fe, lpOverlapped=0x0) returned 1
	[0206.629] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414420 | out: pbBuffer=0xc000414420) returned 1
	[0206.630] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041443a | out: pbBuffer=0xc00041443a) returned 1
	[0206.630] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002eec02 | out: pbBuffer=0xc0002eec02) returned 1
	[0206.630] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002eec52 | out: pbBuffer=0xc0002eec52) returned 1
	[0206.630] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414460 | out: pbBuffer=0xc000414460) returned 1
	[0206.630] GetFileType (hFile=0x17c) returned 0x1
	[0206.630] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=17406) returned 1
	[0206.631] WriteFile (in: hFile=0x17c, lpBuffer=0xc0004b0000*, nNumberOfBytesToWrite=0x43fe, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0004b0000*, lpNumberOfBytesWritten=0xc000411ccc*=0x43fe, lpOverlapped=0xc000411ce8) returned 1
	[0206.631] GetFileType (hFile=0x17c) returned 0x1
	[0206.631] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x43fe, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=17406) returned 1
	[0206.631] GetFileType (hFile=0x17c) returned 0x1
	[0206.631] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=17406) returned 1
	[0206.632] WriteFile (in: hFile=0x17c, lpBuffer=0xc00026e700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc00026e700*, lpNumberOfBytesWritten=0xc000411ccc*=0x236, lpOverlapped=0xc000411ce8) returned 1
	[0206.632] GetFileType (hFile=0x17c) returned 0x1
	[0206.632] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x43fe, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=17406) returned 1
	[0206.632] CloseHandle (hObject=0x17c) returned 1
	[0206.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf.egmwv")) returned 0x20
	[0206.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.637] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x20
	[0206.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x20) returned 1
	[0206.643] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.678] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0206.678] ReadFile (in: hFile=0x168, lpBuffer=0xc000105180, nNumberOfBytesToRead=0x380, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000105180*, lpNumberOfBytesRead=0xc000387cec*=0x380, lpOverlapped=0x0) returned 1
	[0206.685] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e80 | out: pbBuffer=0xc000052e80) returned 1
	[0206.685] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003a4802 | out: pbBuffer=0xc0003a4802) returned 1
	[0206.686] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a4829 | out: pbBuffer=0xc0003a4829) returned 1
	[0206.686] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003a48ba | out: pbBuffer=0xc0003a48ba) returned 1
	[0206.686] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0206.686] GetFileType (hFile=0x168) returned 0x1
	[0206.686] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=896) returned 1
	[0206.686] WriteFile (in: hFile=0x168, lpBuffer=0xc0003b8000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc0003b8000*, lpNumberOfBytesWritten=0xc00021fccc*=0x380, lpOverlapped=0xc00021fce8) returned 1
	[0206.687] GetFileType (hFile=0x168) returned 0x1
	[0206.687] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x380, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=896) returned 1
	[0206.687] GetFileType (hFile=0x168) returned 0x1
	[0206.687] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=896) returned 1
	[0206.687] WriteFile (in: hFile=0x168, lpBuffer=0xc0003b0a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc0003b0a80*, lpNumberOfBytesWritten=0xc00021fccc*=0x221, lpOverlapped=0xc00021fce8) returned 1
	[0206.687] GetFileType (hFile=0x168) returned 0x1
	[0206.688] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x380, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=896) returned 1
	[0206.688] CloseHandle (hObject=0x168) returned 1
	[0206.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf.egmwv")) returned 0x20
	[0206.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.694] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x20
	[0206.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x20) returned 1
	[0206.712] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.741] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0206.741] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000ac500, nNumberOfBytesToRead=0x2332, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ac500*, lpNumberOfBytesRead=0xc000425cec*=0x2332, lpOverlapped=0x0) returned 1
	[0206.750] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206b10 | out: pbBuffer=0xc000206b10) returned 1
	[0206.750] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000202402 | out: pbBuffer=0xc000202402) returned 1
	[0206.750] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206b50 | out: pbBuffer=0xc000206b50) returned 1
	[0206.751] SetEvent (hEvent=0xe4) returned 1
	[0206.751] GetFileType (hFile=0x17c) returned 0x1
	[0206.751] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=9010) returned 1
	[0206.751] WriteFile (in: hFile=0x17c, lpBuffer=0xc000124000*, nNumberOfBytesToWrite=0x2332, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000124000*, lpNumberOfBytesWritten=0xc00040dccc*=0x2332, lpOverlapped=0xc00040dce8) returned 1
	[0206.752] GetFileType (hFile=0x17c) returned 0x1
	[0206.752] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2332, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=9010) returned 1
	[0206.752] GetFileType (hFile=0x17c) returned 0x1
	[0206.752] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=9010) returned 1
	[0206.752] WriteFile (in: hFile=0x17c, lpBuffer=0xc000112a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000112a80*, lpNumberOfBytesWritten=0xc00040dccc*=0x22a, lpOverlapped=0xc00040dce8) returned 1
	[0206.753] GetFileType (hFile=0x17c) returned 0x1
	[0206.753] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2332, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=9010) returned 1
	[0206.753] CloseHandle (hObject=0x17c) returned 1
	[0206.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf.egmwv")) returned 0x20
	[0206.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.761] SwitchToThread () returned 1
	[0206.763] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.777] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.793] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.802] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.823] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.843] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.858] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.884] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.888] SetEvent (hEvent=0xc8) returned 1
	[0206.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x20
	[0206.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x20) returned 1
	[0206.890] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.921] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.921] ReadFile (in: hFile=0x164, lpBuffer=0xc00013c000, nNumberOfBytesToRead=0x91c, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00013c000*, lpNumberOfBytesRead=0xc000389cec*=0x91c, lpOverlapped=0x0) returned 1
	[0206.928] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0206.928] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041446a | out: pbBuffer=0xc00041446a) returned 1
	[0206.928] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003fca02 | out: pbBuffer=0xc0003fca02) returned 1
	[0206.928] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414490 | out: pbBuffer=0xc000414490) returned 1
	[0206.929] GetFileType (hFile=0x164) returned 0x1
	[0206.929] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=2332) returned 1
	[0206.929] WriteFile (in: hFile=0x164, lpBuffer=0xc0001e4000*, nNumberOfBytesToWrite=0x91c, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesWritten=0xc000411ccc*=0x91c, lpOverlapped=0xc000411ce8) returned 1
	[0206.929] GetFileType (hFile=0x164) returned 0x1
	[0206.930] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x91c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=2332) returned 1
	[0206.930] GetFileType (hFile=0x164) returned 0x1
	[0206.930] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=2332) returned 1
	[0206.930] WriteFile (in: hFile=0x164, lpBuffer=0xc00014c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc00014c700*, lpNumberOfBytesWritten=0xc000411ccc*=0x227, lpOverlapped=0xc000411ce8) returned 1
	[0206.930] GetFileType (hFile=0x164) returned 0x1
	[0206.930] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x91c, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=2332) returned 1
	[0206.931] CloseHandle (hObject=0x164) returned 1
	[0206.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf.egmwv")) returned 0x20
	[0206.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.937] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0206.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x20
	[0206.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x20) returned 1
	[0206.944] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.246] SetEvent (hEvent=0x70) returned 1
	[0207.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.248] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0207.248] ReadFile (in: hFile=0x168, lpBuffer=0xc0002e8000, nNumberOfBytesToRead=0x4604, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e8000*, lpNumberOfBytesRead=0xc000387cec*=0x4604, lpOverlapped=0x0) returned 1
	[0207.256] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6760 | out: pbBuffer=0xc0002b6760) returned 1
	[0207.256] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b677a | out: pbBuffer=0xc0002b677a) returned 1
	[0207.256] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000407c02 | out: pbBuffer=0xc000407c02) returned 1
	[0207.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67a0 | out: pbBuffer=0xc0002b67a0) returned 1
	[0207.257] GetFileType (hFile=0x168) returned 0x1
	[0207.257] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17924) returned 1
	[0207.257] WriteFile (in: hFile=0x168, lpBuffer=0xc00022e000*, nNumberOfBytesToWrite=0x4604, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00022e000*, lpNumberOfBytesWritten=0xc000155ccc*=0x4604, lpOverlapped=0xc000155ce8) returned 1
	[0207.258] GetFileType (hFile=0x168) returned 0x1
	[0207.258] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x4604, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17924) returned 1
	[0207.258] GetFileType (hFile=0x168) returned 0x1
	[0207.258] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=17924) returned 1
	[0207.258] WriteFile (in: hFile=0x168, lpBuffer=0xc0000e7c00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000e7c00*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0207.258] GetFileType (hFile=0x168) returned 0x1
	[0207.259] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x4604, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=17924) returned 1
	[0207.259] CloseHandle (hObject=0x168) returned 1
	[0207.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf.egmwv")) returned 0x20
	[0207.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.262] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.272] SetEvent (hEvent=0x90) returned 1
	[0207.272] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x20
	[0207.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x20) returned 1
	[0207.281] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.308] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0207.308] ReadFile (in: hFile=0x168, lpBuffer=0xc000298000, nNumberOfBytesToRead=0x9b8, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000298000*, lpNumberOfBytesRead=0xc0002d3cec*=0x9b8, lpOverlapped=0x0) returned 1
	[0207.315] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0207.315] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001002 | out: pbBuffer=0xc000001002) returned 1
	[0207.315] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000010dc | out: pbBuffer=0xc0000010dc) returned 1
	[0207.315] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0207.315] GetFileType (hFile=0x168) returned 0x1
	[0207.316] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0207.316] WriteFile (in: hFile=0x168, lpBuffer=0xc000382000*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000382000*, lpNumberOfBytesWritten=0xc00019dccc*=0x9b8, lpOverlapped=0xc00019dce8) returned 1
	[0207.316] GetFileType (hFile=0x168) returned 0x1
	[0207.317] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x9b8, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0207.317] GetFileType (hFile=0x168) returned 0x1
	[0207.317] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0207.317] WriteFile (in: hFile=0x168, lpBuffer=0xc00017d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00017d500*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0207.317] GetFileType (hFile=0x168) returned 0x1
	[0207.317] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x9b8, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0207.317] CloseHandle (hObject=0x168) returned 1
	[0207.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf.egmwv")) returned 0x20
	[0207.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.319] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.332] SetEvent (hEvent=0xc0) returned 1
	[0207.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x20
	[0207.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x20) returned 1
	[0207.334] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.362] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0207.362] ReadFile (in: hFile=0x168, lpBuffer=0xc000394000, nNumberOfBytesToRead=0xe70, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000394000*, lpNumberOfBytesRead=0xc000193cec*=0xe70, lpOverlapped=0x0) returned 1
	[0207.368] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0207.368] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0207.368] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215102 | out: pbBuffer=0xc000215102) returned 1
	[0207.368] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215136 | out: pbBuffer=0xc000215136) returned 1
	[0207.368] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215161 | out: pbBuffer=0xc000215161) returned 1
	[0207.369] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0207.369] GetFileType (hFile=0x168) returned 0x1
	[0207.369] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3696) returned 1
	[0207.369] WriteFile (in: hFile=0x168, lpBuffer=0xc000160000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000160000*, lpNumberOfBytesWritten=0xc000155ccc*=0xe70, lpOverlapped=0xc000155ce8) returned 1
	[0207.370] GetFileType (hFile=0x168) returned 0x1
	[0207.370] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe70, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3696) returned 1
	[0207.370] GetFileType (hFile=0x168) returned 0x1
	[0207.370] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3696) returned 1
	[0207.370] WriteFile (in: hFile=0x168, lpBuffer=0xc00006d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00006d500*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0207.371] GetFileType (hFile=0x168) returned 0x1
	[0207.371] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe70, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3696) returned 1
	[0207.371] CloseHandle (hObject=0x168) returned 1
	[0207.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf.egmwv")) returned 0x20
	[0207.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.373] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x20
	[0207.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x20) returned 1
	[0207.385] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.417] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0207.417] ReadFile (in: hFile=0x164, lpBuffer=0xc000412000, nNumberOfBytesToRead=0xf94, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000412000*, lpNumberOfBytesRead=0xc000193cec*=0xf94, lpOverlapped=0x0) returned 1
	[0207.433] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531d0 | out: pbBuffer=0xc0000531d0) returned 1
	[0207.433] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000531ea | out: pbBuffer=0xc0000531ea) returned 1
	[0207.433] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001da802 | out: pbBuffer=0xc0001da802) returned 1
	[0207.433] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053210 | out: pbBuffer=0xc000053210) returned 1
	[0207.433] GetFileType (hFile=0x164) returned 0x1
	[0207.434] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3988) returned 1
	[0207.434] WriteFile (in: hFile=0x164, lpBuffer=0xc0001ea000*, nNumberOfBytesToWrite=0xf94, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0001ea000*, lpNumberOfBytesWritten=0xc00019dccc*=0xf94, lpOverlapped=0xc00019dce8) returned 1
	[0207.434] GetFileType (hFile=0x164) returned 0x1
	[0207.434] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xf94, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3988) returned 1
	[0207.434] GetFileType (hFile=0x164) returned 0x1
	[0207.435] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3988) returned 1
	[0207.435] WriteFile (in: hFile=0x164, lpBuffer=0xc000411880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000411880*, lpNumberOfBytesWritten=0xc00019dccc*=0x22d, lpOverlapped=0xc00019dce8) returned 1
	[0207.438] GetFileType (hFile=0x164) returned 0x1
	[0207.438] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xf94, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3988) returned 1
	[0207.438] CloseHandle (hObject=0x164) returned 1
	[0207.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf.egmwv")) returned 0x20
	[0207.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.442] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x20
	[0207.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x20) returned 1
	[0207.448] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.482] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.482] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000a3500, nNumberOfBytesToRead=0x670, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000a3500*, lpNumberOfBytesRead=0xc000389cec*=0x670, lpOverlapped=0x0) returned 1
	[0207.489] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6450 | out: pbBuffer=0xc0002b6450) returned 1
	[0207.489] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b0602 | out: pbBuffer=0xc0000b0602) returned 1
	[0207.489] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6490 | out: pbBuffer=0xc0002b6490) returned 1
	[0207.489] GetFileType (hFile=0x17c) returned 0x1
	[0207.489] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1648) returned 1
	[0207.490] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000c0000*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0000c0000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x670, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.490] GetFileType (hFile=0x17c) returned 0x1
	[0207.490] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x670, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1648) returned 1
	[0207.490] GetFileType (hFile=0x17c) returned 0x1
	[0207.490] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1648) returned 1
	[0207.491] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000baa80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0000baa80*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x227, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.491] GetFileType (hFile=0x17c) returned 0x1
	[0207.491] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x670, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1648) returned 1
	[0207.492] CloseHandle (hObject=0x17c) returned 1
	[0207.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf.egmwv")) returned 0x20
	[0207.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.497] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.510] SetEvent (hEvent=0xc0) returned 1
	[0207.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid")) returned 0x20
	[0207.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x20) returned 1
	[0207.515] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid.egmwv"), dwFlags=0x1) returned 1
	[0207.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.543] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0207.543] ReadFile (in: hFile=0x164, lpBuffer=0xc00044c000, nNumberOfBytesToRead=0x2466, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00044c000*, lpNumberOfBytesRead=0xc0002d5cec*=0x2466, lpOverlapped=0x0) returned 1
	[0207.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0207.550] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003fdc02 | out: pbBuffer=0xc0003fdc02) returned 1
	[0207.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fdc2e | out: pbBuffer=0xc0003fdc2e) returned 1
	[0207.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fdc36 | out: pbBuffer=0xc0003fdc36) returned 1
	[0207.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003fdc7e | out: pbBuffer=0xc0003fdc7e) returned 1
	[0207.551] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0207.551] GetFileType (hFile=0x164) returned 0x1
	[0207.552] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002afca0*=9318) returned 1
	[0207.552] WriteFile (in: hFile=0x164, lpBuffer=0xc0003c4000*, nNumberOfBytesToWrite=0x2466, lpNumberOfBytesWritten=0xc0002afccc, lpOverlapped=0xc0002afce8 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesWritten=0xc0002afccc*=0x2466, lpOverlapped=0xc0002afce8) returned 1
	[0207.552] GetFileType (hFile=0x164) returned 0x1
	[0207.552] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2466, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002afca0*=9318) returned 1
	[0207.553] GetFileType (hFile=0x164) returned 0x1
	[0207.553] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002afca0*=9318) returned 1
	[0207.553] WriteFile (in: hFile=0x164, lpBuffer=0xc0003ace00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0002afccc, lpOverlapped=0xc0002afce8 | out: lpBuffer=0xc0003ace00*, lpNumberOfBytesWritten=0xc0002afccc*=0x22a, lpOverlapped=0xc0002afce8) returned 1
	[0207.553] GetFileType (hFile=0x164) returned 0x1
	[0207.553] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2466, lpNewFilePointer=0xc0002afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002afca0*=9318) returned 1
	[0207.553] CloseHandle (hObject=0x164) returned 1
	[0207.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid.egmwv")) returned 0x20
	[0207.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0207.558] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.559] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.570] SetEvent (hEvent=0xc0) returned 1
	[0207.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid")) returned 0x20
	[0207.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x20) returned 1
	[0207.573] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0207.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.595] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0207.595] ReadFile (in: hFile=0x164, lpBuffer=0xc000144000, nNumberOfBytesToRead=0x18bb, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000144000*, lpNumberOfBytesRead=0xc0002d5cec*=0x18bb, lpOverlapped=0x0) returned 1
	[0207.601] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145d0 | out: pbBuffer=0xc0004145d0) returned 1
	[0207.601] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000357802 | out: pbBuffer=0xc000357802) returned 1
	[0207.601] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414610 | out: pbBuffer=0xc000414610) returned 1
	[0207.601] GetFileType (hFile=0x164) returned 0x1
	[0207.601] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6331) returned 1
	[0207.601] WriteFile (in: hFile=0x164, lpBuffer=0xc0002f8000*, nNumberOfBytesToWrite=0x18bb, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesWritten=0xc000155ccc*=0x18bb, lpOverlapped=0xc000155ce8) returned 1
	[0207.602] GetFileType (hFile=0x164) returned 0x1
	[0207.602] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x18bb, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6331) returned 1
	[0207.602] GetFileType (hFile=0x164) returned 0x1
	[0207.602] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=6331) returned 1
	[0207.603] WriteFile (in: hFile=0x164, lpBuffer=0xc0002fa000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002fa000*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0207.603] GetFileType (hFile=0x164) returned 0x1
	[0207.603] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x18bb, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=6331) returned 1
	[0207.603] CloseHandle (hObject=0x164) returned 1
	[0207.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid.egmwv")) returned 0x20
	[0207.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0207.607] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.610] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.613] SetEvent (hEvent=0xc0) returned 1
	[0207.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x20
	[0207.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x20) returned 1
	[0207.615] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.642] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0207.642] ReadFile (in: hFile=0x168, lpBuffer=0xc000326000, nNumberOfBytesToRead=0x8b8, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000326000*, lpNumberOfBytesRead=0xc000193cec*=0x8b8, lpOverlapped=0x0) returned 1
	[0207.647] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0207.648] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.649] SetEvent (hEvent=0x70) returned 1
	[0207.649] SetEvent (hEvent=0x15c) returned 1
	[0207.649] SetEvent (hEvent=0xc0) returned 1
	[0207.649] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414770 | out: pbBuffer=0xc000414770) returned 1
	[0207.649] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041478a | out: pbBuffer=0xc00041478a) returned 1
	[0207.650] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000330402 | out: pbBuffer=0xc000330402) returned 1
	[0207.650] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003304b4 | out: pbBuffer=0xc0003304b4) returned 1
	[0207.650] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003304b7 | out: pbBuffer=0xc0003304b7) returned 1
	[0207.650] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004147b0 | out: pbBuffer=0xc0004147b0) returned 1
	[0207.650] GetFileType (hFile=0x168) returned 0x1
	[0207.650] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2232) returned 1
	[0207.650] WriteFile (in: hFile=0x168, lpBuffer=0xc00033b000*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00033b000*, lpNumberOfBytesWritten=0xc000155ccc*=0x8b8, lpOverlapped=0xc000155ce8) returned 1
	[0207.650] GetFileType (hFile=0x168) returned 0x1
	[0207.651] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8b8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2232) returned 1
	[0207.651] GetFileType (hFile=0x168) returned 0x1
	[0207.651] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2232) returned 1
	[0207.651] WriteFile (in: hFile=0x168, lpBuffer=0xc0002fb880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002fb880*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0207.651] GetFileType (hFile=0x168) returned 0x1
	[0207.651] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8b8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2232) returned 1
	[0207.651] CloseHandle (hObject=0x168) returned 1
	[0207.654] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf.egmwv")) returned 0x20
	[0207.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.659] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.670] SetEvent (hEvent=0xe4) returned 1
	[0207.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x20
	[0207.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x20) returned 1
	[0207.672] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.702] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0207.702] ReadFile (in: hFile=0x17c, lpBuffer=0xc000158800, nNumberOfBytesToRead=0x7a8, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000158800*, lpNumberOfBytesRead=0xc0002d3cec*=0x7a8, lpOverlapped=0x0) returned 1
	[0207.708] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414410 | out: pbBuffer=0xc000414410) returned 1
	[0207.708] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0202 | out: pbBuffer=0xc0002c0202) returned 1
	[0207.708] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0207.708] GetFileType (hFile=0x17c) returned 0x1
	[0207.708] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1960) returned 1
	[0207.708] WriteFile (in: hFile=0x17c, lpBuffer=0xc000347000*, nNumberOfBytesToWrite=0x7a8, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000347000*, lpNumberOfBytesWritten=0xc000155ccc*=0x7a8, lpOverlapped=0xc000155ce8) returned 1
	[0207.709] GetFileType (hFile=0x17c) returned 0x1
	[0207.709] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x7a8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1960) returned 1
	[0207.709] GetFileType (hFile=0x17c) returned 0x1
	[0207.709] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=1960) returned 1
	[0207.709] WriteFile (in: hFile=0x17c, lpBuffer=0xc000211880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000211880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0207.710] GetFileType (hFile=0x17c) returned 0x1
	[0207.710] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x7a8, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=1960) returned 1
	[0207.710] CloseHandle (hObject=0x17c) returned 1
	[0207.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf.egmwv")) returned 0x20
	[0207.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.714] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.728] SetEvent (hEvent=0xe4) returned 1
	[0207.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x20
	[0207.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x20) returned 1
	[0207.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.760] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0207.761] ReadFile (in: hFile=0x164, lpBuffer=0xc000418c00, nNumberOfBytesToRead=0x5f8, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000418c00*, lpNumberOfBytesRead=0xc0002d3cec*=0x5f8, lpOverlapped=0x0) returned 1
	[0207.765] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0207.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0207.766] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000356002 | out: pbBuffer=0xc000356002) returned 1
	[0207.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000356036 | out: pbBuffer=0xc000356036) returned 1
	[0207.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00035609b | out: pbBuffer=0xc00035609b) returned 1
	[0207.766] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0207.766] GetFileType (hFile=0x164) returned 0x1
	[0207.766] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1528) returned 1
	[0207.767] WriteFile (in: hFile=0x164, lpBuffer=0xc0002c7000*, nNumberOfBytesToWrite=0x5f8, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0002c7000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x5f8, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.767] GetFileType (hFile=0x164) returned 0x1
	[0207.767] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x5f8, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1528) returned 1
	[0207.767] GetFileType (hFile=0x164) returned 0x1
	[0207.767] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=1528) returned 1
	[0207.767] WriteFile (in: hFile=0x164, lpBuffer=0xc0002c2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0002c2e00*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22d, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.768] GetFileType (hFile=0x164) returned 0x1
	[0207.768] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x5f8, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=1528) returned 1
	[0207.768] CloseHandle (hObject=0x164) returned 1
	[0207.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf.egmwv")) returned 0x20
	[0207.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.770] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.783] SetEvent (hEvent=0xe4) returned 1
	[0207.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x20
	[0207.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x20) returned 1
	[0207.787] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.812] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0207.813] ReadFile (in: hFile=0x164, lpBuffer=0xc000364000, nNumberOfBytesToRead=0x3960, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000364000*, lpNumberOfBytesRead=0xc000197cec*=0x3960, lpOverlapped=0x0) returned 1
	[0207.818] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0207.818] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039802 | out: pbBuffer=0xc000039802) returned 1
	[0207.818] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0207.819] GetFileType (hFile=0x164) returned 0x1
	[0207.819] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=14688) returned 1
	[0207.819] WriteFile (in: hFile=0x164, lpBuffer=0xc0000e4000*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0000e4000*, lpNumberOfBytesWritten=0xc000459ccc*=0x3960, lpOverlapped=0xc000459ce8) returned 1
	[0207.819] GetFileType (hFile=0x164) returned 0x1
	[0207.820] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3960, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=14688) returned 1
	[0207.820] GetFileType (hFile=0x164) returned 0x1
	[0207.820] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=14688) returned 1
	[0207.820] WriteFile (in: hFile=0x164, lpBuffer=0xc0002a3500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0002a3500*, lpNumberOfBytesWritten=0xc000459ccc*=0x22a, lpOverlapped=0xc000459ce8) returned 1
	[0207.820] GetFileType (hFile=0x164) returned 0x1
	[0207.821] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3960, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=14688) returned 1
	[0207.821] CloseHandle (hObject=0x164) returned 1
	[0207.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf.egmwv")) returned 0x20
	[0207.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.824] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.827] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.829] SetEvent (hEvent=0xe4) returned 1
	[0207.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x20
	[0207.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x20) returned 1
	[0207.831] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.858] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0207.858] ReadFile (in: hFile=0x168, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0xe86, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc000387cec*=0xe86, lpOverlapped=0x0) returned 1
	[0207.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0207.864] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000330b02 | out: pbBuffer=0xc000330b02) returned 1
	[0207.864] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0207.865] GetFileType (hFile=0x168) returned 0x1
	[0207.865] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=3718) returned 1
	[0207.865] WriteFile (in: hFile=0x168, lpBuffer=0xc0003f2000*, nNumberOfBytesToWrite=0xe86, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesWritten=0xc000459ccc*=0xe86, lpOverlapped=0xc000459ce8) returned 1
	[0207.865] GetFileType (hFile=0x168) returned 0x1
	[0207.865] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe86, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=3718) returned 1
	[0207.866] GetFileType (hFile=0x168) returned 0x1
	[0207.866] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=3718) returned 1
	[0207.866] WriteFile (in: hFile=0x168, lpBuffer=0xc0000b6e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0000b6e00*, lpNumberOfBytesWritten=0xc000459ccc*=0x22a, lpOverlapped=0xc000459ce8) returned 1
	[0207.867] GetFileType (hFile=0x168) returned 0x1
	[0207.867] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe86, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=3718) returned 1
	[0207.867] CloseHandle (hObject=0x168) returned 1
	[0207.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf.egmwv")) returned 0x20
	[0207.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.874] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x20
	[0207.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x20) returned 1
	[0207.879] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.913] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0207.913] ReadFile (in: hFile=0x17c, lpBuffer=0xc000120000, nNumberOfBytesToRead=0x3158, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000120000*, lpNumberOfBytesRead=0xc000387cec*=0x3158, lpOverlapped=0x0) returned 1
	[0207.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414a20 | out: pbBuffer=0xc000414a20) returned 1
	[0207.921] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000404f02 | out: pbBuffer=0xc000404f02) returned 1
	[0207.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000404f4e | out: pbBuffer=0xc000404f4e) returned 1
	[0207.921] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414a60 | out: pbBuffer=0xc000414a60) returned 1
	[0207.921] GetFileType (hFile=0x17c) returned 0x1
	[0207.921] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12632) returned 1
	[0207.922] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003c8000*, nNumberOfBytesToWrite=0x3158, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c8000*, lpNumberOfBytesWritten=0xc000155ccc*=0x3158, lpOverlapped=0xc000155ce8) returned 1
	[0207.922] GetFileType (hFile=0x17c) returned 0x1
	[0207.923] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x3158, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12632) returned 1
	[0207.923] GetFileType (hFile=0x17c) returned 0x1
	[0207.923] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12632) returned 1
	[0207.923] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003ac380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003ac380*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0207.923] GetFileType (hFile=0x17c) returned 0x1
	[0207.923] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x3158, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12632) returned 1
	[0207.924] CloseHandle (hObject=0x17c) returned 1
	[0207.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf.egmwv")) returned 0x20
	[0207.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.929] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.945] SetEvent (hEvent=0xe4) returned 1
	[0207.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x20
	[0207.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x20) returned 1
	[0207.949] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.971] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0207.971] ReadFile (in: hFile=0x164, lpBuffer=0xc000369c00, nNumberOfBytesToRead=0x620, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000369c00*, lpNumberOfBytesRead=0xc000387cec*=0x620, lpOverlapped=0x0) returned 1
	[0207.976] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0207.976] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001f0302 | out: pbBuffer=0xc0001f0302) returned 1
	[0207.977] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0207.977] GetFileType (hFile=0x164) returned 0x1
	[0207.977] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1568) returned 1
	[0207.977] WriteFile (in: hFile=0x164, lpBuffer=0xc0001f8000*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0001f8000*, lpNumberOfBytesWritten=0xc000459ccc*=0x620, lpOverlapped=0xc000459ce8) returned 1
	[0207.978] GetFileType (hFile=0x164) returned 0x1
	[0207.978] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x620, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1568) returned 1
	[0207.978] GetFileType (hFile=0x164) returned 0x1
	[0207.978] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1568) returned 1
	[0207.978] WriteFile (in: hFile=0x164, lpBuffer=0xc0001fc000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0001fc000*, lpNumberOfBytesWritten=0xc000459ccc*=0x221, lpOverlapped=0xc000459ce8) returned 1
	[0207.978] GetFileType (hFile=0x164) returned 0x1
	[0207.978] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x620, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1568) returned 1
	[0207.979] CloseHandle (hObject=0x164) returned 1
	[0207.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf.egmwv")) returned 0x20
	[0207.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.981] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.994] SetEvent (hEvent=0x90) returned 1
	[0207.994] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0207.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x20
	[0207.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x20) returned 1
	[0208.003] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.024] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0208.024] ReadFile (in: hFile=0x164, lpBuffer=0xc000419000, nNumberOfBytesToRead=0xfc0, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000419000*, lpNumberOfBytesRead=0xc000193cec*=0xfc0, lpOverlapped=0x0) returned 1
	[0208.028] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206290 | out: pbBuffer=0xc000206290) returned 1
	[0208.028] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062aa | out: pbBuffer=0xc0002062aa) returned 1
	[0208.028] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000405502 | out: pbBuffer=0xc000405502) returned 1
	[0208.028] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004055d5 | out: pbBuffer=0xc0004055d5) returned 1
	[0208.029] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062d0 | out: pbBuffer=0xc0002062d0) returned 1
	[0208.029] GetFileType (hFile=0x164) returned 0x1
	[0208.029] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4032) returned 1
	[0208.029] WriteFile (in: hFile=0x164, lpBuffer=0xc000182000*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000182000*, lpNumberOfBytesWritten=0xc000155ccc*=0xfc0, lpOverlapped=0xc000155ce8) returned 1
	[0208.030] GetFileType (hFile=0x164) returned 0x1
	[0208.030] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xfc0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4032) returned 1
	[0208.030] GetFileType (hFile=0x164) returned 0x1
	[0208.030] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4032) returned 1
	[0208.030] WriteFile (in: hFile=0x164, lpBuffer=0xc00019f180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00019f180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0208.031] GetFileType (hFile=0x164) returned 0x1
	[0208.031] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xfc0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4032) returned 1
	[0208.031] CloseHandle (hObject=0x164) returned 1
	[0208.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf.egmwv")) returned 0x20
	[0208.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.033] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x20
	[0208.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x20) returned 1
	[0208.039] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0208.073] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0208.074] ReadFile (in: hFile=0x168, lpBuffer=0xc000074000, nNumberOfBytesToRead=0x1bba, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000074000*, lpNumberOfBytesRead=0xc000193cec*=0x1bba, lpOverlapped=0x0) returned 1
	[0208.078] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0208.079] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001402 | out: pbBuffer=0xc000001402) returned 1
	[0208.079] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000148a | out: pbBuffer=0xc00000148a) returned 1
	[0208.079] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0208.079] GetFileType (hFile=0x168) returned 0x1
	[0208.079] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=7098) returned 1
	[0208.079] WriteFile (in: hFile=0x168, lpBuffer=0xc0002ea000*, nNumberOfBytesToWrite=0x1bba, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0002ea000*, lpNumberOfBytesWritten=0xc000455ccc*=0x1bba, lpOverlapped=0xc000455ce8) returned 1
	[0208.080] GetFileType (hFile=0x168) returned 0x1
	[0208.080] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1bba, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=7098) returned 1
	[0208.080] GetFileType (hFile=0x168) returned 0x1
	[0208.080] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=7098) returned 1
	[0208.080] WriteFile (in: hFile=0x168, lpBuffer=0xc0002cf500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0002cf500*, lpNumberOfBytesWritten=0xc000455ccc*=0x233, lpOverlapped=0xc000455ce8) returned 1
	[0208.081] GetFileType (hFile=0x168) returned 0x1
	[0208.081] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1bba, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=7098) returned 1
	[0208.081] CloseHandle (hObject=0x168) returned 1
	[0208.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf.egmwv")) returned 0x20
	[0208.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.085] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x20
	[0208.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x20) returned 1
	[0208.091] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0208.122] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0208.122] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003f8000, nNumberOfBytesToRead=0xac4, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f8000*, lpNumberOfBytesRead=0xc000193cec*=0xac4, lpOverlapped=0x0) returned 1
	[0208.127] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65d0 | out: pbBuffer=0xc0002b65d0) returned 1
	[0208.127] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65ea | out: pbBuffer=0xc0002b65ea) returned 1
	[0208.127] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a9002 | out: pbBuffer=0xc0002a9002) returned 1
	[0208.127] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a903b | out: pbBuffer=0xc0002a903b) returned 1
	[0208.127] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6610 | out: pbBuffer=0xc0002b6610) returned 1
	[0208.127] GetFileType (hFile=0x17c) returned 0x1
	[0208.128] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=2756) returned 1
	[0208.128] WriteFile (in: hFile=0x17c, lpBuffer=0xc000370000*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000370000*, lpNumberOfBytesWritten=0xc000459ccc*=0xac4, lpOverlapped=0xc000459ce8) returned 1
	[0208.128] GetFileType (hFile=0x17c) returned 0x1
	[0208.128] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xac4, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=2756) returned 1
	[0208.128] GetFileType (hFile=0x17c) returned 0x1
	[0208.129] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=2756) returned 1
	[0208.129] WriteFile (in: hFile=0x17c, lpBuffer=0xc000374000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000374000*, lpNumberOfBytesWritten=0xc000459ccc*=0x227, lpOverlapped=0xc000459ce8) returned 1
	[0208.129] GetFileType (hFile=0x17c) returned 0x1
	[0208.129] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xac4, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=2756) returned 1
	[0208.129] CloseHandle (hObject=0x17c) returned 1
	[0208.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf.egmwv")) returned 0x20
	[0208.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.134] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.147] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.157] SetEvent (hEvent=0x60) returned 1
	[0208.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x20
	[0208.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x20) returned 1
	[0208.160] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0208.183] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0208.183] ReadFile (in: hFile=0x17c, lpBuffer=0xc00021c000, nNumberOfBytesToRead=0x1cac, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00021c000*, lpNumberOfBytesRead=0xc000389cec*=0x1cac, lpOverlapped=0x0) returned 1
	[0208.189] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0208.189] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0208.189] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1102 | out: pbBuffer=0xc0002c1102) returned 1
	[0208.189] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0208.189] GetFileType (hFile=0x17c) returned 0x1
	[0208.189] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=7340) returned 1
	[0208.189] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000c6000*, nNumberOfBytesToWrite=0x1cac, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc0000c6000*, lpNumberOfBytesWritten=0xc0001bbccc*=0x1cac, lpOverlapped=0xc0001bbce8) returned 1
	[0208.190] GetFileType (hFile=0x17c) returned 0x1
	[0208.190] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1cac, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=7340) returned 1
	[0208.191] GetFileType (hFile=0x17c) returned 0x1
	[0208.191] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=7340) returned 1
	[0208.191] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001c3500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc0001c3500*, lpNumberOfBytesWritten=0xc0001bbccc*=0x22d, lpOverlapped=0xc0001bbce8) returned 1
	[0208.191] GetFileType (hFile=0x17c) returned 0x1
	[0208.191] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1cac, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=7340) returned 1
	[0208.191] CloseHandle (hObject=0x17c) returned 1
	[0208.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf.egmwv")) returned 0x20
	[0208.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.193] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.247] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.252] SetEvent (hEvent=0x60) returned 1
	[0208.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x20
	[0208.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x20) returned 1
	[0208.255] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.276] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0208.276] ReadFile (in: hFile=0x164, lpBuffer=0xc0003a8000, nNumberOfBytesToRead=0x1746, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a8000*, lpNumberOfBytesRead=0xc0002d7cec*=0x1746, lpOverlapped=0x0) returned 1
	[0208.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0208.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d2a | out: pbBuffer=0xc000052d2a) returned 1
	[0208.349] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000314102 | out: pbBuffer=0xc000314102) returned 1
	[0208.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003141dc | out: pbBuffer=0xc0003141dc) returned 1
	[0208.349] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0208.350] GetFileType (hFile=0x164) returned 0x1
	[0208.350] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=5958) returned 1
	[0208.350] WriteFile (in: hFile=0x164, lpBuffer=0xc000322000*, nNumberOfBytesToWrite=0x1746, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc000322000*, lpNumberOfBytesWritten=0xc0001bbccc*=0x1746, lpOverlapped=0xc0001bbce8) returned 1
	[0208.350] GetFileType (hFile=0x164) returned 0x1
	[0208.350] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1746, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=5958) returned 1
	[0208.350] GetFileType (hFile=0x164) returned 0x1
	[0208.351] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=5958) returned 1
	[0208.351] WriteFile (in: hFile=0x164, lpBuffer=0xc000312e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc000312e00*, lpNumberOfBytesWritten=0xc0001bbccc*=0x22d, lpOverlapped=0xc0001bbce8) returned 1
	[0208.351] GetFileType (hFile=0x164) returned 0x1
	[0208.351] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1746, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=5958) returned 1
	[0208.351] CloseHandle (hObject=0x164) returned 1
	[0208.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf.egmwv")) returned 0x20
	[0208.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.371] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf.egmwv")) returned 0x20
	[0208.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.386] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x20
	[0208.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x20) returned 1
	[0208.421] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.450] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0208.455] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0208.455] ReadFile (in: hFile=0x168, lpBuffer=0xc00017c000, nNumberOfBytesToRead=0xc0a, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesRead=0xc000425cec*=0xc0a, lpOverlapped=0x0) returned 1
	[0208.460] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0208.461] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0208.461] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0208.461] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214fcc | out: pbBuffer=0xc000214fcc) returned 1
	[0208.461] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0208.461] GetFileType (hFile=0x168) returned 0x1
	[0208.461] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=3082) returned 1
	[0208.461] WriteFile (in: hFile=0x168, lpBuffer=0xc000478000*, nNumberOfBytesToWrite=0xc0a, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000478000*, lpNumberOfBytesWritten=0xc000459ccc*=0xc0a, lpOverlapped=0xc000459ce8) returned 1
	[0208.462] GetFileType (hFile=0x168) returned 0x1
	[0208.462] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc0a, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=3082) returned 1
	[0208.462] GetFileType (hFile=0x168) returned 0x1
	[0208.462] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=3082) returned 1
	[0208.463] WriteFile (in: hFile=0x168, lpBuffer=0xc0003e7500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0003e7500*, lpNumberOfBytesWritten=0xc000459ccc*=0x224, lpOverlapped=0xc000459ce8) returned 1
	[0208.463] GetFileType (hFile=0x168) returned 0x1
	[0208.463] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xc0a, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=3082) returned 1
	[0208.463] CloseHandle (hObject=0x168) returned 1
	[0208.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf.egmwv")) returned 0x20
	[0208.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.466] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.470] SetEvent (hEvent=0x15c) returned 1
	[0208.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x20
	[0208.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x20) returned 1
	[0208.472] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.491] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0208.491] ReadFile (in: hFile=0x164, lpBuffer=0xc00006e000, nNumberOfBytesToRead=0x3dec, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc00006e000*, lpNumberOfBytesRead=0xc0002d5cec*=0x3dec, lpOverlapped=0x0) returned 1
	[0208.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414280 | out: pbBuffer=0xc000414280) returned 1
	[0208.522] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0208.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b14 | out: pbBuffer=0xc0002c1b14) returned 1
	[0208.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b5d | out: pbBuffer=0xc0002c1b5d) returned 1
	[0208.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b5d | out: pbBuffer=0xc0002c1b5d) returned 1
	[0208.522] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142c0 | out: pbBuffer=0xc0004142c0) returned 1
	[0208.522] GetFileType (hFile=0x164) returned 0x1
	[0208.523] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=15852) returned 1
	[0208.523] WriteFile (in: hFile=0x164, lpBuffer=0xc00042a000*, nNumberOfBytesToWrite=0x3dec, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesWritten=0xc000377ccc*=0x3dec, lpOverlapped=0xc000377ce8) returned 1
	[0208.523] GetFileType (hFile=0x164) returned 0x1
	[0208.523] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3dec, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=15852) returned 1
	[0208.524] GetFileType (hFile=0x164) returned 0x1
	[0208.524] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=15852) returned 1
	[0208.524] WriteFile (in: hFile=0x164, lpBuffer=0xc000350e00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc000350e00*, lpNumberOfBytesWritten=0xc000377ccc*=0x236, lpOverlapped=0xc000377ce8) returned 1
	[0208.524] GetFileType (hFile=0x164) returned 0x1
	[0208.525] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x3dec, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=15852) returned 1
	[0208.525] CloseHandle (hObject=0x164) returned 1
	[0208.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf.egmwv")) returned 0x20
	[0208.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.533] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.538] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.670] SetEvent (hEvent=0x5c) returned 1
	[0208.670] SetEvent (hEvent=0x148) returned 1
	[0208.670] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.697] SwitchToThread () returned 1
	[0208.699] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.723] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.730] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.749] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.776] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.794] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.802] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.830] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.850] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.869] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.885] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.898] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.925] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.940] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.947] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.971] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.981] SetEvent (hEvent=0x5c) returned 1
	[0208.981] SetEvent (hEvent=0xc0) returned 1
	[0208.981] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0208.984] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0208.984] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x0
	[0208.986] SetEvent (hEvent=0x148) returned 1
	[0208.986] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x0
	[0208.987] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.348] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.351] SetEvent (hEvent=0x5c) returned 1
	[0209.351] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.353] SetEvent (hEvent=0x5c) returned 1
	[0209.353] SetEvent (hEvent=0xc0) returned 1
	[0209.353] SwitchToThread () returned 1
	[0209.378] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.384] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.418] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.450] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.463] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.492] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.525] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.546] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.572] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.591] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.670] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.708] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.723] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.816] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.823] SetEvent (hEvent=0xc0) returned 1
	[0209.823] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0209.827] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.828] SetEvent (hEvent=0xc0) returned 1
	[0209.828] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0209.836] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0209.836] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.059] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.063] SetEvent (hEvent=0xc0) returned 1
	[0210.063] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.069] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.075] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.095] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.122] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.135] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.168] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.197] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.217] SetEvent (hEvent=0xc0) returned 1
	[0210.218] SetEvent (hEvent=0x5c) returned 1
	[0210.218] SetEvent (hEvent=0xe4) returned 1
	[0210.218] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x0
	[0210.221] SetEvent (hEvent=0xc0) returned 1
	[0210.222] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x0
	[0210.223] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.523] SetEvent (hEvent=0x15c) returned 1
	[0210.523] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.951] SetEvent (hEvent=0xc0) returned 1
	[0210.951] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.954] SetEvent (hEvent=0xc0) returned 1
	[0210.954] SetEvent (hEvent=0xe4) returned 1
	[0210.954] SwitchToThread () returned 1
	[0210.955] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.967] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.986] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0210.994] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.015] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.034] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp")) returned 0x20
	[0211.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP", dwFileAttributes=0x20) returned 1
	[0211.039] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.071] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0211.071] ReadFile (in: hFile=0x178, lpBuffer=0xc0002fa000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002fa000*, lpNumberOfBytesRead=0xc00016dcec*=0x7ce0, lpOverlapped=0x0) returned 1
	[0211.078] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053200 | out: pbBuffer=0xc000053200) returned 1
	[0211.079] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000308302 | out: pbBuffer=0xc000308302) returned 1
	[0211.079] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00030831d | out: pbBuffer=0xc00030831d) returned 1
	[0211.079] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053240 | out: pbBuffer=0xc000053240) returned 1
	[0211.079] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x0
	[0211.081] SetEvent (hEvent=0x70) returned 1
	[0211.081] SetEvent (hEvent=0x148) returned 1
	[0211.081] SetEvent (hEvent=0x90) returned 1
	[0211.082] GetFileType (hFile=0x178) returned 0x1
	[0211.082] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=31968) returned 1
	[0211.082] WriteFile (in: hFile=0x178, lpBuffer=0xc0004d0000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0004d0000*, lpNumberOfBytesWritten=0xc000351ccc*=0x7ce0, lpOverlapped=0xc000351ce8) returned 1
	[0211.083] GetFileType (hFile=0x178) returned 0x1
	[0211.083] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7ce0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=31968) returned 1
	[0211.083] GetFileType (hFile=0x178) returned 0x1
	[0211.083] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=31968) returned 1
	[0211.083] WriteFile (in: hFile=0x178, lpBuffer=0xc000283880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000283880*, lpNumberOfBytesWritten=0xc000351ccc*=0x230, lpOverlapped=0xc000351ce8) returned 1
	[0211.083] GetFileType (hFile=0x178) returned 0x1
	[0211.084] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7ce0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=31968) returned 1
	[0211.084] CloseHandle (hObject=0x178) returned 1
	[0211.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp.egmwv")) returned 0x20
	[0211.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.114] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.119] SetEvent (hEvent=0xe4) returned 1
	[0211.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp")) returned 0x20
	[0211.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP", dwFileAttributes=0x20) returned 1
	[0211.120] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.148] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0211.148] ReadFile (in: hFile=0xe0, lpBuffer=0xc00017e000, nNumberOfBytesToRead=0x7f68, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00017e000*, lpNumberOfBytesRead=0xc00016bcec*=0x7f68, lpOverlapped=0x0) returned 1
	[0211.155] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0211.155] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0211.155] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000012a0 | out: pbBuffer=0xc0000012a0) returned 1
	[0211.155] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0211.156] GetFileType (hFile=0xe0) returned 0x1
	[0211.156] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=32616) returned 1
	[0211.156] WriteFile (in: hFile=0xe0, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x7f68, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc00034dccc*=0x7f68, lpOverlapped=0xc00034dce8) returned 1
	[0211.157] GetFileType (hFile=0xe0) returned 0x1
	[0211.157] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7f68, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=32616) returned 1
	[0211.157] GetFileType (hFile=0xe0) returned 0x1
	[0211.157] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00034dca0*=32616) returned 1
	[0211.158] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003dd500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc00034dccc, lpOverlapped=0xc00034dce8 | out: lpBuffer=0xc0003dd500*, lpNumberOfBytesWritten=0xc00034dccc*=0x236, lpOverlapped=0xc00034dce8) returned 1
	[0211.158] GetFileType (hFile=0xe0) returned 0x1
	[0211.158] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7f68, lpNewFilePointer=0xc00034dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00034dca0*=32616) returned 1
	[0211.158] CloseHandle (hObject=0xe0) returned 1
	[0211.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp.egmwv")) returned 0x20
	[0211.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.163] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.178] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.298] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.306] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.334] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.356] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.372] SetEvent (hEvent=0x5c) returned 1
	[0211.373] SetEvent (hEvent=0x90) returned 1
	[0211.373] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0211.376] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.376] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0211.378] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.378] SetEvent (hEvent=0x5c) returned 1
	[0211.378] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0211.380] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.381] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.630] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.632] SetEvent (hEvent=0xe4) returned 1
	[0211.633] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.637] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.642] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.664] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.681] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.692] SetEvent (hEvent=0x15c) returned 1
	[0211.692] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.697] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.710] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.730] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.753] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.764] SetEvent (hEvent=0x148) returned 1
	[0211.764] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.769] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.780] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.802] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.819] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.827] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.870] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.893] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.908] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.923] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.928] SetEvent (hEvent=0xe4) returned 1
	[0211.929] SetEvent (hEvent=0x90) returned 1
	[0211.929] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0211.930] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.930] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0211.932] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.932] SetEvent (hEvent=0xe4) returned 1
	[0211.933] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x1) returned 0x102
	[0211.935] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0211.936] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.189] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.192] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.193] SetEvent (hEvent=0x15c) returned 1
	[0212.193] SetEvent (hEvent=0x5c) returned 1
	[0212.193] SwitchToThread () returned 1
	[0212.194] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.205] SetEvent (hEvent=0x5c) returned 1
	[0212.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf")) returned 0x20
	[0212.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF", dwFileAttributes=0x20) returned 1
	[0212.208] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.237] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0212.237] ReadFile (in: hFile=0xe0, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1424, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc000169cec*=0x1424, lpOverlapped=0x0) returned 1
	[0212.242] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0212.242] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0212.242] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0212.242] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0212.242] GetFileType (hFile=0xe0) returned 0x1
	[0212.243] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c5ca0*=5156) returned 1
	[0212.243] WriteFile (in: hFile=0xe0, lpBuffer=0xc000226000*, nNumberOfBytesToWrite=0x1424, lpNumberOfBytesWritten=0xc0002c5ccc, lpOverlapped=0xc0002c5ce8 | out: lpBuffer=0xc000226000*, lpNumberOfBytesWritten=0xc0002c5ccc*=0x1424, lpOverlapped=0xc0002c5ce8) returned 1
	[0212.243] GetFileType (hFile=0xe0) returned 0x1
	[0212.244] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1424, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c5ca0*=5156) returned 1
	[0212.244] GetFileType (hFile=0xe0) returned 0x1
	[0212.244] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c5ca0*=5156) returned 1
	[0212.244] WriteFile (in: hFile=0xe0, lpBuffer=0xc000397500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0002c5ccc, lpOverlapped=0xc0002c5ce8 | out: lpBuffer=0xc000397500*, lpNumberOfBytesWritten=0xc0002c5ccc*=0x224, lpOverlapped=0xc0002c5ce8) returned 1
	[0212.244] GetFileType (hFile=0xe0) returned 0x1
	[0212.245] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1424, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c5ca0*=5156) returned 1
	[0212.245] CloseHandle (hObject=0xe0) returned 1
	[0212.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf.egmwv")) returned 0x20
	[0212.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.247] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.255] SetEvent (hEvent=0x5c) returned 1
	[0212.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf")) returned 0x20
	[0212.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF", dwFileAttributes=0x20) returned 1
	[0212.262] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0212.285] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0212.285] ReadFile (in: hFile=0x178, lpBuffer=0xc000370000, nNumberOfBytesToRead=0xb60, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000370000*, lpNumberOfBytesRead=0xc000423cec*=0xb60, lpOverlapped=0x0) returned 1
	[0212.291] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206280 | out: pbBuffer=0xc000206280) returned 1
	[0212.291] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fe102 | out: pbBuffer=0xc0000fe102) returned 1
	[0212.291] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000fe17b | out: pbBuffer=0xc0000fe17b) returned 1
	[0212.291] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000fe1df | out: pbBuffer=0xc0000fe1df) returned 1
	[0212.291] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0212.292] GetFileType (hFile=0x178) returned 0x1
	[0212.292] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2912) returned 1
	[0212.292] WriteFile (in: hFile=0x178, lpBuffer=0xc000108000*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000108000*, lpNumberOfBytesWritten=0xc000155ccc*=0xb60, lpOverlapped=0xc000155ce8) returned 1
	[0212.292] GetFileType (hFile=0x178) returned 0x1
	[0212.292] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xb60, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2912) returned 1
	[0212.293] GetFileType (hFile=0x178) returned 0x1
	[0212.293] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2912) returned 1
	[0212.293] WriteFile (in: hFile=0x178, lpBuffer=0xc0000f9180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f9180*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0212.293] GetFileType (hFile=0x178) returned 0x1
	[0212.294] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xb60, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2912) returned 1
	[0212.294] CloseHandle (hObject=0x178) returned 1
	[0212.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf.egmwv")) returned 0x20
	[0212.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.297] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.301] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.304] SetEvent (hEvent=0x148) returned 1
	[0212.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf")) returned 0x20
	[0212.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF", dwFileAttributes=0x20) returned 1
	[0212.305] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0212.341] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0212.341] ReadFile (in: hFile=0x170, lpBuffer=0xc0002fc000, nNumberOfBytesToRead=0x1cd8, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002fc000*, lpNumberOfBytesRead=0xc000429cec*=0x1cd8, lpOverlapped=0x0) returned 1
	[0212.347] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0212.347] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0212.348] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1bab | out: pbBuffer=0xc0002c1bab) returned 1
	[0212.348] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0212.348] GetFileType (hFile=0x170) returned 0x1
	[0212.348] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001c3ca0*=7384) returned 1
	[0212.348] WriteFile (in: hFile=0x170, lpBuffer=0xc00027e000*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0xc0001c3ccc, lpOverlapped=0xc0001c3ce8 | out: lpBuffer=0xc00027e000*, lpNumberOfBytesWritten=0xc0001c3ccc*=0x1cd8, lpOverlapped=0xc0001c3ce8) returned 1
	[0212.349] GetFileType (hFile=0x170) returned 0x1
	[0212.349] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1cd8, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001c3ca0*=7384) returned 1
	[0212.349] GetFileType (hFile=0x170) returned 0x1
	[0212.349] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001c3ca0*=7384) returned 1
	[0212.350] WriteFile (in: hFile=0x170, lpBuffer=0xc000266e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001c3ccc, lpOverlapped=0xc0001c3ce8 | out: lpBuffer=0xc000266e00*, lpNumberOfBytesWritten=0xc0001c3ccc*=0x22d, lpOverlapped=0xc0001c3ce8) returned 1
	[0212.350] GetFileType (hFile=0x170) returned 0x1
	[0212.350] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1cd8, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001c3ca0*=7384) returned 1
	[0212.350] CloseHandle (hObject=0x170) returned 1
	[0212.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf.egmwv")) returned 0x20
	[0212.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.353] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf")) returned 0x20
	[0212.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF", dwFileAttributes=0x20) returned 1
	[0212.368] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.404] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0212.404] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003be000, nNumberOfBytesToRead=0x287c, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003be000*, lpNumberOfBytesRead=0xc000429cec*=0x287c, lpOverlapped=0x0) returned 1
	[0212.410] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0212.411] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003c6802 | out: pbBuffer=0xc0003c6802) returned 1
	[0212.411] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003c688f | out: pbBuffer=0xc0003c688f) returned 1
	[0212.411] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0212.411] GetFileType (hFile=0xe0) returned 0x1
	[0212.411] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001c3ca0*=10364) returned 1
	[0212.411] WriteFile (in: hFile=0xe0, lpBuffer=0xc00024c000*, nNumberOfBytesToWrite=0x287c, lpNumberOfBytesWritten=0xc0001c3ccc, lpOverlapped=0xc0001c3ce8 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesWritten=0xc0001c3ccc*=0x287c, lpOverlapped=0xc0001c3ce8) returned 1
	[0212.412] GetFileType (hFile=0xe0) returned 0x1
	[0212.412] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x287c, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001c3ca0*=10364) returned 1
	[0212.412] GetFileType (hFile=0xe0) returned 0x1
	[0212.412] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001c3ca0*=10364) returned 1
	[0212.412] WriteFile (in: hFile=0xe0, lpBuffer=0xc00022c700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001c3ccc, lpOverlapped=0xc0001c3ce8 | out: lpBuffer=0xc00022c700*, lpNumberOfBytesWritten=0xc0001c3ccc*=0x22d, lpOverlapped=0xc0001c3ce8) returned 1
	[0212.413] GetFileType (hFile=0xe0) returned 0x1
	[0212.413] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x287c, lpNewFilePointer=0xc0001c3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001c3ca0*=10364) returned 1
	[0212.413] CloseHandle (hObject=0xe0) returned 1
	[0212.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf.egmwv")) returned 0x20
	[0212.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.417] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.431] SetEvent (hEvent=0x148) returned 1
	[0212.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf")) returned 0x20
	[0212.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF", dwFileAttributes=0x20) returned 1
	[0212.434] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.485] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.502] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0212.502] ReadFile (in: hFile=0xe0, lpBuffer=0xc0004b6000, nNumberOfBytesToRead=0x2dc8, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004b6000*, lpNumberOfBytesRead=0xc000423cec*=0x2dc8, lpOverlapped=0x0) returned 1
	[0212.509] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414410 | out: pbBuffer=0xc000414410) returned 1
	[0212.509] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004bc802 | out: pbBuffer=0xc0004bc802) returned 1
	[0212.509] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004bc884 | out: pbBuffer=0xc0004bc884) returned 1
	[0212.509] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004bc8d5 | out: pbBuffer=0xc0004bc8d5) returned 1
	[0212.509] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0212.509] GetFileType (hFile=0xe0) returned 0x1
	[0212.509] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c5ca0*=11720) returned 1
	[0212.510] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004ee000*, nNumberOfBytesToWrite=0x2dc8, lpNumberOfBytesWritten=0xc0002c5ccc, lpOverlapped=0xc0002c5ce8 | out: lpBuffer=0xc0004ee000*, lpNumberOfBytesWritten=0xc0002c5ccc*=0x2dc8, lpOverlapped=0xc0002c5ce8) returned 1
	[0212.510] GetFileType (hFile=0xe0) returned 0x1
	[0212.510] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2dc8, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c5ca0*=11720) returned 1
	[0212.510] GetFileType (hFile=0xe0) returned 0x1
	[0212.510] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0002c5ca0*=11720) returned 1
	[0212.511] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004ca700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0002c5ccc, lpOverlapped=0xc0002c5ce8 | out: lpBuffer=0xc0004ca700*, lpNumberOfBytesWritten=0xc0002c5ccc*=0x22d, lpOverlapped=0xc0002c5ce8) returned 1
	[0212.511] GetFileType (hFile=0xe0) returned 0x1
	[0212.511] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2dc8, lpNewFilePointer=0xc0002c5ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0002c5ca0*=11720) returned 1
	[0212.511] CloseHandle (hObject=0xe0) returned 1
	[0212.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf.egmwv")) returned 0x20
	[0212.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.512] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.522] SetEvent (hEvent=0xe4) returned 1
	[0212.523] SetEvent (hEvent=0x5c) returned 1
	[0212.523] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0
	[0212.532] SetEvent (hEvent=0x5c) returned 1
	[0212.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf")) returned 0x20
	[0212.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF", dwFileAttributes=0x20) returned 1
	[0212.536] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.537] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0212.537] ReadFile (in: hFile=0xe0, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x1204, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc000387cec*=0x1204, lpOverlapped=0x0) returned 1
	[0212.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0212.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b7a | out: pbBuffer=0xc000052b7a) returned 1
	[0212.550] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000284a02 | out: pbBuffer=0xc000284a02) returned 1
	[0212.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000284aea | out: pbBuffer=0xc000284aea) returned 1
	[0212.550] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0212.550] GetFileType (hFile=0xe0) returned 0x1
	[0212.551] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=4612) returned 1
	[0212.551] WriteFile (in: hFile=0xe0, lpBuffer=0xc000446000*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000446000*, lpNumberOfBytesWritten=0xc000183ccc*=0x1204, lpOverlapped=0xc000183ce8) returned 1
	[0212.551] GetFileType (hFile=0xe0) returned 0x1
	[0212.551] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1204, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=4612) returned 1
	[0212.551] GetFileType (hFile=0xe0) returned 0x1
	[0212.551] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000183ca0*=4612) returned 1
	[0212.552] WriteFile (in: hFile=0xe0, lpBuffer=0xc000476000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000183ccc, lpOverlapped=0xc000183ce8 | out: lpBuffer=0xc000476000*, lpNumberOfBytesWritten=0xc000183ccc*=0x221, lpOverlapped=0xc000183ce8) returned 1
	[0212.552] GetFileType (hFile=0xe0) returned 0x1
	[0212.552] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1204, lpNewFilePointer=0xc000183ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000183ca0*=4612) returned 1
	[0212.552] CloseHandle (hObject=0xe0) returned 1
	[0212.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf.egmwv")) returned 0x20
	[0212.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf")) returned 0x20
	[0212.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF", dwFileAttributes=0x20) returned 1
	[0212.556] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.678] SetEvent (hEvent=0x70) returned 1
	[0212.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0212.679] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0212.679] ReadFile (in: hFile=0xe0, lpBuffer=0xc000354000, nNumberOfBytesToRead=0x274c, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000354000*, lpNumberOfBytesRead=0xc0002d3cec*=0x274c, lpOverlapped=0x0) returned 1
	[0212.684] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0212.684] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62aa | out: pbBuffer=0xc0002b62aa) returned 1
	[0212.684] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038b02 | out: pbBuffer=0xc000038b02) returned 1
	[0212.684] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000038bca | out: pbBuffer=0xc000038bca) returned 1
	[0212.684] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0212.685] GetFileType (hFile=0xe0) returned 0x1
	[0212.685] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=10060) returned 1
	[0212.685] WriteFile (in: hFile=0xe0, lpBuffer=0xc00042a000*, nNumberOfBytesToWrite=0x274c, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesWritten=0xc000377ccc*=0x274c, lpOverlapped=0xc000377ce8) returned 1
	[0212.685] GetFileType (hFile=0xe0) returned 0x1
	[0212.685] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x274c, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=10060) returned 1
	[0212.685] GetFileType (hFile=0xe0) returned 0x1
	[0212.686] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=10060) returned 1
	[0212.686] WriteFile (in: hFile=0xe0, lpBuffer=0xc000308e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc000308e00*, lpNumberOfBytesWritten=0xc000377ccc*=0x22d, lpOverlapped=0xc000377ce8) returned 1
	[0212.686] GetFileType (hFile=0xe0) returned 0x1
	[0212.686] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x274c, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=10060) returned 1
	[0212.686] CloseHandle (hObject=0xe0) returned 1
	[0212.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf.egmwv")) returned 0x20
	[0212.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.688] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) 

Thread:
	id = 46
	os_tid = 0xacc

	[0119.210] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x628feb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x628feb0*=0x158) returned 1
	[0119.210] VirtualQuery (in: lpAddress=0x628fed0, lpBuffer=0x628fed0, dwLength=0x30 | out: lpBuffer=0x628fed0*(BaseAddress=0x628f000, AllocationBase=0x6090000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0119.210] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x15c
	[0119.210] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0119.212] SetEvent (hEvent=0x14c) returned 1
	[0119.213] SetEvent (hEvent=0x150) returned 1
	[0119.213] SwitchToThread () returned 1
	[0119.215] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0119.554] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0119.699] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf")) returned 0x20
	[0201.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x20) returned 1
	[0201.583] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0201.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0201.894] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0201.894] ReadFile (in: hFile=0xd0, lpBuffer=0xc000149000, nNumberOfBytesToRead=0x17ac, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000149000*, lpNumberOfBytesRead=0xc000193cec*=0x17ac, lpOverlapped=0x0) returned 1
	[0201.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414c00 | out: pbBuffer=0xc000414c00) returned 1
	[0201.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000414c1a | out: pbBuffer=0xc000414c1a) returned 1
	[0201.901] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000458102 | out: pbBuffer=0xc000458102) returned 1
	[0201.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000458128 | out: pbBuffer=0xc000458128) returned 1
	[0201.901] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414c40 | out: pbBuffer=0xc000414c40) returned 1
	[0201.901] GetFileType (hFile=0xd0) returned 0x1
	[0201.901] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=6060) returned 1
	[0201.902] WriteFile (in: hFile=0xd0, lpBuffer=0xc0003aa000*, nNumberOfBytesToWrite=0x17ac, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc0003aa000*, lpNumberOfBytesWritten=0xc000353ccc*=0x17ac, lpOverlapped=0xc000353ce8) returned 1
	[0201.902] GetFileType (hFile=0xd0) returned 0x1
	[0201.902] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x17ac, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=6060) returned 1
	[0201.902] GetFileType (hFile=0xd0) returned 0x1
	[0201.903] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000353ca0*=6060) returned 1
	[0201.903] WriteFile (in: hFile=0xd0, lpBuffer=0xc0003a4380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000353ccc, lpOverlapped=0xc000353ce8 | out: lpBuffer=0xc0003a4380*, lpNumberOfBytesWritten=0xc000353ccc*=0x230, lpOverlapped=0xc000353ce8) returned 1
	[0201.903] GetFileType (hFile=0xd0) returned 0x1
	[0201.903] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x17ac, lpNewFilePointer=0xc000353ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000353ca0*=6060) returned 1
	[0201.903] CloseHandle (hObject=0xd0) returned 1
	[0201.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf.egmwv")) returned 0x20
	[0201.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0201.923] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.002] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.005] SetEvent (hEvent=0x14c) returned 1
	[0202.005] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.009] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.014] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.038] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.067] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.105] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.120] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.153] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.172] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.190] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.205] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.232] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.250] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.266] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.272] SetEvent (hEvent=0x14c) returned 1
	[0202.273] SetEvent (hEvent=0xe4) returned 1
	[0202.273] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x1) returned 0x0
	[0202.276] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x1) returned 0x0
	[0202.277] SetEvent (hEvent=0x148) returned 1
	[0202.278] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x1) returned 0x102
	[0202.279] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.280] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.362] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.483] SetEvent (hEvent=0x148) returned 1
	[0202.483] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.759] SetEvent (hEvent=0xe4) returned 1
	[0202.760] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.764] SetEvent (hEvent=0xe4) returned 1
	[0202.764] SetEvent (hEvent=0xc8) returned 1
	[0202.764] SwitchToThread () returned 1
	[0202.767] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.772] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.788] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.813] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.833] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.871] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.883] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.994] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.014] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.030] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.045] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.070] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.088] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.163] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.174] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.191] SetEvent (hEvent=0xc8) returned 1
	[0203.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x20
	[0203.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x20) returned 1
	[0203.193] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0203.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0203.220] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0203.220] ReadFile (in: hFile=0xd0, lpBuffer=0xc0002ec000, nNumberOfBytesToRead=0x1678, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesRead=0xc000199cec*=0x1678, lpOverlapped=0x0) returned 1
	[0203.314] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206c20 | out: pbBuffer=0xc000206c20) returned 1
	[0203.314] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00021eb02 | out: pbBuffer=0xc00021eb02) returned 1
	[0203.314] SetEvent (hEvent=0x104) returned 1
	[0203.315] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206c60 | out: pbBuffer=0xc000206c60) returned 1
	[0203.315] GetFileType (hFile=0xd0) returned 0x1
	[0203.315] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=5752) returned 1
	[0203.315] WriteFile (in: hFile=0xd0, lpBuffer=0xc0003d2000*, nNumberOfBytesToWrite=0x1678, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0003d2000*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x1678, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.316] GetFileType (hFile=0xd0) returned 0x1
	[0203.316] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1678, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=5752) returned 1
	[0203.316] GetFileType (hFile=0xd0) returned 0x1
	[0203.316] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004a3ca0*=5752) returned 1
	[0203.317] WriteFile (in: hFile=0xd0, lpBuffer=0xc0000bbc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004a3ccc, lpOverlapped=0xc0004a3ce8 | out: lpBuffer=0xc0000bbc00*, lpNumberOfBytesWritten=0xc0004a3ccc*=0x22d, lpOverlapped=0xc0004a3ce8) returned 1
	[0203.317] GetFileType (hFile=0xd0) returned 0x1
	[0203.317] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1678, lpNewFilePointer=0xc0004a3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004a3ca0*=5752) returned 1
	[0203.317] CloseHandle (hObject=0xd0) returned 1
	[0203.338] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf.egmwv")) returned 0x20
	[0203.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0203.364] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.372] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.610] SetEvent (hEvent=0xe4) returned 1
	[0203.610] SetEvent (hEvent=0x60) returned 1
	[0203.610] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.038] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.041] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.477] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.480] SetEvent (hEvent=0xc8) returned 1
	[0204.480] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.484] SetEvent (hEvent=0xc8) returned 1
	[0204.484] SwitchToThread () returned 1
	[0204.486] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.490] SetEvent (hEvent=0xc0) returned 1
	[0204.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x20
	[0204.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x20) returned 1
	[0204.491] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.538] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0204.538] ReadFile (in: hFile=0x164, lpBuffer=0xc0003bc000, nNumberOfBytesToRead=0x2040, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesRead=0xc000387cec*=0x2040, lpOverlapped=0x0) returned 1
	[0204.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0204.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d0a | out: pbBuffer=0xc000052d0a) returned 1
	[0204.544] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214402 | out: pbBuffer=0xc000214402) returned 1
	[0204.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00021447d | out: pbBuffer=0xc00021447d) returned 1
	[0204.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002144ad | out: pbBuffer=0xc0002144ad) returned 1
	[0204.544] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002144d3 | out: pbBuffer=0xc0002144d3) returned 1
	[0204.545] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0204.545] GetFileType (hFile=0x164) returned 0x1
	[0204.545] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=8256) returned 1
	[0204.546] WriteFile (in: hFile=0x164, lpBuffer=0xc000288000*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc000288000*, lpNumberOfBytesWritten=0xc00022dccc*=0x2040, lpOverlapped=0xc00022dce8) returned 1
	[0204.546] GetFileType (hFile=0x164) returned 0x1
	[0204.546] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2040, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=8256) returned 1
	[0204.546] GetFileType (hFile=0x164) returned 0x1
	[0204.546] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022dca0*=8256) returned 1
	[0204.547] WriteFile (in: hFile=0x164, lpBuffer=0xc00017ce00*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc00022dccc, lpOverlapped=0xc00022dce8 | out: lpBuffer=0xc00017ce00*, lpNumberOfBytesWritten=0xc00022dccc*=0x21e, lpOverlapped=0xc00022dce8) returned 1
	[0204.547] GetFileType (hFile=0x164) returned 0x1
	[0204.547] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x2040, lpNewFilePointer=0xc00022dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022dca0*=8256) returned 1
	[0204.547] CloseHandle (hObject=0x164) returned 1
	[0204.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf.egmwv")) returned 0x20
	[0204.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.551] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.557] SetEvent (hEvent=0xc0) returned 1
	[0204.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x20
	[0204.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x20) returned 1
	[0204.559] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.594] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0204.594] ReadFile (in: hFile=0x17c, lpBuffer=0xc000130000, nNumberOfBytesToRead=0xb10, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesRead=0xc000387cec*=0xb10, lpOverlapped=0x0) returned 1
	[0204.599] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0204.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0204.600] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001eac02 | out: pbBuffer=0xc0001eac02) returned 1
	[0204.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001eac2e | out: pbBuffer=0xc0001eac2e) returned 1
	[0204.600] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0204.600] GetFileType (hFile=0x17c) returned 0x1
	[0204.600] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=2832) returned 1
	[0204.600] WriteFile (in: hFile=0x17c, lpBuffer=0xc000438000*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc000438000*, lpNumberOfBytesWritten=0xc000143ccc*=0xb10, lpOverlapped=0xc000143ce8) returned 1
	[0204.601] GetFileType (hFile=0x17c) returned 0x1
	[0204.601] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xb10, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=2832) returned 1
	[0204.601] GetFileType (hFile=0x17c) returned 0x1
	[0204.601] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=2832) returned 1
	[0204.601] WriteFile (in: hFile=0x17c, lpBuffer=0xc00014b500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc00014b500*, lpNumberOfBytesWritten=0xc000143ccc*=0x224, lpOverlapped=0xc000143ce8) returned 1
	[0204.602] GetFileType (hFile=0x17c) returned 0x1
	[0204.602] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xb10, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=2832) returned 1
	[0204.602] CloseHandle (hObject=0x17c) returned 1
	[0204.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf.egmwv")) returned 0x20
	[0204.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.611] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.627] SetEvent (hEvent=0xc0) returned 1
	[0204.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x20
	[0204.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x20) returned 1
	[0204.630] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.661] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0204.661] ReadFile (in: hFile=0x168, lpBuffer=0xc0001ef180, nNumberOfBytesToRead=0x318, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ef180*, lpNumberOfBytesRead=0xc000387cec*=0x318, lpOverlapped=0x0) returned 1
	[0204.667] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414430 | out: pbBuffer=0xc000414430) returned 1
	[0204.667] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002f4502 | out: pbBuffer=0xc0002f4502) returned 1
	[0204.667] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414470 | out: pbBuffer=0xc000414470) returned 1
	[0204.667] GetFileType (hFile=0x168) returned 0x1
	[0204.667] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=792) returned 1
	[0204.667] WriteFile (in: hFile=0x168, lpBuffer=0xc0002f7000*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc0002f7000*, lpNumberOfBytesWritten=0xc000143ccc*=0x318, lpOverlapped=0xc000143ce8) returned 1
	[0204.668] GetFileType (hFile=0x168) returned 0x1
	[0204.668] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x318, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=792) returned 1
	[0204.668] GetFileType (hFile=0x168) returned 0x1
	[0204.668] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=792) returned 1
	[0204.668] WriteFile (in: hFile=0x168, lpBuffer=0xc0002fca80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc0002fca80*, lpNumberOfBytesWritten=0xc000143ccc*=0x224, lpOverlapped=0xc000143ce8) returned 1
	[0204.669] GetFileType (hFile=0x168) returned 0x1
	[0204.669] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x318, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=792) returned 1
	[0204.669] CloseHandle (hObject=0x168) returned 1
	[0204.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf.egmwv")) returned 0x20
	[0204.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.671] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.686] SetEvent (hEvent=0xc0) returned 1
	[0204.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x20
	[0204.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x20) returned 1
	[0204.688] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.718] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0204.718] ReadFile (in: hFile=0x168, lpBuffer=0xc000252000, nNumberOfBytesToRead=0xa7f0, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000252000*, lpNumberOfBytesRead=0xc000193cec*=0xa7f0, lpOverlapped=0x0) returned 1
	[0204.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145c0 | out: pbBuffer=0xc0004145c0) returned 1
	[0204.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145da | out: pbBuffer=0xc0004145da) returned 1
	[0204.724] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002f5202 | out: pbBuffer=0xc0002f5202) returned 1
	[0204.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002f5284 | out: pbBuffer=0xc0002f5284) returned 1
	[0204.724] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414600 | out: pbBuffer=0xc000414600) returned 1
	[0204.725] SetEvent (hEvent=0xc0) returned 1
	[0204.726] GetFileType (hFile=0x168) returned 0x1
	[0204.726] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=42992) returned 1
	[0204.726] WriteFile (in: hFile=0x168, lpBuffer=0xc0004c2000*, nNumberOfBytesToWrite=0xa7f0, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc0004c2000*, lpNumberOfBytesWritten=0xc000143ccc*=0xa7f0, lpOverlapped=0xc000143ce8) returned 1
	[0204.727] GetFileType (hFile=0x168) returned 0x1
	[0204.727] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xa7f0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=42992) returned 1
	[0204.727] GetFileType (hFile=0x168) returned 0x1
	[0204.728] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000143ca0*=42992) returned 1
	[0204.728] WriteFile (in: hFile=0x168, lpBuffer=0xc00026a380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000143ccc, lpOverlapped=0xc000143ce8 | out: lpBuffer=0xc00026a380*, lpNumberOfBytesWritten=0xc000143ccc*=0x236, lpOverlapped=0xc000143ce8) returned 1
	[0204.728] GetFileType (hFile=0x168) returned 0x1
	[0204.728] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xa7f0, lpNewFilePointer=0xc000143ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000143ca0*=42992) returned 1
	[0204.729] CloseHandle (hObject=0x168) returned 1
	[0204.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf.egmwv")) returned 0x20
	[0204.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.735] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.737] SetEvent (hEvent=0xc0) returned 1
	[0204.737] SetEvent (hEvent=0xc8) returned 1
	[0204.737] SwitchToThread () returned 1
	[0204.739] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.744] SetEvent (hEvent=0xc8) returned 1
	[0204.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x20
	[0204.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x20) returned 1
	[0204.745] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0204.775] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0204.775] ReadFile (in: hFile=0x164, lpBuffer=0xc0004a4000, nNumberOfBytesToRead=0x78c, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0004a4000*, lpNumberOfBytesRead=0xc0002d5cec*=0x78c, lpOverlapped=0x0) returned 1
	[0204.781] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0204.781] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0204.781] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0204.782] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0204.782] GetFileType (hFile=0x164) returned 0x1
	[0204.782] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=1932) returned 1
	[0204.783] WriteFile (in: hFile=0x164, lpBuffer=0xc000373000*, nNumberOfBytesToWrite=0x78c, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc000373000*, lpNumberOfBytesWritten=0xc000383ccc*=0x78c, lpOverlapped=0xc000383ce8) returned 1
	[0204.783] GetFileType (hFile=0x164) returned 0x1
	[0204.783] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x78c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=1932) returned 1
	[0204.783] GetFileType (hFile=0x164) returned 0x1
	[0204.783] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=1932) returned 1
	[0204.784] WriteFile (in: hFile=0x164, lpBuffer=0xc000177500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc000177500*, lpNumberOfBytesWritten=0xc000383ccc*=0x22a, lpOverlapped=0xc000383ce8) returned 1
	[0204.784] GetFileType (hFile=0x164) returned 0x1
	[0204.784] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x78c, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=1932) returned 1
	[0204.784] CloseHandle (hObject=0x164) returned 1
	[0204.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf.egmwv")) returned 0x20
	[0204.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.789] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x20
	[0204.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x20) returned 1
	[0204.797] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0204.838] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0204.838] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000aa000, nNumberOfBytesToRead=0x5130, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000aa000*, lpNumberOfBytesRead=0xc0002d7cec*=0x5130, lpOverlapped=0x0) returned 1
	[0204.844] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0204.844] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ba | out: pbBuffer=0xc0004142ba) returned 1
	[0204.844] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1c02 | out: pbBuffer=0xc0002c1c02) returned 1
	[0204.844] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0204.844] GetFileType (hFile=0x17c) returned 0x1
	[0204.844] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=20784) returned 1
	[0204.845] WriteFile (in: hFile=0x17c, lpBuffer=0xc00034e000*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc00034e000*, lpNumberOfBytesWritten=0xc000383ccc*=0x5130, lpOverlapped=0xc000383ce8) returned 1
	[0204.845] GetFileType (hFile=0x17c) returned 0x1
	[0204.845] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5130, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=20784) returned 1
	[0204.845] GetFileType (hFile=0x17c) returned 0x1
	[0204.846] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=20784) returned 1
	[0204.846] WriteFile (in: hFile=0x17c, lpBuffer=0xc000392e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc000392e00*, lpNumberOfBytesWritten=0xc000383ccc*=0x227, lpOverlapped=0xc000383ce8) returned 1
	[0204.846] GetFileType (hFile=0x17c) returned 0x1
	[0204.846] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x5130, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=20784) returned 1
	[0204.846] CloseHandle (hObject=0x17c) returned 1
	[0204.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf.egmwv")) returned 0x20
	[0204.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.850] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x20
	[0204.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x20) returned 1
	[0204.871] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0204.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0204.898] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0204.898] ReadFile (in: hFile=0x168, lpBuffer=0xc0003f8000, nNumberOfBytesToRead=0x39e4, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f8000*, lpNumberOfBytesRead=0xc000387cec*=0x39e4, lpOverlapped=0x0) returned 1
	[0204.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145c0 | out: pbBuffer=0xc0004145c0) returned 1
	[0204.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145da | out: pbBuffer=0xc0004145da) returned 1
	[0204.905] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000459202 | out: pbBuffer=0xc000459202) returned 1
	[0204.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414600 | out: pbBuffer=0xc000414600) returned 1
	[0204.906] GetFileType (hFile=0x168) returned 0x1
	[0204.906] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=14820) returned 1
	[0204.906] WriteFile (in: hFile=0x168, lpBuffer=0xc0000f0000*, nNumberOfBytesToWrite=0x39e4, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc0000f0000*, lpNumberOfBytesWritten=0xc000383ccc*=0x39e4, lpOverlapped=0xc000383ce8) returned 1
	[0204.907] GetFileType (hFile=0x168) returned 0x1
	[0204.907] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x39e4, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=14820) returned 1
	[0204.907] GetFileType (hFile=0x168) returned 0x1
	[0204.907] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000383ca0*=14820) returned 1
	[0204.907] WriteFile (in: hFile=0x168, lpBuffer=0xc000412000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000383ccc, lpOverlapped=0xc000383ce8 | out: lpBuffer=0xc000412000*, lpNumberOfBytesWritten=0xc000383ccc*=0x230, lpOverlapped=0xc000383ce8) returned 1
	[0204.908] GetFileType (hFile=0x168) returned 0x1
	[0204.908] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x39e4, lpNewFilePointer=0xc000383ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000383ca0*=14820) returned 1
	[0204.908] CloseHandle (hObject=0x168) returned 1
	[0204.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf.egmwv")) returned 0x20
	[0204.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0204.911] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.915] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0204.929] SetEvent (hEvent=0xc8) returned 1
	[0204.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x20
	[0204.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x20) returned 1
	[0205.018] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.048] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0205.048] ReadFile (in: hFile=0x168, lpBuffer=0xc0001f3000, nNumberOfBytesToRead=0xe20, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f3000*, lpNumberOfBytesRead=0xc00038dcec*=0xe20, lpOverlapped=0x0) returned 1
	[0205.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053340 | out: pbBuffer=0xc000053340) returned 1
	[0205.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005335a | out: pbBuffer=0xc00005335a) returned 1
	[0205.053] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001dee02 | out: pbBuffer=0xc0001dee02) returned 1
	[0205.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001dee39 | out: pbBuffer=0xc0001dee39) returned 1
	[0205.054] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001deed8 | out: pbBuffer=0xc0001deed8) returned 1
	[0205.054] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053380 | out: pbBuffer=0xc000053380) returned 1
	[0205.054] GetFileType (hFile=0x168) returned 0x1
	[0205.054] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3616) returned 1
	[0205.054] WriteFile (in: hFile=0x168, lpBuffer=0xc0003ac000*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0003ac000*, lpNumberOfBytesWritten=0xc000151ccc*=0xe20, lpOverlapped=0xc000151ce8) returned 1
	[0205.055] GetFileType (hFile=0x168) returned 0x1
	[0205.055] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe20, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3616) returned 1
	[0205.055] GetFileType (hFile=0x168) returned 0x1
	[0205.055] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3616) returned 1
	[0205.055] WriteFile (in: hFile=0x168, lpBuffer=0xc000201500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000201500*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0205.056] GetFileType (hFile=0x168) returned 0x1
	[0205.056] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xe20, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3616) returned 1
	[0205.056] CloseHandle (hObject=0x168) returned 1
	[0205.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf.egmwv")) returned 0x20
	[0205.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.059] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.063] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.066] SetEvent (hEvent=0xc8) returned 1
	[0205.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x20
	[0205.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x20) returned 1
	[0205.068] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.108] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0205.108] ReadFile (in: hFile=0x164, lpBuffer=0xc0003f4400, nNumberOfBytesToRead=0xaec, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f4400*, lpNumberOfBytesRead=0xc0002d3cec*=0xaec, lpOverlapped=0x0) returned 1
	[0205.116] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000534c0 | out: pbBuffer=0xc0000534c0) returned 1
	[0205.116] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001dfa02 | out: pbBuffer=0xc0001dfa02) returned 1
	[0205.117] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001dfa22 | out: pbBuffer=0xc0001dfa22) returned 1
	[0205.117] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053500 | out: pbBuffer=0xc000053500) returned 1
	[0205.117] GetFileType (hFile=0x164) returned 0x1
	[0205.117] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2796) returned 1
	[0205.117] WriteFile (in: hFile=0x164, lpBuffer=0xc000132000*, nNumberOfBytesToWrite=0xaec, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000132000*, lpNumberOfBytesWritten=0xc000151ccc*=0xaec, lpOverlapped=0xc000151ce8) returned 1
	[0205.118] GetFileType (hFile=0x164) returned 0x1
	[0205.118] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xaec, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2796) returned 1
	[0205.118] GetFileType (hFile=0x164) returned 0x1
	[0205.119] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=2796) returned 1
	[0205.119] WriteFile (in: hFile=0x164, lpBuffer=0xc000128e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000128e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x22d, lpOverlapped=0xc000151ce8) returned 1
	[0205.119] GetFileType (hFile=0x164) returned 0x1
	[0205.119] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xaec, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=2796) returned 1
	[0205.119] CloseHandle (hObject=0x164) returned 1
	[0205.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf.egmwv")) returned 0x20
	[0205.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.154] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.159] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.205] SetEvent (hEvent=0xc8) returned 1
	[0205.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x20
	[0205.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x20) returned 1
	[0205.207] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.252] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0205.252] ReadFile (in: hFile=0x17c, lpBuffer=0xc000263000, nNumberOfBytesToRead=0xe04, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000263000*, lpNumberOfBytesRead=0xc000423cec*=0xe04, lpOverlapped=0x0) returned 1
	[0205.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6290 | out: pbBuffer=0xc0002b6290) returned 1
	[0205.257] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0205.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0981 | out: pbBuffer=0xc0002c0981) returned 1
	[0205.257] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62d0 | out: pbBuffer=0xc0002b62d0) returned 1
	[0205.258] GetFileType (hFile=0x17c) returned 0x1
	[0205.258] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3588) returned 1
	[0205.258] WriteFile (in: hFile=0x17c, lpBuffer=0xc00018e000*, nNumberOfBytesToWrite=0xe04, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00018e000*, lpNumberOfBytesWritten=0xc000151ccc*=0xe04, lpOverlapped=0xc000151ce8) returned 1
	[0205.258] GetFileType (hFile=0x17c) returned 0x1
	[0205.258] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xe04, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3588) returned 1
	[0205.259] GetFileType (hFile=0x17c) returned 0x1
	[0205.259] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3588) returned 1
	[0205.259] WriteFile (in: hFile=0x17c, lpBuffer=0xc000164e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000164e00*, lpNumberOfBytesWritten=0xc000151ccc*=0x224, lpOverlapped=0xc000151ce8) returned 1
	[0205.259] GetFileType (hFile=0x17c) returned 0x1
	[0205.259] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xe04, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3588) returned 1
	[0205.259] CloseHandle (hObject=0x17c) returned 1
	[0205.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf.egmwv")) returned 0x20
	[0205.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.265] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x20
	[0205.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x20) returned 1
	[0205.285] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.312] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0205.312] ReadFile (in: hFile=0x168, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x8fc, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc0002d3cec*=0x8fc, lpOverlapped=0x0) returned 1
	[0205.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0205.319] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039f02 | out: pbBuffer=0xc000039f02) returned 1
	[0205.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039f69 | out: pbBuffer=0xc000039f69) returned 1
	[0205.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039fd1 | out: pbBuffer=0xc000039fd1) returned 1
	[0205.319] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0205.319] GetFileType (hFile=0x168) returned 0x1
	[0205.320] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2300) returned 1
	[0205.320] WriteFile (in: hFile=0x168, lpBuffer=0xc000476000*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000476000*, lpNumberOfBytesWritten=0xc000227ccc*=0x8fc, lpOverlapped=0xc000227ce8) returned 1
	[0205.320] GetFileType (hFile=0x168) returned 0x1
	[0205.320] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8fc, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2300) returned 1
	[0205.321] GetFileType (hFile=0x168) returned 0x1
	[0205.321] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2300) returned 1
	[0205.321] WriteFile (in: hFile=0x168, lpBuffer=0xc0003db500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0003db500*, lpNumberOfBytesWritten=0xc000227ccc*=0x22d, lpOverlapped=0xc000227ce8) returned 1
	[0205.321] GetFileType (hFile=0x168) returned 0x1
	[0205.321] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8fc, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2300) returned 1
	[0205.321] CloseHandle (hObject=0x168) returned 1
	[0205.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf.egmwv")) returned 0x20
	[0205.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.323] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.335] SetEvent (hEvent=0xc0) returned 1
	[0205.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x20
	[0205.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x20) returned 1
	[0205.338] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.364] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0205.365] ReadFile (in: hFile=0x168, lpBuffer=0xc0003ee800, nNumberOfBytesToRead=0x7d4, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ee800*, lpNumberOfBytesRead=0xc000199cec*=0x7d4, lpOverlapped=0x0) returned 1
	[0205.371] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062b0 | out: pbBuffer=0xc0002062b0) returned 1
	[0205.371] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003e8b02 | out: pbBuffer=0xc0003e8b02) returned 1
	[0205.371] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062f0 | out: pbBuffer=0xc0002062f0) returned 1
	[0205.371] GetFileType (hFile=0x168) returned 0x1
	[0205.371] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2004) returned 1
	[0205.372] WriteFile (in: hFile=0x168, lpBuffer=0xc0002c8000*, nNumberOfBytesToWrite=0x7d4, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0002c8000*, lpNumberOfBytesWritten=0xc000227ccc*=0x7d4, lpOverlapped=0xc000227ce8) returned 1
	[0205.372] GetFileType (hFile=0x168) returned 0x1
	[0205.372] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x7d4, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2004) returned 1
	[0205.372] GetFileType (hFile=0x168) returned 0x1
	[0205.373] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2004) returned 1
	[0205.373] WriteFile (in: hFile=0x168, lpBuffer=0xc000360e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000360e00*, lpNumberOfBytesWritten=0xc000227ccc*=0x22d, lpOverlapped=0xc000227ce8) returned 1
	[0205.373] GetFileType (hFile=0x168) returned 0x1
	[0205.373] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x7d4, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2004) returned 1
	[0205.373] CloseHandle (hObject=0x168) returned 1
	[0205.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf.egmwv")) returned 0x20
	[0205.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.376] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.380] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.382] SetEvent (hEvent=0xc0) returned 1
	[0205.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x20
	[0205.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x20) returned 1
	[0205.384] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.431] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0205.431] ReadFile (in: hFile=0x164, lpBuffer=0xc000156900, nNumberOfBytesToRead=0x804, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000156900*, lpNumberOfBytesRead=0xc000197cec*=0x804, lpOverlapped=0x0) returned 1
	[0205.440] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065d0 | out: pbBuffer=0xc0002065d0) returned 1
	[0205.440] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00036a302 | out: pbBuffer=0xc00036a302) returned 1
	[0205.440] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00036a3bf | out: pbBuffer=0xc00036a3bf) returned 1
	[0205.441] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206610 | out: pbBuffer=0xc000206610) returned 1
	[0205.441] GetFileType (hFile=0x164) returned 0x1
	[0205.441] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2052) returned 1
	[0205.441] WriteFile (in: hFile=0x164, lpBuffer=0xc000372000*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000372000*, lpNumberOfBytesWritten=0xc000227ccc*=0x804, lpOverlapped=0xc000227ce8) returned 1
	[0205.442] GetFileType (hFile=0x164) returned 0x1
	[0205.442] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x804, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2052) returned 1
	[0205.442] GetFileType (hFile=0x164) returned 0x1
	[0205.442] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2052) returned 1
	[0205.442] WriteFile (in: hFile=0x164, lpBuffer=0xc000374000*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc000374000*, lpNumberOfBytesWritten=0xc000227ccc*=0x21e, lpOverlapped=0xc000227ce8) returned 1
	[0205.442] GetFileType (hFile=0x164) returned 0x1
	[0205.443] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x804, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2052) returned 1
	[0205.443] CloseHandle (hObject=0x164) returned 1
	[0205.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf.egmwv")) returned 0x20
	[0205.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.447] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x20
	[0205.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x20) returned 1
	[0205.455] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.491] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0205.491] ReadFile (in: hFile=0x17c, lpBuffer=0xc00029e800, nNumberOfBytesToRead=0x760, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e800*, lpNumberOfBytesRead=0xc000387cec*=0x760, lpOverlapped=0x0) returned 1
	[0205.498] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068e0 | out: pbBuffer=0xc0002068e0) returned 1
	[0205.498] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002068fa | out: pbBuffer=0xc0002068fa) returned 1
	[0205.498] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00036ba02 | out: pbBuffer=0xc00036ba02) returned 1
	[0205.499] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206920 | out: pbBuffer=0xc000206920) returned 1
	[0205.499] GetFileType (hFile=0x17c) returned 0x1
	[0205.499] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1888) returned 1
	[0205.499] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001b8000*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0001b8000*, lpNumberOfBytesWritten=0xc000227ccc*=0x760, lpOverlapped=0xc000227ce8) returned 1
	[0205.500] GetFileType (hFile=0x17c) returned 0x1
	[0205.500] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x760, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1888) returned 1
	[0205.500] GetFileType (hFile=0x17c) returned 0x1
	[0205.500] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=1888) returned 1
	[0205.500] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001af180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0001af180*, lpNumberOfBytesWritten=0xc000227ccc*=0x227, lpOverlapped=0xc000227ce8) returned 1
	[0205.501] GetFileType (hFile=0x17c) returned 0x1
	[0205.501] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x760, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=1888) returned 1
	[0205.501] CloseHandle (hObject=0x17c) returned 1
	[0205.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf.egmwv")) returned 0x20
	[0205.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.506] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.523] SetEvent (hEvent=0xc0) returned 1
	[0205.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x20
	[0205.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x20) returned 1
	[0205.530] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.556] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0205.556] ReadFile (in: hFile=0x168, lpBuffer=0xc000157200, nNumberOfBytesToRead=0x824, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000157200*, lpNumberOfBytesRead=0xc000197cec*=0x824, lpOverlapped=0x0) returned 1
	[0205.562] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206a60 | out: pbBuffer=0xc000206a60) returned 1
	[0205.562] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000ba702 | out: pbBuffer=0xc0000ba702) returned 1
	[0205.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000ba739 | out: pbBuffer=0xc0000ba739) returned 1
	[0205.563] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206aa0 | out: pbBuffer=0xc000206aa0) returned 1
	[0205.563] GetFileType (hFile=0x168) returned 0x1
	[0205.563] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2084) returned 1
	[0205.563] WriteFile (in: hFile=0x168, lpBuffer=0xc0000bf000*, nNumberOfBytesToWrite=0x824, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0000bf000*, lpNumberOfBytesWritten=0xc000227ccc*=0x824, lpOverlapped=0xc000227ce8) returned 1
	[0205.564] GetFileType (hFile=0x168) returned 0x1
	[0205.564] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x824, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2084) returned 1
	[0205.564] GetFileType (hFile=0x168) returned 0x1
	[0205.564] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=2084) returned 1
	[0205.564] WriteFile (in: hFile=0x168, lpBuffer=0xc0000c2a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0000c2a80*, lpNumberOfBytesWritten=0xc000227ccc*=0x221, lpOverlapped=0xc000227ce8) returned 1
	[0205.565] GetFileType (hFile=0x168) returned 0x1
	[0205.565] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x824, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=2084) returned 1
	[0205.565] CloseHandle (hObject=0x168) returned 1
	[0205.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf.egmwv")) returned 0x20
	[0205.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.567] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.582] SetEvent (hEvent=0xc0) returned 1
	[0205.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x20
	[0205.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x20) returned 1
	[0205.585] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0205.617] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0205.617] ReadFile (in: hFile=0x168, lpBuffer=0xc000289200, nNumberOfBytesToRead=0x8f8, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000289200*, lpNumberOfBytesRead=0xc0002d7cec*=0x8f8, lpOverlapped=0x0) returned 1
	[0205.623] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414460 | out: pbBuffer=0xc000414460) returned 1
	[0205.623] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000143202 | out: pbBuffer=0xc000143202) returned 1
	[0205.623] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004144a0 | out: pbBuffer=0xc0004144a0) returned 1
	[0205.624] GetFileType (hFile=0x168) returned 0x1
	[0205.624] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2296) returned 1
	[0205.624] WriteFile (in: hFile=0x168, lpBuffer=0xc00044c000*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc00044c000*, lpNumberOfBytesWritten=0xc00022bccc*=0x8f8, lpOverlapped=0xc00022bce8) returned 1
	[0205.624] GetFileType (hFile=0x168) returned 0x1
	[0205.624] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8f8, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2296) returned 1
	[0205.625] GetFileType (hFile=0x168) returned 0x1
	[0205.625] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00022bca0*=2296) returned 1
	[0205.625] WriteFile (in: hFile=0x168, lpBuffer=0xc000448700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00022bccc, lpOverlapped=0xc00022bce8 | out: lpBuffer=0xc000448700*, lpNumberOfBytesWritten=0xc00022bccc*=0x22a, lpOverlapped=0xc00022bce8) returned 1
	[0205.625] GetFileType (hFile=0x168) returned 0x1
	[0205.625] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x8f8, lpNewFilePointer=0xc00022bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00022bca0*=2296) returned 1
	[0205.625] CloseHandle (hObject=0x168) returned 1
	[0205.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf.egmwv")) returned 0x20
	[0205.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.629] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x20
	[0205.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x20) returned 1
	[0205.644] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.672] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0205.672] ReadFile (in: hFile=0x164, lpBuffer=0xc0002c7400, nNumberOfBytesToRead=0x384, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c7400*, lpNumberOfBytesRead=0xc0002d7cec*=0x384, lpOverlapped=0x0) returned 1
	[0205.678] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000207090 | out: pbBuffer=0xc000207090) returned 1
	[0205.678] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043b502 | out: pbBuffer=0xc00043b502) returned 1
	[0205.678] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002070d0 | out: pbBuffer=0xc0002070d0) returned 1
	[0205.678] GetFileType (hFile=0x164) returned 0x1
	[0205.679] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=900) returned 1
	[0205.679] WriteFile (in: hFile=0x164, lpBuffer=0xc0000e9000*, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0000e9000*, lpNumberOfBytesWritten=0xc000227ccc*=0x384, lpOverlapped=0xc000227ce8) returned 1
	[0205.679] GetFileType (hFile=0x164) returned 0x1
	[0205.679] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x384, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=900) returned 1
	[0205.680] GetFileType (hFile=0x164) returned 0x1
	[0205.680] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000227ca0*=900) returned 1
	[0205.680] WriteFile (in: hFile=0x164, lpBuffer=0xc0000eee00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000227ccc, lpOverlapped=0xc000227ce8 | out: lpBuffer=0xc0000eee00*, lpNumberOfBytesWritten=0xc000227ccc*=0x224, lpOverlapped=0xc000227ce8) returned 1
	[0205.680] GetFileType (hFile=0x164) returned 0x1
	[0205.680] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x384, lpNewFilePointer=0xc000227ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000227ca0*=900) returned 1
	[0205.680] CloseHandle (hObject=0x164) returned 1
	[0205.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf.egmwv")) returned 0x20
	[0205.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.685] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x20
	[0205.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x20) returned 1
	[0205.691] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.727] SetEvent (hEvent=0x70) returned 1
	[0205.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.728] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0205.729] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001ea000, nNumberOfBytesToRead=0x4a7c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ea000*, lpNumberOfBytesRead=0xc00038dcec*=0x4a7c, lpOverlapped=0x0) returned 1
	[0205.735] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6d50 | out: pbBuffer=0xc0002b6d50) returned 1
	[0205.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b6d6a | out: pbBuffer=0xc0002b6d6a) returned 1
	[0205.736] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00010c902 | out: pbBuffer=0xc00010c902) returned 1
	[0205.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010c91e | out: pbBuffer=0xc00010c91e) returned 1
	[0205.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010c980 | out: pbBuffer=0xc00010c980) returned 1
	[0205.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00010c984 | out: pbBuffer=0xc00010c984) returned 1
	[0205.736] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6d90 | out: pbBuffer=0xc0002b6d90) returned 1
	[0205.737] GetFileType (hFile=0x17c) returned 0x1
	[0205.737] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=19068) returned 1
	[0205.737] WriteFile (in: hFile=0x17c, lpBuffer=0xc00031c000*, nNumberOfBytesToWrite=0x4a7c, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00031c000*, lpNumberOfBytesWritten=0xc000151ccc*=0x4a7c, lpOverlapped=0xc000151ce8) returned 1
	[0205.738] GetFileType (hFile=0x17c) returned 0x1
	[0205.738] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x4a7c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=19068) returned 1
	[0205.738] GetFileType (hFile=0x17c) returned 0x1
	[0205.738] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=19068) returned 1
	[0205.738] WriteFile (in: hFile=0x17c, lpBuffer=0xc000111c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000111c00*, lpNumberOfBytesWritten=0xc000151ccc*=0x230, lpOverlapped=0xc000151ce8) returned 1
	[0205.738] GetFileType (hFile=0x17c) returned 0x1
	[0205.739] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x4a7c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=19068) returned 1
	[0205.739] CloseHandle (hObject=0x17c) returned 1
	[0205.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf.egmwv")) returned 0x20
	[0205.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.744] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.757] SetEvent (hEvent=0xc0) returned 1
	[0205.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x20
	[0205.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x20) returned 1
	[0205.771] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.835] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0205.835] ReadFile (in: hFile=0x164, lpBuffer=0xc00045ed80, nNumberOfBytesToRead=0x228, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00045ed80*, lpNumberOfBytesRead=0xc000389cec*=0x228, lpOverlapped=0x0) returned 1
	[0205.838] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414280 | out: pbBuffer=0xc000414280) returned 1
	[0205.838] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039e02 | out: pbBuffer=0xc000039e02) returned 1
	[0205.839] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142c0 | out: pbBuffer=0xc0004142c0) returned 1
	[0205.839] GetFileType (hFile=0x164) returned 0x1
	[0205.839] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=552) returned 1
	[0205.839] WriteFile (in: hFile=0x164, lpBuffer=0xc000115200*, nNumberOfBytesToWrite=0x228, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000115200*, lpNumberOfBytesWritten=0xc000155ccc*=0x228, lpOverlapped=0xc000155ce8) returned 1
	[0205.839] GetFileType (hFile=0x164) returned 0x1
	[0205.840] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x228, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=552) returned 1
	[0205.840] GetFileType (hFile=0x164) returned 0x1
	[0205.840] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=552) returned 1
	[0205.840] WriteFile (in: hFile=0x164, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc000155ccc*=0x221, lpOverlapped=0xc000155ce8) returned 1
	[0205.840] GetFileType (hFile=0x164) returned 0x1
	[0205.840] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x228, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=552) returned 1
	[0205.841] CloseHandle (hObject=0x164) returned 1
	[0205.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf.egmwv")) returned 0x20
	[0205.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.844] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x20
	[0205.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x20) returned 1
	[0205.863] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0205.892] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0205.892] ReadFile (in: hFile=0x164, lpBuffer=0xc0000d6000, nNumberOfBytesToRead=0xcb4, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d6000*, lpNumberOfBytesRead=0xc0002d5cec*=0xcb4, lpOverlapped=0x0) returned 1
	[0205.898] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0205.898] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0205.898] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000102b02 | out: pbBuffer=0xc000102b02) returned 1
	[0205.898] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0205.898] GetFileType (hFile=0x164) returned 0x1
	[0205.899] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3252) returned 1
	[0205.899] WriteFile (in: hFile=0x164, lpBuffer=0xc0002ea000*, nNumberOfBytesToWrite=0xcb4, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002ea000*, lpNumberOfBytesWritten=0xc000151ccc*=0xcb4, lpOverlapped=0xc000151ce8) returned 1
	[0205.899] GetFileType (hFile=0x164) returned 0x1
	[0205.899] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcb4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3252) returned 1
	[0205.899] GetFileType (hFile=0x164) returned 0x1
	[0205.899] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=3252) returned 1
	[0205.900] WriteFile (in: hFile=0x164, lpBuffer=0xc000381500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000381500*, lpNumberOfBytesWritten=0xc000151ccc*=0x22a, lpOverlapped=0xc000151ce8) returned 1
	[0205.900] GetFileType (hFile=0x164) returned 0x1
	[0205.900] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcb4, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=3252) returned 1
	[0205.900] CloseHandle (hObject=0x164) returned 1
	[0205.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf.egmwv")) returned 0x20
	[0205.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.903] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.908] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.911] SetEvent (hEvent=0xc8) returned 1
	[0205.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x20
	[0205.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x20) returned 1
	[0205.912] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0205.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0205.943] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0205.943] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x32f2, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc000389cec*=0x32f2, lpOverlapped=0x0) returned 1
	[0205.951] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0205.951] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000103702 | out: pbBuffer=0xc000103702) returned 1
	[0205.951] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000103791 | out: pbBuffer=0xc000103791) returned 1
	[0205.951] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0205.951] GetFileType (hFile=0x17c) returned 0x1
	[0205.952] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=13042) returned 1
	[0205.952] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002ac000*, nNumberOfBytesToWrite=0x32f2, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0002ac000*, lpNumberOfBytesWritten=0xc000151ccc*=0x32f2, lpOverlapped=0xc000151ce8) returned 1
	[0205.952] GetFileType (hFile=0x17c) returned 0x1
	[0205.953] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x32f2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=13042) returned 1
	[0205.953] GetFileType (hFile=0x17c) returned 0x1
	[0205.953] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=13042) returned 1
	[0205.953] WriteFile (in: hFile=0x17c, lpBuffer=0xc00036ae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc00036ae00*, lpNumberOfBytesWritten=0xc000151ccc*=0x230, lpOverlapped=0xc000151ce8) returned 1
	[0205.954] GetFileType (hFile=0x17c) returned 0x1
	[0205.954] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x32f2, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=13042) returned 1
	[0205.954] CloseHandle (hObject=0x17c) returned 1
	[0205.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf.egmwv")) returned 0x20
	[0205.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0205.963] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf")) returned 0x20
	[0205.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x20) returned 1
	[0205.973] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.011] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d3cc4 | out: lpMode=0xc0002d3cc4) returned 0
	[0206.011] ReadFile (in: hFile=0x168, lpBuffer=0xc0000ec000, nNumberOfBytesToRead=0x3670, lpNumberOfBytesRead=0xc0002d3cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ec000*, lpNumberOfBytesRead=0xc0002d3cec*=0x3670, lpOverlapped=0x0) returned 1
	[0206.017] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000531e0 | out: pbBuffer=0xc0000531e0) returned 1
	[0206.017] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000270102 | out: pbBuffer=0xc000270102) returned 1
	[0206.018] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053220 | out: pbBuffer=0xc000053220) returned 1
	[0206.018] GetFileType (hFile=0x168) returned 0x1
	[0206.018] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=13936) returned 1
	[0206.018] WriteFile (in: hFile=0x168, lpBuffer=0xc000120000*, nNumberOfBytesToWrite=0x3670, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000120000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x3670, lpOverlapped=0xc0001a1ce8) returned 1
	[0206.019] GetFileType (hFile=0x168) returned 0x1
	[0206.019] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x3670, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=13936) returned 1
	[0206.019] GetFileType (hFile=0x168) returned 0x1
	[0206.019] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=13936) returned 1
	[0206.019] WriteFile (in: hFile=0x168, lpBuffer=0xc00014b880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00014b880*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22d, lpOverlapped=0xc0001a1ce8) returned 1
	[0206.020] GetFileType (hFile=0x168) returned 0x1
	[0206.020] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x3670, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=13936) returned 1
	[0206.020] CloseHandle (hObject=0x168) returned 1
	[0206.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf.egmwv")) returned 0x20
	[0206.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.027] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.043] SetEvent (hEvent=0xc8) returned 1
	[0206.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf")) returned 0x20
	[0206.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x20) returned 1
	[0206.045] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.072] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0206.072] ReadFile (in: hFile=0x164, lpBuffer=0xc0002e1a80, nNumberOfBytesToRead=0x1a7c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e1a80*, lpNumberOfBytesRead=0xc00038dcec*=0x1a7c, lpOverlapped=0x0) returned 1
	[0206.077] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0206.077] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b644a | out: pbBuffer=0xc0002b644a) returned 1
	[0206.077] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000412802 | out: pbBuffer=0xc000412802) returned 1
	[0206.077] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004128ba | out: pbBuffer=0xc0004128ba) returned 1
	[0206.078] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0206.078] GetFileType (hFile=0x164) returned 0x1
	[0206.078] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=6780) returned 1
	[0206.078] WriteFile (in: hFile=0x164, lpBuffer=0xc0001d4000*, nNumberOfBytesToWrite=0x1a7c, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc0001d4000*, lpNumberOfBytesWritten=0xc000151ccc*=0x1a7c, lpOverlapped=0xc000151ce8) returned 1
	[0206.079] GetFileType (hFile=0x164) returned 0x1
	[0206.079] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1a7c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=6780) returned 1
	[0206.079] GetFileType (hFile=0x164) returned 0x1
	[0206.079] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000151ca0*=6780) returned 1
	[0206.079] WriteFile (in: hFile=0x164, lpBuffer=0xc000448700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000151ccc, lpOverlapped=0xc000151ce8 | out: lpBuffer=0xc000448700*, lpNumberOfBytesWritten=0xc000151ccc*=0x230, lpOverlapped=0xc000151ce8) returned 1
	[0206.079] GetFileType (hFile=0x164) returned 0x1
	[0206.079] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1a7c, lpNewFilePointer=0xc000151ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000151ca0*=6780) returned 1
	[0206.079] CloseHandle (hObject=0x164) returned 1
	[0206.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf.egmwv")) returned 0x20
	[0206.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.082] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.095] SetEvent (hEvent=0xc8) returned 1
	[0206.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf")) returned 0x20
	[0206.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x20) returned 1
	[0206.099] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.127] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0206.127] ReadFile (in: hFile=0x164, lpBuffer=0xc000222000, nNumberOfBytesToRead=0x439c, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000222000*, lpNumberOfBytesRead=0xc000193cec*=0x439c, lpOverlapped=0x0) returned 1
	[0206.134] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053370 | out: pbBuffer=0xc000053370) returned 1
	[0206.134] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005338a | out: pbBuffer=0xc00005338a) returned 1
	[0206.134] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000270f02 | out: pbBuffer=0xc000270f02) returned 1
	[0206.134] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000270f4d | out: pbBuffer=0xc000270f4d) returned 1
	[0206.134] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0000533b0 | out: pbBuffer=0xc0000533b0) returned 1
	[0206.134] GetFileType (hFile=0x164) returned 0x1
	[0206.134] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=17308) returned 1
	[0206.135] WriteFile (in: hFile=0x164, lpBuffer=0xc0003b4000*, nNumberOfBytesToWrite=0x439c, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0003b4000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x439c, lpOverlapped=0xc0001a1ce8) returned 1
	[0206.135] GetFileType (hFile=0x164) returned 0x1
	[0206.135] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x439c, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=17308) returned 1
	[0206.135] GetFileType (hFile=0x164) returned 0x1
	[0206.136] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=17308) returned 1
	[0206.136] WriteFile (in: hFile=0x164, lpBuffer=0xc00023b180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00023b180*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22d, lpOverlapped=0xc0001a1ce8) returned 1
	[0206.136] GetFileType (hFile=0x164) returned 0x1
	[0206.136] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x439c, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=17308) returned 1
	[0206.136] CloseHandle (hObject=0x164) returned 1
	[0206.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf.egmwv")) returned 0x20
	[0206.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.139] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid")) returned 0x20
	[0206.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x20) returned 1
	[0206.146] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0206.218] SetEvent (hEvent=0x70) returned 1
	[0206.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.219] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0206.219] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x12ee, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc000193cec*=0x12ee, lpOverlapped=0x0) returned 1
	[0206.225] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414100 | out: pbBuffer=0xc000414100) returned 1
	[0206.225] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041411a | out: pbBuffer=0xc00041411a) returned 1
	[0206.225] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001102 | out: pbBuffer=0xc000001102) returned 1
	[0206.225] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00000116b | out: pbBuffer=0xc00000116b) returned 1
	[0206.225] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414140 | out: pbBuffer=0xc000414140) returned 1
	[0206.225] GetFileType (hFile=0x17c) returned 0x1
	[0206.225] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4846) returned 1
	[0206.225] WriteFile (in: hFile=0x17c, lpBuffer=0xc0000c6000*, nNumberOfBytesToWrite=0x12ee, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000c6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x12ee, lpOverlapped=0xc000155ce8) returned 1
	[0206.226] GetFileType (hFile=0x17c) returned 0x1
	[0206.226] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x12ee, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4846) returned 1
	[0206.226] GetFileType (hFile=0x17c) returned 0x1
	[0206.226] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=4846) returned 1
	[0206.226] WriteFile (in: hFile=0x17c, lpBuffer=0xc000318e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000318e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0206.227] GetFileType (hFile=0x17c) returned 0x1
	[0206.227] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x12ee, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=4846) returned 1
	[0206.227] CloseHandle (hObject=0x17c) returned 1
	[0206.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid.egmwv")) returned 0x20
	[0206.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0206.231] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.243] SetEvent (hEvent=0x60) returned 1
	[0206.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x20
	[0206.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x20) returned 1
	[0206.244] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.269] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.271] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0206.271] ReadFile (in: hFile=0x17c, lpBuffer=0xc000462000, nNumberOfBytesToRead=0x7620, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000462000*, lpNumberOfBytesRead=0xc000193cec*=0x7620, lpOverlapped=0x0) returned 1
	[0206.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0206.277] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0206.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f22 | out: pbBuffer=0xc000214f22) returned 1
	[0206.277] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0206.278] GetFileType (hFile=0x17c) returned 0x1
	[0206.278] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026bca0*=30240) returned 1
	[0206.278] WriteFile (in: hFile=0x17c, lpBuffer=0xc00006c000*, nNumberOfBytesToWrite=0x7620, lpNumberOfBytesWritten=0xc00026bccc, lpOverlapped=0xc00026bce8 | out: lpBuffer=0xc00006c000*, lpNumberOfBytesWritten=0xc00026bccc*=0x7620, lpOverlapped=0xc00026bce8) returned 1
	[0206.279] GetFileType (hFile=0x17c) returned 0x1
	[0206.279] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x7620, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026bca0*=30240) returned 1
	[0206.279] GetFileType (hFile=0x17c) returned 0x1
	[0206.279] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026bca0*=30240) returned 1
	[0206.279] WriteFile (in: hFile=0x17c, lpBuffer=0xc0003dd500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00026bccc, lpOverlapped=0xc00026bce8 | out: lpBuffer=0xc0003dd500*, lpNumberOfBytesWritten=0xc00026bccc*=0x22a, lpOverlapped=0xc00026bce8) returned 1
	[0206.280] GetFileType (hFile=0x17c) returned 0x1
	[0206.280] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x7620, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026bca0*=30240) returned 1
	[0206.280] CloseHandle (hObject=0x17c) returned 1
	[0206.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf.egmwv")) returned 0x20
	[0206.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.282] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.283] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.287] SetEvent (hEvent=0x60) returned 1
	[0206.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x20
	[0206.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x20) returned 1
	[0206.288] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.318] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.318] ReadFile (in: hFile=0x164, lpBuffer=0xc0001f0000, nNumberOfBytesToRead=0x920e, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f0000*, lpNumberOfBytesRead=0xc000389cec*=0x920e, lpOverlapped=0x0) returned 1
	[0206.325] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0206.325] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215b02 | out: pbBuffer=0xc000215b02) returned 1
	[0206.325] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215b63 | out: pbBuffer=0xc000215b63) returned 1
	[0206.325] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215bc2 | out: pbBuffer=0xc000215bc2) returned 1
	[0206.325] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215bca | out: pbBuffer=0xc000215bca) returned 1
	[0206.325] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0206.325] GetFileType (hFile=0x164) returned 0x1
	[0206.326] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026bca0*=37390) returned 1
	[0206.326] WriteFile (in: hFile=0x164, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x920e, lpNumberOfBytesWritten=0xc00026bccc, lpOverlapped=0xc00026bce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc00026bccc*=0x920e, lpOverlapped=0xc00026bce8) returned 1
	[0206.326] GetFileType (hFile=0x164) returned 0x1
	[0206.327] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x920e, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026bca0*=37390) returned 1
	[0206.327] GetFileType (hFile=0x164) returned 0x1
	[0206.327] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00026bca0*=37390) returned 1
	[0206.327] WriteFile (in: hFile=0x164, lpBuffer=0xc0002a0e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00026bccc, lpOverlapped=0xc00026bce8 | out: lpBuffer=0xc0002a0e00*, lpNumberOfBytesWritten=0xc00026bccc*=0x22d, lpOverlapped=0xc00026bce8) returned 1
	[0206.328] GetFileType (hFile=0x164) returned 0x1
	[0206.328] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x920e, lpNewFilePointer=0xc00026bca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00026bca0*=37390) returned 1
	[0206.328] CloseHandle (hObject=0x164) returned 1
	[0206.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf.egmwv")) returned 0x20
	[0206.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.332] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x20
	[0206.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x20) returned 1
	[0206.338] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.377] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.377] ReadFile (in: hFile=0x168, lpBuffer=0xc0002f0000, nNumberOfBytesToRead=0xb6de, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesRead=0xc000389cec*=0xb6de, lpOverlapped=0x0) returned 1
	[0206.383] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062b0 | out: pbBuffer=0xc0002062b0) returned 1
	[0206.383] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043e402 | out: pbBuffer=0xc00043e402) returned 1
	[0206.383] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043e408 | out: pbBuffer=0xc00043e408) returned 1
	[0206.383] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043e464 | out: pbBuffer=0xc00043e464) returned 1
	[0206.384] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062f0 | out: pbBuffer=0xc0002062f0) returned 1
	[0206.384] GetFileType (hFile=0x168) returned 0x1
	[0206.384] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=46814) returned 1
	[0206.384] WriteFile (in: hFile=0x168, lpBuffer=0xc000138000*, nNumberOfBytesToWrite=0xb6de, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000138000*, lpNumberOfBytesWritten=0xc000411ccc*=0xb6de, lpOverlapped=0xc000411ce8) returned 1
	[0206.385] GetFileType (hFile=0x168) returned 0x1
	[0206.385] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb6de, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=46814) returned 1
	[0206.385] GetFileType (hFile=0x168) returned 0x1
	[0206.385] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000411ca0*=46814) returned 1
	[0206.386] WriteFile (in: hFile=0x168, lpBuffer=0xc000442e00*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0xc000411ccc, lpOverlapped=0xc000411ce8 | out: lpBuffer=0xc000442e00*, lpNumberOfBytesWritten=0xc000411ccc*=0x23c, lpOverlapped=0xc000411ce8) returned 1
	[0206.386] GetFileType (hFile=0x168) returned 0x1
	[0206.386] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0xb6de, lpNewFilePointer=0xc000411ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000411ca0*=46814) returned 1
	[0206.386] CloseHandle (hObject=0x168) returned 1
	[0206.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf.egmwv")) returned 0x20
	[0206.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.389] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.399] SetEvent (hEvent=0x150) returned 1
	[0206.399] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x20
	[0206.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x20) returned 1
	[0206.408] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.442] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc0002d5cc4 | out: lpMode=0xc0002d5cc4) returned 0
	[0206.442] ReadFile (in: hFile=0x168, lpBuffer=0xc000440000, nNumberOfBytesToRead=0x2168, lpNumberOfBytesRead=0xc0002d5cec, lpOverlapped=0x0 | out: lpBuffer=0xc000440000*, lpNumberOfBytesRead=0xc0002d5cec*=0x2168, lpOverlapped=0x0) returned 1
	[0206.447] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0206.447] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0206.448] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0206.448] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0206.448] GetFileType (hFile=0x168) returned 0x1
	[0206.448] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=8552) returned 1
	[0206.448] WriteFile (in: hFile=0x168, lpBuffer=0xc00019c000*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc00019c000*, lpNumberOfBytesWritten=0xc00040dccc*=0x2168, lpOverlapped=0xc00040dce8) returned 1
	[0206.449] GetFileType (hFile=0x168) returned 0x1
	[0206.449] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2168, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=8552) returned 1
	[0206.449] GetFileType (hFile=0x168) returned 0x1
	[0206.449] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=8552) returned 1
	[0206.449] WriteFile (in: hFile=0x168, lpBuffer=0xc000309500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000309500*, lpNumberOfBytesWritten=0xc00040dccc*=0x227, lpOverlapped=0xc00040dce8) returned 1
	[0206.449] GetFileType (hFile=0x168) returned 0x1
	[0206.450] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2168, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=8552) returned 1
	[0206.450] CloseHandle (hObject=0x168) returned 1
	[0206.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf.egmwv")) returned 0x20
	[0206.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.451] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x20
	[0206.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x20) returned 1
	[0206.466] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.491] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.491] ReadFile (in: hFile=0x164, lpBuffer=0xc00042c000, nNumberOfBytesToRead=0x1ec6, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042c000*, lpNumberOfBytesRead=0xc000389cec*=0x1ec6, lpOverlapped=0x0) returned 1
	[0206.496] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0206.496] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0206.497] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d11 | out: pbBuffer=0xc0002c0d11) returned 1
	[0206.497] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0206.497] GetFileType (hFile=0x164) returned 0x1
	[0206.497] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=7878) returned 1
	[0206.497] WriteFile (in: hFile=0x164, lpBuffer=0xc00036e000*, nNumberOfBytesToWrite=0x1ec6, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc00036e000*, lpNumberOfBytesWritten=0xc00021fccc*=0x1ec6, lpOverlapped=0xc00021fce8) returned 1
	[0206.498] GetFileType (hFile=0x164) returned 0x1
	[0206.498] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1ec6, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=7878) returned 1
	[0206.498] GetFileType (hFile=0x164) returned 0x1
	[0206.498] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=7878) returned 1
	[0206.498] WriteFile (in: hFile=0x164, lpBuffer=0xc00038f500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc00038f500*, lpNumberOfBytesWritten=0xc00021fccc*=0x230, lpOverlapped=0xc00021fce8) returned 1
	[0206.499] GetFileType (hFile=0x164) returned 0x1
	[0206.499] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1ec6, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=7878) returned 1
	[0206.499] CloseHandle (hObject=0x164) returned 1
	[0206.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf.egmwv")) returned 0x20
	[0206.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.501] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x20
	[0206.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x20) returned 1
	[0206.512] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.545] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.545] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001c2000, nNumberOfBytesToRead=0x12bc, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001c2000*, lpNumberOfBytesRead=0xc000389cec*=0x12bc, lpOverlapped=0x0) returned 1
	[0206.552] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206640 | out: pbBuffer=0xc000206640) returned 1
	[0206.552] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0206.552] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f63 | out: pbBuffer=0xc000001f63) returned 1
	[0206.552] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206680 | out: pbBuffer=0xc000206680) returned 1
	[0206.552] GetFileType (hFile=0x17c) returned 0x1
	[0206.552] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=4796) returned 1
	[0206.553] WriteFile (in: hFile=0x17c, lpBuffer=0xc000256000*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000256000*, lpNumberOfBytesWritten=0xc00040dccc*=0x12bc, lpOverlapped=0xc00040dce8) returned 1
	[0206.553] GetFileType (hFile=0x17c) returned 0x1
	[0206.553] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x12bc, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=4796) returned 1
	[0206.553] GetFileType (hFile=0x17c) returned 0x1
	[0206.554] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=4796) returned 1
	[0206.554] WriteFile (in: hFile=0x17c, lpBuffer=0xc000258000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000258000*, lpNumberOfBytesWritten=0xc00040dccc*=0x22d, lpOverlapped=0xc00040dce8) returned 1
	[0206.554] GetFileType (hFile=0x17c) returned 0x1
	[0206.554] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x12bc, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=4796) returned 1
	[0206.554] CloseHandle (hObject=0x17c) returned 1
	[0206.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf.egmwv")) returned 0x20
	[0206.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.560] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x20
	[0206.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x20) returned 1
	[0206.567] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.601] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0206.601] ReadFile (in: hFile=0x168, lpBuffer=0xc00044b900, nNumberOfBytesToRead=0x22de, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00044b900*, lpNumberOfBytesRead=0xc000389cec*=0x22de, lpOverlapped=0x0) returned 1
	[0206.608] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206970 | out: pbBuffer=0xc000206970) returned 1
	[0206.608] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00030f602 | out: pbBuffer=0xc00030f602) returned 1
	[0206.608] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00030f604 | out: pbBuffer=0xc00030f604) returned 1
	[0206.608] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00030f6e2 | out: pbBuffer=0xc00030f6e2) returned 1
	[0206.608] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002069b0 | out: pbBuffer=0xc0002069b0) returned 1
	[0206.609] GetFileType (hFile=0x168) returned 0x1
	[0206.609] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=8926) returned 1
	[0206.609] WriteFile (in: hFile=0x168, lpBuffer=0xc000328000*, nNumberOfBytesToWrite=0x22de, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000328000*, lpNumberOfBytesWritten=0xc00040dccc*=0x22de, lpOverlapped=0xc00040dce8) returned 1
	[0206.610] GetFileType (hFile=0x168) returned 0x1
	[0206.610] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x22de, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=8926) returned 1
	[0206.610] GetFileType (hFile=0x168) returned 0x1
	[0206.611] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=8926) returned 1
	[0206.611] WriteFile (in: hFile=0x168, lpBuffer=0xc00031d180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc00031d180*, lpNumberOfBytesWritten=0xc00040dccc*=0x230, lpOverlapped=0xc00040dce8) returned 1
	[0206.611] GetFileType (hFile=0x168) returned 0x1
	[0206.611] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x22de, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=8926) returned 1
	[0206.611] CloseHandle (hObject=0x168) returned 1
	[0206.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf.egmwv")) returned 0x20
	[0206.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.616] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.627] SetEvent (hEvent=0xe4) returned 1
	[0206.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x20
	[0206.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x20) returned 1
	[0206.635] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.661] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0206.661] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000f6000, nNumberOfBytesToRead=0x148c, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesRead=0xc000199cec*=0x148c, lpOverlapped=0x0) returned 1
	[0206.667] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052cf0 | out: pbBuffer=0xc000052cf0) returned 1
	[0206.667] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1e02 | out: pbBuffer=0xc0002c1e02) returned 1
	[0206.668] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d30 | out: pbBuffer=0xc000052d30) returned 1
	[0206.668] GetFileType (hFile=0x17c) returned 0x1
	[0206.668] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=5260) returned 1
	[0206.668] WriteFile (in: hFile=0x17c, lpBuffer=0xc00010a000*, nNumberOfBytesToWrite=0x148c, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc00010a000*, lpNumberOfBytesWritten=0xc00021fccc*=0x148c, lpOverlapped=0xc00021fce8) returned 1
	[0206.669] GetFileType (hFile=0x17c) returned 0x1
	[0206.669] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x148c, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=5260) returned 1
	[0206.669] GetFileType (hFile=0x17c) returned 0x1
	[0206.669] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00021fca0*=5260) returned 1
	[0206.669] WriteFile (in: hFile=0x17c, lpBuffer=0xc000104e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00021fccc, lpOverlapped=0xc00021fce8 | out: lpBuffer=0xc000104e00*, lpNumberOfBytesWritten=0xc00021fccc*=0x227, lpOverlapped=0xc00021fce8) returned 1
	[0206.670] GetFileType (hFile=0x17c) returned 0x1
	[0206.670] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x148c, lpNewFilePointer=0xc00021fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00021fca0*=5260) returned 1
	[0206.670] CloseHandle (hObject=0x17c) returned 1
	[0206.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf.egmwv")) returned 0x20
	[0206.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.673] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.677] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.688] SetEvent (hEvent=0xe4) returned 1
	[0206.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x20
	[0206.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x20) returned 1
	[0206.692] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.719] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0206.719] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003ca000, nNumberOfBytesToRead=0x2b90, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ca000*, lpNumberOfBytesRead=0xc000197cec*=0x2b90, lpOverlapped=0x0) returned 1
	[0206.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b65e0 | out: pbBuffer=0xc0002b65e0) returned 1
	[0206.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b65fa | out: pbBuffer=0xc0002b65fa) returned 1
	[0206.726] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00032d702 | out: pbBuffer=0xc00032d702) returned 1
	[0206.726] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6620 | out: pbBuffer=0xc0002b6620) returned 1
	[0206.727] GetFileType (hFile=0x17c) returned 0x1
	[0206.727] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=11152) returned 1
	[0206.727] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001f6000*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2b90, lpOverlapped=0xc000155ce8) returned 1
	[0206.727] GetFileType (hFile=0x17c) returned 0x1
	[0206.728] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2b90, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=11152) returned 1
	[0206.728] GetFileType (hFile=0x17c) returned 0x1
	[0206.728] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=11152) returned 1
	[0206.728] WriteFile (in: hFile=0x17c, lpBuffer=0xc0001d4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001d4a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0206.728] GetFileType (hFile=0x17c) returned 0x1
	[0206.728] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x2b90, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=11152) returned 1
	[0206.729] CloseHandle (hObject=0x17c) returned 1
	[0206.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf.egmwv")) returned 0x20
	[0206.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.733] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x20
	[0206.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x20) returned 1
	[0206.747] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0206.783] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0206.783] ReadFile (in: hFile=0x164, lpBuffer=0xc000218000, nNumberOfBytesToRead=0xa6d0, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc000197cec*=0xa6d0, lpOverlapped=0x0) returned 1
	[0206.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0206.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0206.789] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0206.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001231 | out: pbBuffer=0xc000001231) returned 1
	[0206.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001267 | out: pbBuffer=0xc000001267) returned 1
	[0206.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0206.790] GetFileType (hFile=0x164) returned 0x1
	[0206.790] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=42704) returned 1
	[0206.790] WriteFile (in: hFile=0x164, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0xa6d0, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc00040dccc*=0xa6d0, lpOverlapped=0xc00040dce8) returned 1
	[0206.791] GetFileType (hFile=0x164) returned 0x1
	[0206.791] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6d0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=42704) returned 1
	[0206.791] GetFileType (hFile=0x164) returned 0x1
	[0206.791] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=42704) returned 1
	[0206.791] WriteFile (in: hFile=0x164, lpBuffer=0xc000121500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000121500*, lpNumberOfBytesWritten=0xc00040dccc*=0x230, lpOverlapped=0xc00040dce8) returned 1
	[0206.792] GetFileType (hFile=0x164) returned 0x1
	[0206.792] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6d0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=42704) returned 1
	[0206.792] CloseHandle (hObject=0x164) returned 1
	[0206.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf.egmwv")) returned 0x20
	[0206.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.795] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.800] SetEvent (hEvent=0x150) returned 1
	[0206.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x20
	[0206.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x20) returned 1
	[0206.803] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.838] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0206.838] ReadFile (in: hFile=0x168, lpBuffer=0xc000398000, nNumberOfBytesToRead=0x96c, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc000398000*, lpNumberOfBytesRead=0xc000199cec*=0x96c, lpOverlapped=0x0) returned 1
	[0206.848] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0206.848] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038502 | out: pbBuffer=0xc000038502) returned 1
	[0206.848] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0206.848] GetFileType (hFile=0x168) returned 0x1
	[0206.849] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=2412) returned 1
	[0206.849] WriteFile (in: hFile=0x168, lpBuffer=0xc0002a3000*, nNumberOfBytesToWrite=0x96c, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc0002a3000*, lpNumberOfBytesWritten=0xc00040dccc*=0x96c, lpOverlapped=0xc00040dce8) returned 1
	[0206.849] GetFileType (hFile=0x168) returned 0x1
	[0206.849] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x96c, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=2412) returned 1
	[0206.849] GetFileType (hFile=0x168) returned 0x1
	[0206.849] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=2412) returned 1
	[0206.850] WriteFile (in: hFile=0x168, lpBuffer=0xc0002a6e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc0002a6e00*, lpNumberOfBytesWritten=0xc00040dccc*=0x22a, lpOverlapped=0xc00040dce8) returned 1
	[0206.850] GetFileType (hFile=0x168) returned 0x1
	[0206.850] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x96c, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=2412) returned 1
	[0206.850] CloseHandle (hObject=0x168) returned 1
	[0206.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf.egmwv")) returned 0x20
	[0206.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x20
	[0206.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x20) returned 1
	[0206.860] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0206.905] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0206.905] ReadFile (in: hFile=0x168, lpBuffer=0xc0000c8000, nNumberOfBytesToRead=0x488, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000c8000*, lpNumberOfBytesRead=0xc000199cec*=0x488, lpOverlapped=0x0) returned 1
	[0206.910] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206430 | out: pbBuffer=0xc000206430) returned 1
	[0206.910] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020644a | out: pbBuffer=0xc00020644a) returned 1
	[0206.910] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039a02 | out: pbBuffer=0xc000039a02) returned 1
	[0206.911] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206470 | out: pbBuffer=0xc000206470) returned 1
	[0206.911] GetFileType (hFile=0x168) returned 0x1
	[0206.911] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=1160) returned 1
	[0206.911] WriteFile (in: hFile=0x168, lpBuffer=0xc000138000*, nNumberOfBytesToWrite=0x488, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000138000*, lpNumberOfBytesWritten=0xc00040dccc*=0x488, lpOverlapped=0xc00040dce8) returned 1
	[0206.911] GetFileType (hFile=0x168) returned 0x1
	[0206.912] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x488, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=1160) returned 1
	[0206.912] GetFileType (hFile=0x168) returned 0x1
	[0206.912] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00040dca0*=1160) returned 1
	[0206.912] WriteFile (in: hFile=0x168, lpBuffer=0xc000134700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc00040dccc, lpOverlapped=0xc00040dce8 | out: lpBuffer=0xc000134700*, lpNumberOfBytesWritten=0xc00040dccc*=0x221, lpOverlapped=0xc00040dce8) returned 1
	[0206.912] GetFileType (hFile=0x168) returned 0x1
	[0206.912] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x488, lpNewFilePointer=0xc00040dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00040dca0*=1160) returned 1
	[0206.912] CloseHandle (hObject=0x168) returned 1
	[0206.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf.egmwv")) returned 0x20
	[0206.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.917] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x20
	[0206.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x20) returned 1
	[0206.935] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0206.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0206.967] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0206.967] ReadFile (in: hFile=0x17c, lpBuffer=0xc0000fe000, nNumberOfBytesToRead=0x76ce, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000fe000*, lpNumberOfBytesRead=0xc000199cec*=0x76ce, lpOverlapped=0x0) returned 1
	[0206.973] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0206.973] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0206.973] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001eaa02 | out: pbBuffer=0xc0001eaa02) returned 1
	[0206.973] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001eaaae | out: pbBuffer=0xc0001eaaae) returned 1
	[0206.973] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0206.973] GetFileType (hFile=0x17c) returned 0x1
	[0206.973] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000335ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000335ca0*=30414) returned 1
	[0206.974] WriteFile (in: hFile=0x17c, lpBuffer=0xc0002e0000*, nNumberOfBytesToWrite=0x76ce, lpNumberOfBytesWritten=0xc000335ccc, lpOverlapped=0xc000335ce8 | out: lpBuffer=0xc0002e0000*, lpNumberOfBytesWritten=0xc000335ccc*=0x76ce, lpOverlapped=0xc000335ce8) returned 1
	[0206.974] GetFileType (hFile=0x17c) returned 0x1
	[0206.974] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x76ce, lpNewFilePointer=0xc000335ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000335ca0*=30414) returned 1
	[0206.975] GetFileType (hFile=0x17c) returned 0x1
	[0206.975] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000335ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000335ca0*=30414) returned 1
	[0206.975] WriteFile (in: hFile=0x17c, lpBuffer=0xc00033d500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000335ccc, lpOverlapped=0xc000335ce8 | out: lpBuffer=0xc00033d500*, lpNumberOfBytesWritten=0xc000335ccc*=0x236, lpOverlapped=0xc000335ce8) returned 1
	[0206.975] GetFileType (hFile=0x17c) returned 0x1
	[0206.975] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x76ce, lpNewFilePointer=0xc000335ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000335ca0*=30414) returned 1
	[0206.976] CloseHandle (hObject=0x17c) returned 1
	[0206.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf.egmwv")) returned 0x20
	[0206.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0206.978] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.245] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.255] SetEvent (hEvent=0xc8) returned 1
	[0207.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x20
	[0207.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x20) returned 1
	[0207.261] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.291] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0207.291] ReadFile (in: hFile=0x168, lpBuffer=0xc000218000, nNumberOfBytesToRead=0x329e, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc000218000*, lpNumberOfBytesRead=0xc000197cec*=0x329e, lpOverlapped=0x0) returned 1
	[0207.297] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0207.297] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0902 | out: pbBuffer=0xc0002c0902) returned 1
	[0207.297] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0908 | out: pbBuffer=0xc0002c0908) returned 1
	[0207.297] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0207.297] GetFileType (hFile=0x168) returned 0x1
	[0207.298] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=12958) returned 1
	[0207.298] WriteFile (in: hFile=0x168, lpBuffer=0xc000222000*, nNumberOfBytesToWrite=0x329e, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000222000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x329e, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.298] GetFileType (hFile=0x168) returned 0x1
	[0207.298] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x329e, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=12958) returned 1
	[0207.298] GetFileType (hFile=0x168) returned 0x1
	[0207.299] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=12958) returned 1
	[0207.299] WriteFile (in: hFile=0x168, lpBuffer=0xc000243880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000243880*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x230, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.299] GetFileType (hFile=0x168) returned 0x1
	[0207.299] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x329e, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=12958) returned 1
	[0207.299] CloseHandle (hObject=0x168) returned 1
	[0207.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf.egmwv")) returned 0x20
	[0207.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.302] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x20
	[0207.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x20) returned 1
	[0207.307] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.339] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000197cc4 | out: lpMode=0xc000197cc4) returned 0
	[0207.339] ReadFile (in: hFile=0x164, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x112c, lpNumberOfBytesRead=0xc000197cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000197cec*=0x112c, lpOverlapped=0x0) returned 1
	[0207.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052eb0 | out: pbBuffer=0xc000052eb0) returned 1
	[0207.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eca | out: pbBuffer=0xc000052eca) returned 1
	[0207.345] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000038a02 | out: pbBuffer=0xc000038a02) returned 1
	[0207.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ef0 | out: pbBuffer=0xc000052ef0) returned 1
	[0207.345] GetFileType (hFile=0x164) returned 0x1
	[0207.345] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4396) returned 1
	[0207.345] WriteFile (in: hFile=0x164, lpBuffer=0xc000390000*, nNumberOfBytesToWrite=0x112c, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000390000*, lpNumberOfBytesWritten=0xc00019dccc*=0x112c, lpOverlapped=0xc00019dce8) returned 1
	[0207.346] GetFileType (hFile=0x164) returned 0x1
	[0207.347] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x112c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4396) returned 1
	[0207.347] GetFileType (hFile=0x164) returned 0x1
	[0207.347] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4396) returned 1
	[0207.347] WriteFile (in: hFile=0x164, lpBuffer=0xc000476700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000476700*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0207.347] GetFileType (hFile=0x164) returned 0x1
	[0207.347] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x112c, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4396) returned 1
	[0207.348] CloseHandle (hObject=0x164) returned 1
	[0207.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf.egmwv")) returned 0x20
	[0207.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.353] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x20
	[0207.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x20) returned 1
	[0207.361] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.398] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.398] ReadFile (in: hFile=0x17c, lpBuffer=0xc0003f4600, nNumberOfBytesToRead=0x1234, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f4600*, lpNumberOfBytesRead=0xc000389cec*=0x1234, lpOverlapped=0x0) returned 1
	[0207.404] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053040 | out: pbBuffer=0xc000053040) returned 1
	[0207.404] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005305a | out: pbBuffer=0xc00005305a) returned 1
	[0207.404] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039e02 | out: pbBuffer=0xc000039e02) returned 1
	[0207.405] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000039e62 | out: pbBuffer=0xc000039e62) returned 1
	[0207.405] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053080 | out: pbBuffer=0xc000053080) returned 1
	[0207.405] GetFileType (hFile=0x17c) returned 0x1
	[0207.405] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4660) returned 1
	[0207.405] WriteFile (in: hFile=0x17c, lpBuffer=0xc00040e000*, nNumberOfBytesToWrite=0x1234, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00040e000*, lpNumberOfBytesWritten=0xc00019dccc*=0x1234, lpOverlapped=0xc00019dce8) returned 1
	[0207.406] GetFileType (hFile=0x17c) returned 0x1
	[0207.406] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1234, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4660) returned 1
	[0207.406] GetFileType (hFile=0x17c) returned 0x1
	[0207.406] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=4660) returned 1
	[0207.406] WriteFile (in: hFile=0x17c, lpBuffer=0xc000410000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000410000*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0207.407] GetFileType (hFile=0x17c) returned 0x1
	[0207.407] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1234, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=4660) returned 1
	[0207.407] CloseHandle (hObject=0x17c) returned 1
	[0207.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf.egmwv")) returned 0x20
	[0207.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.413] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.436] SetEvent (hEvent=0xc0) returned 1
	[0207.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x20
	[0207.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x20) returned 1
	[0207.441] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.465] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0207.465] ReadFile (in: hFile=0x164, lpBuffer=0xc000358000, nNumberOfBytesToRead=0x1510, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000358000*, lpNumberOfBytesRead=0xc0002d7cec*=0x1510, lpOverlapped=0x0) returned 1
	[0207.472] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62c0 | out: pbBuffer=0xc0002b62c0) returned 1
	[0207.472] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62da | out: pbBuffer=0xc0002b62da) returned 1
	[0207.472] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0207.472] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b2f | out: pbBuffer=0xc0002c1b2f) returned 1
	[0207.472] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b94 | out: pbBuffer=0xc0002c1b94) returned 1
	[0207.472] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6300 | out: pbBuffer=0xc0002b6300) returned 1
	[0207.472] GetFileType (hFile=0x164) returned 0x1
	[0207.473] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=5392) returned 1
	[0207.473] WriteFile (in: hFile=0x164, lpBuffer=0xc0001c6000*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x1510, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.473] GetFileType (hFile=0x164) returned 0x1
	[0207.473] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1510, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=5392) returned 1
	[0207.473] GetFileType (hFile=0x164) returned 0x1
	[0207.474] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=5392) returned 1
	[0207.474] WriteFile (in: hFile=0x164, lpBuffer=0xc0001ad180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0001ad180*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x224, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.474] GetFileType (hFile=0x164) returned 0x1
	[0207.474] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1510, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=5392) returned 1
	[0207.474] CloseHandle (hObject=0x164) returned 1
	[0207.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf.egmwv")) returned 0x20
	[0207.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.477] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.481] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.492] SetEvent (hEvent=0xc0) returned 1
	[0207.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid")) returned 0x20
	[0207.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x20) returned 1
	[0207.495] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0207.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.523] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0207.523] ReadFile (in: hFile=0x164, lpBuffer=0xc0000f6000, nNumberOfBytesToRead=0x32b5, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesRead=0xc000193cec*=0x32b5, lpOverlapped=0x0) returned 1
	[0207.530] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414430 | out: pbBuffer=0xc000414430) returned 1
	[0207.530] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041444a | out: pbBuffer=0xc00041444a) returned 1
	[0207.530] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000356b02 | out: pbBuffer=0xc000356b02) returned 1
	[0207.530] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000356b0a | out: pbBuffer=0xc000356b0a) returned 1
	[0207.530] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414470 | out: pbBuffer=0xc000414470) returned 1
	[0207.531] GetFileType (hFile=0x164) returned 0x1
	[0207.531] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12981) returned 1
	[0207.531] WriteFile (in: hFile=0x164, lpBuffer=0xc000448000*, nNumberOfBytesToWrite=0x32b5, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000448000*, lpNumberOfBytesWritten=0xc000155ccc*=0x32b5, lpOverlapped=0xc000155ce8) returned 1
	[0207.531] GetFileType (hFile=0x164) returned 0x1
	[0207.531] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x32b5, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12981) returned 1
	[0207.532] GetFileType (hFile=0x164) returned 0x1
	[0207.532] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=12981) returned 1
	[0207.532] WriteFile (in: hFile=0x164, lpBuffer=0xc00042a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00042a700*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0207.532] GetFileType (hFile=0x164) returned 0x1
	[0207.532] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x32b5, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=12981) returned 1
	[0207.532] CloseHandle (hObject=0x164) returned 1
	[0207.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid.egmwv")) returned 0x20
	[0207.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0207.535] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.540] SetEvent (hEvent=0xc0) returned 1
	[0207.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid")) returned 0x20
	[0207.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x20) returned 1
	[0207.542] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid.egmwv"), dwFlags=0x1) returned 1
	[0207.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.576] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000193cc4 | out: lpMode=0xc000193cc4) returned 0
	[0207.576] ReadFile (in: hFile=0x168, lpBuffer=0xc000120000, nNumberOfBytesToRead=0x1d8f, lpNumberOfBytesRead=0xc000193cec, lpOverlapped=0x0 | out: lpBuffer=0xc000120000*, lpNumberOfBytesRead=0xc000193cec*=0x1d8f, lpOverlapped=0x0) returned 1
	[0207.583] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6770 | out: pbBuffer=0xc0002b6770) returned 1
	[0207.583] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b678a | out: pbBuffer=0xc0002b678a) returned 1
	[0207.583] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000b1e02 | out: pbBuffer=0xc0000b1e02) returned 1
	[0207.583] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000b1e8b | out: pbBuffer=0xc0000b1e8b) returned 1
	[0207.583] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b67b0 | out: pbBuffer=0xc0002b67b0) returned 1
	[0207.583] GetFileType (hFile=0x168) returned 0x1
	[0207.583] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=7567) returned 1
	[0207.584] WriteFile (in: hFile=0x168, lpBuffer=0xc00013c000*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00013c000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x1d8f, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.584] GetFileType (hFile=0x168) returned 0x1
	[0207.584] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1d8f, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=7567) returned 1
	[0207.584] GetFileType (hFile=0x168) returned 0x1
	[0207.584] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=7567) returned 1
	[0207.584] WriteFile (in: hFile=0x168, lpBuffer=0xc000117c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000117c00*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x233, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.585] GetFileType (hFile=0x168) returned 0x1
	[0207.585] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1d8f, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=7567) returned 1
	[0207.585] CloseHandle (hObject=0x168) returned 1
	[0207.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid.egmwv")) returned 0x20
	[0207.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.egmwv", dwFileAttributes=0x21) returned 1
	[0207.589] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x20
	[0207.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x20) returned 1
	[0207.595] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.627] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.627] ReadFile (in: hFile=0x17c, lpBuffer=0xc000312000, nNumberOfBytesToRead=0x9a8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000312000*, lpNumberOfBytesRead=0xc000389cec*=0x9a8, lpOverlapped=0x0) returned 1
	[0207.633] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6910 | out: pbBuffer=0xc0002b6910) returned 1
	[0207.633] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b692a | out: pbBuffer=0xc0002b692a) returned 1
	[0207.633] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000138d02 | out: pbBuffer=0xc000138d02) returned 1
	[0207.633] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000138d46 | out: pbBuffer=0xc000138d46) returned 1
	[0207.633] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000138d82 | out: pbBuffer=0xc000138d82) returned 1
	[0207.633] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6950 | out: pbBuffer=0xc0002b6950) returned 1
	[0207.633] GetFileType (hFile=0x17c) returned 0x1
	[0207.633] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2472) returned 1
	[0207.634] WriteFile (in: hFile=0x17c, lpBuffer=0xc000324000*, nNumberOfBytesToWrite=0x9a8, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000324000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x9a8, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.634] GetFileType (hFile=0x17c) returned 0x1
	[0207.634] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9a8, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2472) returned 1
	[0207.634] GetFileType (hFile=0x17c) returned 0x1
	[0207.634] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2472) returned 1
	[0207.635] WriteFile (in: hFile=0x17c, lpBuffer=0xc00031b500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc00031b500*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x227, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.635] GetFileType (hFile=0x17c) returned 0x1
	[0207.635] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9a8, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2472) returned 1
	[0207.635] CloseHandle (hObject=0x17c) returned 1
	[0207.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf.egmwv")) returned 0x20
	[0207.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.639] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.648] SetEvent (hEvent=0x150) returned 1
	[0207.648] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x20
	[0207.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x20) returned 1
	[0207.657] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.688] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.688] ReadFile (in: hFile=0x164, lpBuffer=0xc000160000, nNumberOfBytesToRead=0xcd6, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000160000*, lpNumberOfBytesRead=0xc000389cec*=0xcd6, lpOverlapped=0x0) returned 1
	[0207.693] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414280 | out: pbBuffer=0xc000414280) returned 1
	[0207.693] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041429a | out: pbBuffer=0xc00041429a) returned 1
	[0207.694] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000139602 | out: pbBuffer=0xc000139602) returned 1
	[0207.694] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142c0 | out: pbBuffer=0xc0004142c0) returned 1
	[0207.694] GetFileType (hFile=0x164) returned 0x1
	[0207.694] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3286) returned 1
	[0207.694] WriteFile (in: hFile=0x164, lpBuffer=0xc000190000*, nNumberOfBytesToWrite=0xcd6, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000190000*, lpNumberOfBytesWritten=0xc000155ccc*=0xcd6, lpOverlapped=0xc000155ce8) returned 1
	[0207.695] GetFileType (hFile=0x164) returned 0x1
	[0207.695] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcd6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3286) returned 1
	[0207.695] GetFileType (hFile=0x164) returned 0x1
	[0207.695] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3286) returned 1
	[0207.695] WriteFile (in: hFile=0x164, lpBuffer=0xc000210000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000210000*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0207.695] GetFileType (hFile=0x164) returned 0x1
	[0207.696] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcd6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3286) returned 1
	[0207.696] CloseHandle (hObject=0x164) returned 1
	[0207.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf.egmwv")) returned 0x20
	[0207.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.698] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.711] SetEvent (hEvent=0xe4) returned 1
	[0207.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x20
	[0207.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x20) returned 1
	[0207.714] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.742] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.742] ReadFile (in: hFile=0x164, lpBuffer=0xc0003d6000, nNumberOfBytesToRead=0xbc8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003d6000*, lpNumberOfBytesRead=0xc000389cec*=0xbc8, lpOverlapped=0x0) returned 1
	[0207.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b70 | out: pbBuffer=0xc000052b70) returned 1
	[0207.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052b8a | out: pbBuffer=0xc000052b8a) returned 1
	[0207.748] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214d02 | out: pbBuffer=0xc000214d02) returned 1
	[0207.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214d6d | out: pbBuffer=0xc000214d6d) returned 1
	[0207.748] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052bb0 | out: pbBuffer=0xc000052bb0) returned 1
	[0207.748] GetFileType (hFile=0x164) returned 0x1
	[0207.749] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3016) returned 1
	[0207.749] WriteFile (in: hFile=0x164, lpBuffer=0xc00010c000*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00010c000*, lpNumberOfBytesWritten=0xc00019dccc*=0xbc8, lpOverlapped=0xc00019dce8) returned 1
	[0207.749] GetFileType (hFile=0x164) returned 0x1
	[0207.749] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xbc8, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3016) returned 1
	[0207.750] GetFileType (hFile=0x164) returned 0x1
	[0207.750] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3016) returned 1
	[0207.750] WriteFile (in: hFile=0x164, lpBuffer=0xc0003ef500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0003ef500*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0207.750] GetFileType (hFile=0x164) returned 0x1
	[0207.750] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xbc8, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3016) returned 1
	[0207.751] CloseHandle (hObject=0x164) returned 1
	[0207.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf.egmwv")) returned 0x20
	[0207.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.753] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.758] SetEvent (hEvent=0xe4) returned 1
	[0207.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x20
	[0207.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x20) returned 1
	[0207.760] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0207.791] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.791] ReadFile (in: hFile=0x168, lpBuffer=0xc0003ef880, nNumberOfBytesToRead=0x332, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ef880*, lpNumberOfBytesRead=0xc000389cec*=0x332, lpOverlapped=0x0) returned 1
	[0207.796] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0207.796] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215b02 | out: pbBuffer=0xc000215b02) returned 1
	[0207.796] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0207.797] GetFileType (hFile=0x168) returned 0x1
	[0207.797] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=818) returned 1
	[0207.797] WriteFile (in: hFile=0x168, lpBuffer=0xc0002ed000*, nNumberOfBytesToWrite=0x332, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0002ed000*, lpNumberOfBytesWritten=0xc00019dccc*=0x332, lpOverlapped=0xc00019dce8) returned 1
	[0207.798] GetFileType (hFile=0x168) returned 0x1
	[0207.798] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x332, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=818) returned 1
	[0207.798] GetFileType (hFile=0x168) returned 0x1
	[0207.798] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=818) returned 1
	[0207.798] WriteFile (in: hFile=0x168, lpBuffer=0xc0002eb180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0002eb180*, lpNumberOfBytesWritten=0xc00019dccc*=0x227, lpOverlapped=0xc00019dce8) returned 1
	[0207.799] GetFileType (hFile=0x168) returned 0x1
	[0207.799] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x332, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=818) returned 1
	[0207.799] CloseHandle (hObject=0x168) returned 1
	[0207.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf.egmwv")) returned 0x20
	[0207.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.806] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x20
	[0207.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x20) returned 1
	[0207.812] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0207.843] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.843] ReadFile (in: hFile=0x17c, lpBuffer=0xc00025c000, nNumberOfBytesToRead=0x16a6, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00025c000*, lpNumberOfBytesRead=0xc000389cec*=0x16a6, lpOverlapped=0x0) returned 1
	[0207.849] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145a0 | out: pbBuffer=0xc0004145a0) returned 1
	[0207.849] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145ba | out: pbBuffer=0xc0004145ba) returned 1
	[0207.849] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1702 | out: pbBuffer=0xc0002c1702) returned 1
	[0207.849] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145e0 | out: pbBuffer=0xc0004145e0) returned 1
	[0207.850] GetFileType (hFile=0x17c) returned 0x1
	[0207.850] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5798) returned 1
	[0207.850] WriteFile (in: hFile=0x17c, lpBuffer=0xc000278000*, nNumberOfBytesToWrite=0x16a6, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000278000*, lpNumberOfBytesWritten=0xc000155ccc*=0x16a6, lpOverlapped=0xc000155ce8) returned 1
	[0207.850] GetFileType (hFile=0x17c) returned 0x1
	[0207.850] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x16a6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5798) returned 1
	[0207.851] GetFileType (hFile=0x17c) returned 0x1
	[0207.851] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5798) returned 1
	[0207.851] WriteFile (in: hFile=0x17c, lpBuffer=0xc000269180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000269180*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0207.851] GetFileType (hFile=0x17c) returned 0x1
	[0207.851] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x16a6, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5798) returned 1
	[0207.851] CloseHandle (hObject=0x17c) returned 1
	[0207.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf.egmwv")) returned 0x20
	[0207.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.855] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x20
	[0207.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x20) returned 1
	[0207.872] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.897] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0207.897] ReadFile (in: hFile=0x164, lpBuffer=0xc00040c000, nNumberOfBytesToRead=0x578, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00040c000*, lpNumberOfBytesRead=0xc000389cec*=0x578, lpOverlapped=0x0) returned 1
	[0207.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0207.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020643a | out: pbBuffer=0xc00020643a) returned 1
	[0207.902] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000331602 | out: pbBuffer=0xc000331602) returned 1
	[0207.902] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0207.903] GetFileType (hFile=0x164) returned 0x1
	[0207.903] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1400) returned 1
	[0207.903] WriteFile (in: hFile=0x164, lpBuffer=0xc00011e000*, nNumberOfBytesToWrite=0x578, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc00011e000*, lpNumberOfBytesWritten=0xc000459ccc*=0x578, lpOverlapped=0xc000459ce8) returned 1
	[0207.903] GetFileType (hFile=0x164) returned 0x1
	[0207.903] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x578, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1400) returned 1
	[0207.903] GetFileType (hFile=0x164) returned 0x1
	[0207.904] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1400) returned 1
	[0207.904] WriteFile (in: hFile=0x164, lpBuffer=0xc00011a700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc00011a700*, lpNumberOfBytesWritten=0xc000459ccc*=0x22a, lpOverlapped=0xc000459ce8) returned 1
	[0207.904] GetFileType (hFile=0x164) returned 0x1
	[0207.904] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x578, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1400) returned 1
	[0207.904] CloseHandle (hObject=0x164) returned 1
	[0207.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf.egmwv")) returned 0x20
	[0207.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.908] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.925] SetEvent (hEvent=0xe4) returned 1
	[0207.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x20
	[0207.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x20) returned 1
	[0207.930] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0207.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0207.955] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0207.955] ReadFile (in: hFile=0x164, lpBuffer=0xc000092900, nNumberOfBytesToRead=0x844, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000092900*, lpNumberOfBytesRead=0xc000425cec*=0x844, lpOverlapped=0x0) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6740 | out: pbBuffer=0xc0002b6740) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001d8702 | out: pbBuffer=0xc0001d8702) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d873f | out: pbBuffer=0xc0001d873f) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d8763 | out: pbBuffer=0xc0001d8763) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d8782 | out: pbBuffer=0xc0001d8782) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d87a0 | out: pbBuffer=0xc0001d87a0) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001d87b8 | out: pbBuffer=0xc0001d87b8) returned 1
	[0207.961] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6780 | out: pbBuffer=0xc0002b6780) returned 1
	[0207.961] GetFileType (hFile=0x164) returned 0x1
	[0207.961] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2116) returned 1
	[0207.962] WriteFile (in: hFile=0x164, lpBuffer=0xc0001dd000*, nNumberOfBytesToWrite=0x844, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0001dd000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x844, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.962] GetFileType (hFile=0x164) returned 0x1
	[0207.962] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x844, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2116) returned 1
	[0207.962] GetFileType (hFile=0x164) returned 0x1
	[0207.962] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=2116) returned 1
	[0207.963] WriteFile (in: hFile=0x164, lpBuffer=0xc0001c7880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0001c7880*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x221, lpOverlapped=0xc0001a1ce8) returned 1
	[0207.963] GetFileType (hFile=0x164) returned 0x1
	[0207.963] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x844, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=2116) returned 1
	[0207.963] CloseHandle (hObject=0x164) returned 1
	[0207.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf.egmwv")) returned 0x20
	[0207.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0207.965] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x20
	[0207.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x20) returned 1
	[0207.970] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0208.007] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0208.007] ReadFile (in: hFile=0x168, lpBuffer=0xc0001e2000, nNumberOfBytesToRead=0x2454, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesRead=0xc000425cec*=0x2454, lpOverlapped=0x0) returned 1
	[0208.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0208.012] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000404a02 | out: pbBuffer=0xc000404a02) returned 1
	[0208.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000404a03 | out: pbBuffer=0xc000404a03) returned 1
	[0208.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000404ac9 | out: pbBuffer=0xc000404ac9) returned 1
	[0208.013] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0208.013] GetFileType (hFile=0x168) returned 0x1
	[0208.013] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9300) returned 1
	[0208.013] WriteFile (in: hFile=0x168, lpBuffer=0xc0001fe000*, nNumberOfBytesToWrite=0x2454, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001fe000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2454, lpOverlapped=0xc000155ce8) returned 1
	[0208.013] GetFileType (hFile=0x168) returned 0x1
	[0208.014] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2454, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9300) returned 1
	[0208.014] GetFileType (hFile=0x168) returned 0x1
	[0208.014] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=9300) returned 1
	[0208.014] WriteFile (in: hFile=0x168, lpBuffer=0xc0001fd500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001fd500*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0208.014] GetFileType (hFile=0x168) returned 0x1
	[0208.014] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x2454, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=9300) returned 1
	[0208.015] CloseHandle (hObject=0x168) returned 1
	[0208.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf.egmwv")) returned 0x20
	[0208.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.018] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.021] SetEvent (hEvent=0x60) returned 1
	[0208.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x20
	[0208.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x20) returned 1
	[0208.023] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0208.055] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0208.055] ReadFile (in: hFile=0x17c, lpBuffer=0xc0001f0000, nNumberOfBytesToRead=0x1bac, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f0000*, lpNumberOfBytesRead=0xc000425cec*=0x1bac, lpOverlapped=0x0) returned 1
	[0208.062] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62a0 | out: pbBuffer=0xc0002b62a0) returned 1
	[0208.062] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ba | out: pbBuffer=0xc0002b62ba) returned 1
	[0208.062] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215902 | out: pbBuffer=0xc000215902) returned 1
	[0208.062] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215959 | out: pbBuffer=0xc000215959) returned 1
	[0208.062] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215966 | out: pbBuffer=0xc000215966) returned 1
	[0208.062] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62e0 | out: pbBuffer=0xc0002b62e0) returned 1
	[0208.062] GetFileType (hFile=0x17c) returned 0x1
	[0208.062] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=7084) returned 1
	[0208.063] WriteFile (in: hFile=0x17c, lpBuffer=0xc00006e000*, nNumberOfBytesToWrite=0x1bac, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc00006e000*, lpNumberOfBytesWritten=0xc000459ccc*=0x1bac, lpOverlapped=0xc000459ce8) returned 1
	[0208.063] GetFileType (hFile=0x17c) returned 0x1
	[0208.063] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1bac, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=7084) returned 1
	[0208.063] GetFileType (hFile=0x17c) returned 0x1
	[0208.063] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=7084) returned 1
	[0208.063] WriteFile (in: hFile=0x17c, lpBuffer=0xc000390e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000390e00*, lpNumberOfBytesWritten=0xc000459ccc*=0x230, lpOverlapped=0xc000459ce8) returned 1
	[0208.064] GetFileType (hFile=0x17c) returned 0x1
	[0208.064] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1bac, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=7084) returned 1
	[0208.064] CloseHandle (hObject=0x17c) returned 1
	[0208.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf.egmwv")) returned 0x20
	[0208.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.069] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.081] SetEvent (hEvent=0x60) returned 1
	[0208.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x20
	[0208.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x20) returned 1
	[0208.083] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.109] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0208.109] ReadFile (in: hFile=0x164, lpBuffer=0xc00008c480, nNumberOfBytesToRead=0x47c, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00008c480*, lpNumberOfBytesRead=0xc00038dcec*=0x47c, lpOverlapped=0x0) returned 1
	[0208.113] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6430 | out: pbBuffer=0xc0002b6430) returned 1
	[0208.114] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b644a | out: pbBuffer=0xc0002b644a) returned 1
	[0208.114] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002a8602 | out: pbBuffer=0xc0002a8602) returned 1
	[0208.114] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002a8657 | out: pbBuffer=0xc0002a8657) returned 1
	[0208.114] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6470 | out: pbBuffer=0xc0002b6470) returned 1
	[0208.114] GetFileType (hFile=0x164) returned 0x1
	[0208.114] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1148) returned 1
	[0208.114] WriteFile (in: hFile=0x164, lpBuffer=0xc0003f6000*, nNumberOfBytesToWrite=0x47c, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0003f6000*, lpNumberOfBytesWritten=0xc000459ccc*=0x47c, lpOverlapped=0xc000459ce8) returned 1
	[0208.115] GetFileType (hFile=0x164) returned 0x1
	[0208.115] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x47c, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1148) returned 1
	[0208.115] GetFileType (hFile=0x164) returned 0x1
	[0208.115] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=1148) returned 1
	[0208.115] WriteFile (in: hFile=0x164, lpBuffer=0xc0002b4700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0002b4700*, lpNumberOfBytesWritten=0xc000459ccc*=0x22a, lpOverlapped=0xc000459ce8) returned 1
	[0208.115] GetFileType (hFile=0x164) returned 0x1
	[0208.116] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x47c, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=1148) returned 1
	[0208.116] CloseHandle (hObject=0x164) returned 1
	[0208.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf.egmwv")) returned 0x20
	[0208.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.118] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.131] SetEvent (hEvent=0x60) returned 1
	[0208.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x20
	[0208.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x20) returned 1
	[0208.133] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0208.163] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0208.163] ReadFile (in: hFile=0x164, lpBuffer=0xc000085500, nNumberOfBytesToRead=0x1388, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000085500*, lpNumberOfBytesRead=0xc0002d7cec*=0x1388, lpOverlapped=0x0) returned 1
	[0208.170] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0208.170] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00043e502 | out: pbBuffer=0xc00043e502) returned 1
	[0208.170] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00043e516 | out: pbBuffer=0xc00043e516) returned 1
	[0208.170] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0208.170] GetFileType (hFile=0x164) returned 0x1
	[0208.170] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=5000) returned 1
	[0208.170] WriteFile (in: hFile=0x164, lpBuffer=0xc00035e000*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc00035e000*, lpNumberOfBytesWritten=0xc000455ccc*=0x1388, lpOverlapped=0xc000455ce8) returned 1
	[0208.171] GetFileType (hFile=0x164) returned 0x1
	[0208.171] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1388, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=5000) returned 1
	[0208.171] GetFileType (hFile=0x164) returned 0x1
	[0208.171] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=5000) returned 1
	[0208.171] WriteFile (in: hFile=0x164, lpBuffer=0xc00034ee00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc00034ee00*, lpNumberOfBytesWritten=0xc000455ccc*=0x227, lpOverlapped=0xc000455ce8) returned 1
	[0208.172] GetFileType (hFile=0x164) returned 0x1
	[0208.172] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1388, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=5000) returned 1
	[0208.172] CloseHandle (hObject=0x164) returned 1
	[0208.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf.egmwv")) returned 0x20
	[0208.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.175] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x20
	[0208.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x20) returned 1
	[0208.182] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
	[0208.267] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0xc000199cc4 | out: lpMode=0xc000199cc4) returned 0
	[0208.268] ReadFile (in: hFile=0x168, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x1780, lpNumberOfBytesRead=0xc000199cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000199cec*=0x1780, lpOverlapped=0x0) returned 1
	[0208.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145d0 | out: pbBuffer=0xc0004145d0) returned 1
	[0208.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145ea | out: pbBuffer=0xc0004145ea) returned 1
	[0208.345] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00027c302 | out: pbBuffer=0xc00027c302) returned 1
	[0208.345] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414610 | out: pbBuffer=0xc000414610) returned 1
	[0208.345] GetFileType (hFile=0x168) returned 0x1
	[0208.345] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=6016) returned 1
	[0208.346] WriteFile (in: hFile=0x168, lpBuffer=0xc000304000*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000304000*, lpNumberOfBytesWritten=0xc000455ccc*=0x1780, lpOverlapped=0xc000455ce8) returned 1
	[0208.346] GetFileType (hFile=0x168) returned 0x1
	[0208.346] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1780, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=6016) returned 1
	[0208.346] GetFileType (hFile=0x168) returned 0x1
	[0208.346] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=6016) returned 1
	[0208.347] WriteFile (in: hFile=0x168, lpBuffer=0xc000306000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000306000*, lpNumberOfBytesWritten=0xc000455ccc*=0x227, lpOverlapped=0xc000455ce8) returned 1
	[0208.347] GetFileType (hFile=0x168) returned 0x1
	[0208.347] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x1780, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=6016) returned 1
	[0208.347] CloseHandle (hObject=0x168) returned 1
	[0208.359] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf.egmwv")) returned 0x20
	[0208.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.371] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.374] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.381] SetEvent (hEvent=0x90) returned 1
	[0208.381] SetEvent (hEvent=0x60) returned 1
	[0208.381] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.453] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.471] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x20
	[0208.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x20) returned 1
	[0208.482] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.502] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0208.502] ReadFile (in: hFile=0x170, lpBuffer=0xc000072000, nNumberOfBytesToRead=0xb10, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000072000*, lpNumberOfBytesRead=0xc0002d7cec*=0xb10, lpOverlapped=0x0) returned 1
	[0208.526] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0208.526] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052d1a | out: pbBuffer=0xc000052d1a) returned 1
	[0208.526] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0208.526] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001f70 | out: pbBuffer=0xc000001f70) returned 1
	[0208.526] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0208.526] GetFileType (hFile=0x170) returned 0x1
	[0208.526] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2832) returned 1
	[0208.527] WriteFile (in: hFile=0x170, lpBuffer=0xc0003c2000*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c2000*, lpNumberOfBytesWritten=0xc000155ccc*=0xb10, lpOverlapped=0xc000155ce8) returned 1
	[0208.527] GetFileType (hFile=0x170) returned 0x1
	[0208.527] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xb10, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2832) returned 1
	[0208.527] GetFileType (hFile=0x170) returned 0x1
	[0208.527] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=2832) returned 1
	[0208.527] WriteFile (in: hFile=0x170, lpBuffer=0xc0003b8e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003b8e00*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0208.528] GetFileType (hFile=0x170) returned 0x1
	[0208.528] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xb10, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=2832) returned 1
	[0208.528] CloseHandle (hObject=0x170) returned 1
	[0208.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf.egmwv")) returned 0x20
	[0208.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.534] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.537] SetEvent (hEvent=0x150) returned 1
	[0208.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf")) returned 0x20
	[0208.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x20) returned 1
	[0208.539] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0208.580] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc0002d7cc4 | out: lpMode=0xc0002d7cc4) returned 0
	[0208.580] ReadFile (in: hFile=0xe0, lpBuffer=0xc000126000, nNumberOfBytesToRead=0x486, lpNumberOfBytesRead=0xc0002d7cec, lpOverlapped=0x0 | out: lpBuffer=0xc000126000*, lpNumberOfBytesRead=0xc0002d7cec*=0x486, lpOverlapped=0x0) returned 1
	[0208.590] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414410 | out: pbBuffer=0xc000414410) returned 1
	[0208.590] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000122a02 | out: pbBuffer=0xc000122a02) returned 1
	[0208.590] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414450 | out: pbBuffer=0xc000414450) returned 1
	[0208.590] GetFileType (hFile=0xe0) returned 0x1
	[0208.590] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=1158) returned 1
	[0208.591] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001de000*, nNumberOfBytesToWrite=0x486, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0001de000*, lpNumberOfBytesWritten=0xc000377ccc*=0x486, lpOverlapped=0xc000377ce8) returned 1
	[0208.591] GetFileType (hFile=0xe0) returned 0x1
	[0208.591] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x486, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=1158) returned 1
	[0208.591] GetFileType (hFile=0xe0) returned 0x1
	[0208.591] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000377ca0*=1158) returned 1
	[0208.591] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001da700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000377ccc, lpOverlapped=0xc000377ce8 | out: lpBuffer=0xc0001da700*, lpNumberOfBytesWritten=0xc000377ccc*=0x224, lpOverlapped=0xc000377ce8) returned 1
	[0208.592] GetFileType (hFile=0xe0) returned 0x1
	[0208.592] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x486, lpNewFilePointer=0xc000377ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000377ca0*=1158) returned 1
	[0208.592] CloseHandle (hObject=0xe0) returned 1
	[0208.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf.egmwv")) returned 0x20
	[0208.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.596] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf")) returned 0x20
	[0208.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x20) returned 1
	[0208.609] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.641] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0208.641] ReadFile (in: hFile=0x178, lpBuffer=0xc00020b800, nNumberOfBytesToRead=0x738, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00020b800*, lpNumberOfBytesRead=0xc00038dcec*=0x738, lpOverlapped=0x0) returned 1
	[0208.647] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6750 | out: pbBuffer=0xc0002b6750) returned 1
	[0208.647] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000132c02 | out: pbBuffer=0xc000132c02) returned 1
	[0208.647] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6790 | out: pbBuffer=0xc0002b6790) returned 1
	[0208.648] GetFileType (hFile=0x178) returned 0x1
	[0208.648] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=1848) returned 1
	[0208.648] WriteFile (in: hFile=0x178, lpBuffer=0xc00025a000*, nNumberOfBytesToWrite=0x738, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc00025a000*, lpNumberOfBytesWritten=0xc000455ccc*=0x738, lpOverlapped=0xc000455ce8) returned 1
	[0208.649] GetFileType (hFile=0x178) returned 0x1
	[0208.649] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x738, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=1848) returned 1
	[0208.649] GetFileType (hFile=0x178) returned 0x1
	[0208.649] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=1848) returned 1
	[0208.649] WriteFile (in: hFile=0x178, lpBuffer=0xc000137c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000137c00*, lpNumberOfBytesWritten=0xc000455ccc*=0x22a, lpOverlapped=0xc000455ce8) returned 1
	[0208.649] GetFileType (hFile=0x178) returned 0x1
	[0208.650] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x738, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=1848) returned 1
	[0208.650] CloseHandle (hObject=0x178) returned 1
	[0208.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf.egmwv")) returned 0x20
	[0208.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.653] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.662] SetEvent (hEvent=0xc0) returned 1
	[0208.663] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf")) returned 0x20
	[0208.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x20) returned 1
	[0208.672] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.731] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000241cc4 | out: lpMode=0xc000241cc4) returned 0
	[0208.731] ReadFile (in: hFile=0x170, lpBuffer=0xc000210000, nNumberOfBytesToRead=0x2b8, lpNumberOfBytesRead=0xc000241cec, lpOverlapped=0x0 | out: lpBuffer=0xc000210000*, lpNumberOfBytesRead=0xc000241cec*=0x2b8, lpOverlapped=0x0) returned 1
	[0208.738] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206280 | out: pbBuffer=0xc000206280) returned 1
	[0208.738] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215a02 | out: pbBuffer=0xc000215a02) returned 1
	[0208.738] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0208.738] GetFileType (hFile=0x170) returned 0x1
	[0208.738] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=696) returned 1
	[0208.739] WriteFile (in: hFile=0x170, lpBuffer=0xc0000d7000*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc0000d7000*, lpNumberOfBytesWritten=0xc000459ccc*=0x2b8, lpOverlapped=0xc000459ce8) returned 1
	[0208.739] GetFileType (hFile=0x170) returned 0x1
	[0208.739] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2b8, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=696) returned 1
	[0208.739] GetFileType (hFile=0x170) returned 0x1
	[0208.739] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=696) returned 1
	[0208.740] WriteFile (in: hFile=0x170, lpBuffer=0xc000419180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000419180*, lpNumberOfBytesWritten=0xc000459ccc*=0x227, lpOverlapped=0xc000459ce8) returned 1
	[0208.740] GetFileType (hFile=0x170) returned 0x1
	[0208.740] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2b8, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=696) returned 1
	[0208.740] CloseHandle (hObject=0x170) returned 1
	[0208.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf.egmwv")) returned 0x20
	[0208.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.743] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf")) returned 0x20
	[0208.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x20) returned 1
	[0208.749] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0208.783] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000241cc4 | out: lpMode=0xc000241cc4) returned 0
	[0208.783] ReadFile (in: hFile=0xe0, lpBuffer=0xc000470000, nNumberOfBytesToRead=0x31cc, lpNumberOfBytesRead=0xc000241cec, lpOverlapped=0x0 | out: lpBuffer=0xc000470000*, lpNumberOfBytesRead=0xc000241cec*=0x31cc, lpOverlapped=0x0) returned 1
	[0208.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0208.789] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039602 | out: pbBuffer=0xc000039602) returned 1
	[0208.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000396ae | out: pbBuffer=0xc0000396ae) returned 1
	[0208.789] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0208.790] GetFileType (hFile=0xe0) returned 0x1
	[0208.790] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=12748) returned 1
	[0208.790] WriteFile (in: hFile=0xe0, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x31cc, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc000455ccc*=0x31cc, lpOverlapped=0xc000455ce8) returned 1
	[0208.790] GetFileType (hFile=0xe0) returned 0x1
	[0208.790] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x31cc, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=12748) returned 1
	[0208.791] GetFileType (hFile=0xe0) returned 0x1
	[0208.791] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000455ca0*=12748) returned 1
	[0208.791] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003cf500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000455ccc, lpOverlapped=0xc000455ce8 | out: lpBuffer=0xc0003cf500*, lpNumberOfBytesWritten=0xc000455ccc*=0x22d, lpOverlapped=0xc000455ce8) returned 1
	[0208.791] GetFileType (hFile=0xe0) returned 0x1
	[0208.791] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x31cc, lpNewFilePointer=0xc000455ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000455ca0*=12748) returned 1
	[0208.791] CloseHandle (hObject=0xe0) returned 1
	[0208.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf.egmwv")) returned 0x20
	[0208.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.795] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf")) returned 0x20
	[0208.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF", dwFileAttributes=0x20) returned 1
	[0208.802] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0208.838] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000241cc4 | out: lpMode=0xc000241cc4) returned 0
	[0208.838] ReadFile (in: hFile=0x178, lpBuffer=0xc0002ae000, nNumberOfBytesToRead=0xb80, lpNumberOfBytesRead=0xc000241cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ae000*, lpNumberOfBytesRead=0xc000241cec*=0xb80, lpOverlapped=0x0) returned 1
	[0208.845] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0208.845] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065da | out: pbBuffer=0xc0002065da) returned 1
	[0208.845] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0000fd602 | out: pbBuffer=0xc0000fd602) returned 1
	[0208.845] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000fd6e8 | out: pbBuffer=0xc0000fd6e8) returned 1
	[0208.845] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0208.846] GetFileType (hFile=0x178) returned 0x1
	[0208.846] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=2944) returned 1
	[0208.846] WriteFile (in: hFile=0x178, lpBuffer=0xc00035e000*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc00035e000*, lpNumberOfBytesWritten=0xc000459ccc*=0xb80, lpOverlapped=0xc000459ce8) returned 1
	[0208.846] GetFileType (hFile=0x178) returned 0x1
	[0208.846] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xb80, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=2944) returned 1
	[0208.847] GetFileType (hFile=0x178) returned 0x1
	[0208.847] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=2944) returned 1
	[0208.847] WriteFile (in: hFile=0x178, lpBuffer=0xc000354380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000354380*, lpNumberOfBytesWritten=0xc000459ccc*=0x224, lpOverlapped=0xc000459ce8) returned 1
	[0208.847] GetFileType (hFile=0x178) returned 0x1
	[0208.847] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xb80, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=2944) returned 1
	[0208.847] CloseHandle (hObject=0x178) returned 1
	[0208.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf.egmwv")) returned 0x20
	[0208.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.854] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.867] SetEvent (hEvent=0x150) returned 1
	[0208.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf")) returned 0x20
	[0208.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF", dwFileAttributes=0x20) returned 1
	[0208.871] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0208.899] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000241cc4 | out: lpMode=0xc000241cc4) returned 0
	[0208.899] ReadFile (in: hFile=0x170, lpBuffer=0xc0000b8000, nNumberOfBytesToRead=0x2606, lpNumberOfBytesRead=0xc000241cec, lpOverlapped=0x0 | out: lpBuffer=0xc0000b8000*, lpNumberOfBytesRead=0xc000241cec*=0x2606, lpOverlapped=0x0) returned 1
	[0208.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206740 | out: pbBuffer=0xc000206740) returned 1
	[0208.905] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000110302 | out: pbBuffer=0xc000110302) returned 1
	[0208.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00011031e | out: pbBuffer=0xc00011031e) returned 1
	[0208.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000110387 | out: pbBuffer=0xc000110387) returned 1
	[0208.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001103e8 | out: pbBuffer=0xc0001103e8) returned 1
	[0208.905] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206780 | out: pbBuffer=0xc000206780) returned 1
	[0208.906] GetFileType (hFile=0x170) returned 0x1
	[0208.906] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=9734) returned 1
	[0208.906] WriteFile (in: hFile=0x170, lpBuffer=0xc00012e000*, nNumberOfBytesToWrite=0x2606, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesWritten=0xc000459ccc*=0x2606, lpOverlapped=0xc000459ce8) returned 1
	[0208.907] GetFileType (hFile=0x170) returned 0x1
	[0208.907] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2606, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=9734) returned 1
	[0208.907] GetFileType (hFile=0x170) returned 0x1
	[0208.907] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000459ca0*=9734) returned 1
	[0208.908] WriteFile (in: hFile=0x170, lpBuffer=0xc000355c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000459ccc, lpOverlapped=0xc000459ce8 | out: lpBuffer=0xc000355c00*, lpNumberOfBytesWritten=0xc000459ccc*=0x227, lpOverlapped=0xc000459ce8) returned 1
	[0208.908] GetFileType (hFile=0x170) returned 0x1
	[0208.908] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2606, lpNewFilePointer=0xc000459ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000459ca0*=9734) returned 1
	[0208.908] CloseHandle (hObject=0x170) returned 1
	[0208.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf.egmwv")) returned 0x20
	[0208.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.911] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.913] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.923] SetEvent (hEvent=0x150) returned 1
	[0208.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf")) returned 0x20
	[0208.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF", dwFileAttributes=0x20) returned 1
	[0208.925] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf.egmwv"), dwFlags=0x1) returned 1
	[0208.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0208.948] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000241cc4 | out: lpMode=0xc000241cc4) returned 0
	[0208.948] ReadFile (in: hFile=0xe0, lpBuffer=0xc000432000, nNumberOfBytesToRead=0x5516, lpNumberOfBytesRead=0xc000241cec, lpOverlapped=0x0 | out: lpBuffer=0xc000432000*, lpNumberOfBytesRead=0xc000241cec*=0x5516, lpOverlapped=0x0) returned 1
	[0208.954] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0208.954] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142aa | out: pbBuffer=0xc0004142aa) returned 1
	[0208.954] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000442202 | out: pbBuffer=0xc000442202) returned 1
	[0208.954] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000442213 | out: pbBuffer=0xc000442213) returned 1
	[0208.954] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0208.955] GetFileType (hFile=0xe0) returned 0x1
	[0208.955] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=21782) returned 1
	[0208.955] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001ea000*, nNumberOfBytesToWrite=0x5516, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc0001ea000*, lpNumberOfBytesWritten=0xc0001bbccc*=0x5516, lpOverlapped=0xc0001bbce8) returned 1
	[0208.956] GetFileType (hFile=0xe0) returned 0x1
	[0208.957] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5516, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=21782) returned 1
	[0208.957] GetFileType (hFile=0xe0) returned 0x1
	[0208.957] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001bbca0*=21782) returned 1
	[0208.958] WriteFile (in: hFile=0xe0, lpBuffer=0xc000440e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0001bbccc, lpOverlapped=0xc0001bbce8 | out: lpBuffer=0xc000440e00*, lpNumberOfBytesWritten=0xc0001bbccc*=0x22d, lpOverlapped=0xc0001bbce8) returned 1
	[0208.958] GetFileType (hFile=0xe0) returned 0x1
	[0208.958] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5516, lpNewFilePointer=0xc0001bbca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001bbca0*=21782) returned 1
	[0208.959] CloseHandle (hObject=0xe0) returned 1
	[0208.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf.egmwv")) returned 0x20
	[0208.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0208.962] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.964] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.970] SetEvent (hEvent=0x150) returned 1
	[0208.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf")) returned 0x20
	[0208.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF", dwFileAttributes=0x20) returned 1
	[0208.971] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.006] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0209.007] ReadFile (in: hFile=0x170, lpBuffer=0xc0002c2000, nNumberOfBytesToRead=0x375e, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesRead=0xc000425cec*=0x375e, lpOverlapped=0x0) returned 1
	[0209.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0209.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0209.012] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001202 | out: pbBuffer=0xc000001202) returned 1
	[0209.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001266 | out: pbBuffer=0xc000001266) returned 1
	[0209.012] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000012b8 | out: pbBuffer=0xc0000012b8) returned 1
	[0209.013] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0209.013] GetFileType (hFile=0x170) returned 0x1
	[0209.013] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000185ca0*=14174) returned 1
	[0209.013] WriteFile (in: hFile=0x170, lpBuffer=0xc000470000*, nNumberOfBytesToWrite=0x375e, lpNumberOfBytesWritten=0xc000185ccc, lpOverlapped=0xc000185ce8 | out: lpBuffer=0xc000470000*, lpNumberOfBytesWritten=0xc000185ccc*=0x375e, lpOverlapped=0xc000185ce8) returned 1
	[0209.013] GetFileType (hFile=0x170) returned 0x1
	[0209.014] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x375e, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000185ca0*=14174) returned 1
	[0209.014] GetFileType (hFile=0x170) returned 0x1
	[0209.014] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000185ca0*=14174) returned 1
	[0209.014] WriteFile (in: hFile=0x170, lpBuffer=0xc00028f500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000185ccc, lpOverlapped=0xc000185ce8 | out: lpBuffer=0xc00028f500*, lpNumberOfBytesWritten=0xc000185ccc*=0x236, lpOverlapped=0xc000185ce8) returned 1
	[0209.014] GetFileType (hFile=0x170) returned 0x1
	[0209.014] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x375e, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000185ca0*=14174) returned 1
	[0209.014] CloseHandle (hObject=0x170) returned 1
	[0209.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf.egmwv")) returned 0x20
	[0209.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.018] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf")) returned 0x20
	[0209.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF", dwFileAttributes=0x20) returned 1
	[0209.024] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0209.146] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0209.146] ReadFile (in: hFile=0x178, lpBuffer=0xc000352000, nNumberOfBytesToRead=0x5314, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000352000*, lpNumberOfBytesRead=0xc000423cec*=0x5314, lpOverlapped=0x0) returned 1
	[0209.151] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0209.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b62ca | out: pbBuffer=0xc0002b62ca) returned 1
	[0209.152] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000272102 | out: pbBuffer=0xc000272102) returned 1
	[0209.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002721b0 | out: pbBuffer=0xc0002721b0) returned 1
	[0209.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002721bf | out: pbBuffer=0xc0002721bf) returned 1
	[0209.152] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0209.152] GetFileType (hFile=0x178) returned 0x1
	[0209.152] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000185ca0*=21268) returned 1
	[0209.153] WriteFile (in: hFile=0x178, lpBuffer=0xc00040a000*, nNumberOfBytesToWrite=0x5314, lpNumberOfBytesWritten=0xc000185ccc, lpOverlapped=0xc000185ce8 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesWritten=0xc000185ccc*=0x5314, lpOverlapped=0xc000185ce8) returned 1
	[0209.153] GetFileType (hFile=0x178) returned 0x1
	[0209.153] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5314, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000185ca0*=21268) returned 1
	[0209.153] GetFileType (hFile=0x178) returned 0x1
	[0209.154] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000185ca0*=21268) returned 1
	[0209.154] WriteFile (in: hFile=0x178, lpBuffer=0xc000270e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000185ccc, lpOverlapped=0xc000185ce8 | out: lpBuffer=0xc000270e00*, lpNumberOfBytesWritten=0xc000185ccc*=0x22a, lpOverlapped=0xc000185ce8) returned 1
	[0209.154] GetFileType (hFile=0x178) returned 0x1
	[0209.154] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x5314, lpNewFilePointer=0xc000185ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000185ca0*=21268) returned 1
	[0209.155] CloseHandle (hObject=0x178) returned 1
	[0209.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf.egmwv")) returned 0x20
	[0209.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.158] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf")) returned 0x20
	[0209.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF", dwFileAttributes=0x20) returned 1
	[0209.179] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.206] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0209.206] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003c2000, nNumberOfBytesToRead=0x6e34, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003c2000*, lpNumberOfBytesRead=0xc000169cec*=0x6e34, lpOverlapped=0x0) returned 1
	[0209.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142c0 | out: pbBuffer=0xc0004142c0) returned 1
	[0209.214] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215c02 | out: pbBuffer=0xc000215c02) returned 1
	[0209.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215c54 | out: pbBuffer=0xc000215c54) returned 1
	[0209.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215ca4 | out: pbBuffer=0xc000215ca4) returned 1
	[0209.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215cba | out: pbBuffer=0xc000215cba) returned 1
	[0209.214] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414300 | out: pbBuffer=0xc000414300) returned 1
	[0209.215] GetFileType (hFile=0xe0) returned 0x1
	[0209.215] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000181ca0*=28212) returned 1
	[0209.215] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001f0000*, nNumberOfBytesToWrite=0x6e34, lpNumberOfBytesWritten=0xc000181ccc, lpOverlapped=0xc000181ce8 | out: lpBuffer=0xc0001f0000*, lpNumberOfBytesWritten=0xc000181ccc*=0x6e34, lpOverlapped=0xc000181ce8) returned 1
	[0209.216] GetFileType (hFile=0xe0) returned 0x1
	[0209.216] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x6e34, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000181ca0*=28212) returned 1
	[0209.216] GetFileType (hFile=0xe0) returned 0x1
	[0209.216] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000181ca0*=28212) returned 1
	[0209.216] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001d4e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000181ccc, lpOverlapped=0xc000181ce8 | out: lpBuffer=0xc0001d4e00*, lpNumberOfBytesWritten=0xc000181ccc*=0x230, lpOverlapped=0xc000181ce8) returned 1
	[0209.217] GetFileType (hFile=0xe0) returned 0x1
	[0209.217] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x6e34, lpNewFilePointer=0xc000181ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000181ca0*=28212) returned 1
	[0209.217] CloseHandle (hObject=0xe0) returned 1
	[0209.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf.egmwv")) returned 0x20
	[0209.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.219] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.223] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.305] SetEvent (hEvent=0x5c) returned 1
	[0209.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf")) returned 0x20
	[0209.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF", dwFileAttributes=0x20) returned 1
	[0209.306] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.335] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016bcc4 | out: lpMode=0xc00016bcc4) returned 0
	[0209.335] ReadFile (in: hFile=0xe0, lpBuffer=0xc00022c000, nNumberOfBytesToRead=0x5b0, lpNumberOfBytesRead=0xc00016bcec, lpOverlapped=0x0 | out: lpBuffer=0xc00022c000*, lpNumberOfBytesRead=0xc00016bcec*=0x5b0, lpOverlapped=0x0) returned 1
	[0209.343] SetEvent (hEvent=0x5c) returned 1
	[0209.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0209.344] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0f02 | out: pbBuffer=0xc0002c0f02) returned 1
	[0209.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0fdd | out: pbBuffer=0xc0002c0fdd) returned 1
	[0209.344] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0209.344] GetFileType (hFile=0xe0) returned 0x1
	[0209.344] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=1456) returned 1
	[0209.345] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004c9000*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0004c9000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x5b0, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.345] GetFileType (hFile=0xe0) returned 0x1
	[0209.345] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5b0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=1456) returned 1
	[0209.345] GetFileType (hFile=0xe0) returned 0x1
	[0209.345] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=1456) returned 1
	[0209.346] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004b9500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0004b9500*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x227, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.346] GetFileType (hFile=0xe0) returned 0x1
	[0209.346] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5b0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=1456) returned 1
	[0209.346] CloseHandle (hObject=0xe0) returned 1
	[0209.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf.egmwv")) returned 0x20
	[0209.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.379] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.383] SetEvent (hEvent=0x150) returned 1
	[0209.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf")) returned 0x20
	[0209.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF", dwFileAttributes=0x20) returned 1
	[0209.385] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.426] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0209.426] ReadFile (in: hFile=0x170, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0xa442, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc00016dcec*=0xa442, lpOverlapped=0x0) returned 1
	[0209.446] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065a0 | out: pbBuffer=0xc0002065a0) returned 1
	[0209.446] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00023c502 | out: pbBuffer=0xc00023c502) returned 1
	[0209.446] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065e0 | out: pbBuffer=0xc0002065e0) returned 1
	[0209.447] GetFileType (hFile=0x170) returned 0x1
	[0209.447] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=42050) returned 1
	[0209.447] WriteFile (in: hFile=0x170, lpBuffer=0xc0003a2000*, nNumberOfBytesToWrite=0xa442, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0xa442, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.448] GetFileType (hFile=0x170) returned 0x1
	[0209.448] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xa442, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=42050) returned 1
	[0209.448] GetFileType (hFile=0x170) returned 0x1
	[0209.449] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=42050) returned 1
	[0209.449] WriteFile (in: hFile=0x170, lpBuffer=0xc00015a000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22a, lpOverlapped=0xc0004b3ce8) returned 1
	[0209.449] GetFileType (hFile=0x170) returned 0x1
	[0209.449] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xa442, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=42050) returned 1
	[0209.449] CloseHandle (hObject=0x170) returned 1
	[0209.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf.egmwv")) returned 0x20
	[0209.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.456] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf")) returned 0x20
	[0209.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x20) returned 1
	[0209.463] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0209.513] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0209.513] ReadFile (in: hFile=0x178, lpBuffer=0xc0003b2000, nNumberOfBytesToRead=0x40d4, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b2000*, lpNumberOfBytesRead=0xc00016dcec*=0x40d4, lpOverlapped=0x0) returned 1
	[0209.518] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0209.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ba | out: pbBuffer=0xc0004142ba) returned 1
	[0209.519] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001f02 | out: pbBuffer=0xc000001f02) returned 1
	[0209.519] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0209.520] GetFileType (hFile=0x178) returned 0x1
	[0209.520] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16596) returned 1
	[0209.520] WriteFile (in: hFile=0x178, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x40d4, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000155ccc*=0x40d4, lpOverlapped=0xc000155ce8) returned 1
	[0209.521] GetFileType (hFile=0x178) returned 0x1
	[0209.521] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x40d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16596) returned 1
	[0209.521] GetFileType (hFile=0x178) returned 0x1
	[0209.521] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=16596) returned 1
	[0209.521] WriteFile (in: hFile=0x178, lpBuffer=0xc00006ce00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00006ce00*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0209.521] GetFileType (hFile=0x178) returned 0x1
	[0209.522] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x40d4, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=16596) returned 1
	[0209.522] CloseHandle (hObject=0x178) returned 1
	[0209.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf.egmwv")) returned 0x20
	[0209.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.527] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf")) returned 0x20
	[0209.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x20) returned 1
	[0209.546] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.593] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0209.593] ReadFile (in: hFile=0x170, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x7265, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000389cec*=0x7265, lpOverlapped=0x0) returned 1
	[0209.621] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145e0 | out: pbBuffer=0xc0004145e0) returned 1
	[0209.621] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004145fa | out: pbBuffer=0xc0004145fa) returned 1
	[0209.622] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000071502 | out: pbBuffer=0xc000071502) returned 1
	[0209.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00007152e | out: pbBuffer=0xc00007152e) returned 1
	[0209.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0000715d8 | out: pbBuffer=0xc0000715d8) returned 1
	[0209.622] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414620 | out: pbBuffer=0xc000414620) returned 1
	[0209.622] GetFileType (hFile=0x170) returned 0x1
	[0209.622] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=29285) returned 1
	[0209.625] WriteFile (in: hFile=0x170, lpBuffer=0xc00026c000*, nNumberOfBytesToWrite=0x7265, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00026c000*, lpNumberOfBytesWritten=0xc000155ccc*=0x7265, lpOverlapped=0xc000155ce8) returned 1
	[0209.626] GetFileType (hFile=0x170) returned 0x1
	[0209.626] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7265, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=29285) returned 1
	[0209.626] GetFileType (hFile=0x170) returned 0x1
	[0209.626] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=29285) returned 1
	[0209.627] WriteFile (in: hFile=0x170, lpBuffer=0xc000274000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000274000*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0209.628] GetFileType (hFile=0x170) returned 0x1
	[0209.628] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7265, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=29285) returned 1
	[0209.628] CloseHandle (hObject=0x170) returned 1
	[0209.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf.egmwv")) returned 0x20
	[0209.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.650] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.663] SetEvent (hEvent=0x150) returned 1
	[0209.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg")) returned 0x20
	[0209.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x20) returned 1
	[0209.671] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0209.725] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0209.725] ReadFile (in: hFile=0xe0, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x2dae, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc000169cec*=0x2dae, lpOverlapped=0x0) returned 1
	[0209.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6120 | out: pbBuffer=0xc0002b6120) returned 1
	[0209.753] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b613a | out: pbBuffer=0xc0002b613a) returned 1
	[0209.754] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002e4002 | out: pbBuffer=0xc0002e4002) returned 1
	[0209.754] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002e40d3 | out: pbBuffer=0xc0002e40d3) returned 1
	[0209.754] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6160 | out: pbBuffer=0xc0002b6160) returned 1
	[0209.766] GetFileType (hFile=0xe0) returned 0x1
	[0209.767] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=11694) returned 1
	[0209.767] WriteFile (in: hFile=0xe0, lpBuffer=0xc00030e000*, nNumberOfBytesToWrite=0x2dae, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesWritten=0xc0004afccc*=0x2dae, lpOverlapped=0xc0004afce8) returned 1
	[0209.767] GetFileType (hFile=0xe0) returned 0x1
	[0209.767] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2dae, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=11694) returned 1
	[0209.785] GetFileType (hFile=0xe0) returned 0x1
	[0209.785] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004afca0*=11694) returned 1
	[0209.785] WriteFile (in: hFile=0xe0, lpBuffer=0xc00014d500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0004afccc, lpOverlapped=0xc0004afce8 | out: lpBuffer=0xc00014d500*, lpNumberOfBytesWritten=0xc0004afccc*=0x233, lpOverlapped=0xc0004afce8) returned 1
	[0209.786] GetFileType (hFile=0xe0) returned 0x1
	[0209.786] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2dae, lpNewFilePointer=0xc0004afca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004afca0*=11694) returned 1
	[0209.786] CloseHandle (hObject=0xe0) returned 1
	[0209.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.egmwv")) returned 0x20
	[0209.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.788] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.791] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.795] SetEvent (hEvent=0x150) returned 1
	[0209.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg")) returned 0x20
	[0209.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x20) returned 1
	[0209.817] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0209.876] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0209.876] ReadFile (in: hFile=0x178, lpBuffer=0xc0003f4500, nNumberOfBytesToRead=0x227a, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f4500*, lpNumberOfBytesRead=0xc000425cec*=0x227a, lpOverlapped=0x0) returned 1
	[0209.882] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206420 | out: pbBuffer=0xc000206420) returned 1
	[0209.882] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0302 | out: pbBuffer=0xc0002c0302) returned 1
	[0209.882] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c030d | out: pbBuffer=0xc0002c030d) returned 1
	[0209.882] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c033c | out: pbBuffer=0xc0002c033c) returned 1
	[0209.882] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206460 | out: pbBuffer=0xc000206460) returned 1
	[0209.883] GetFileType (hFile=0x178) returned 0x1
	[0209.883] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8826) returned 1
	[0209.883] WriteFile (in: hFile=0x178, lpBuffer=0xc00017c000*, nNumberOfBytesToWrite=0x227a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00017c000*, lpNumberOfBytesWritten=0xc000155ccc*=0x227a, lpOverlapped=0xc000155ce8) returned 1
	[0209.883] GetFileType (hFile=0x178) returned 0x1
	[0209.883] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x227a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8826) returned 1
	[0209.883] GetFileType (hFile=0x178) returned 0x1
	[0209.884] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=8826) returned 1
	[0209.884] WriteFile (in: hFile=0x178, lpBuffer=0xc00041e700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00041e700*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0209.884] GetFileType (hFile=0x178) returned 0x1
	[0209.884] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x227a, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=8826) returned 1
	[0209.884] CloseHandle (hObject=0x178) returned 1
	[0209.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.egmwv")) returned 0x20
	[0209.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0209.888] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf")) returned 0x20
	[0209.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x20) returned 1
	[0209.895] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf.egmwv"), dwFlags=0x1) returned 1
	[0209.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.932] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0209.932] ReadFile (in: hFile=0x170, lpBuffer=0xc0000b6000, nNumberOfBytesToRead=0x6630, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000b6000*, lpNumberOfBytesRead=0xc00038dcec*=0x6630, lpOverlapped=0x0) returned 1
	[0209.939] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414290 | out: pbBuffer=0xc000414290) returned 1
	[0209.939] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000175502 | out: pbBuffer=0xc000175502) returned 1
	[0209.939] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00017554b | out: pbBuffer=0xc00017554b) returned 1
	[0209.940] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142d0 | out: pbBuffer=0xc0004142d0) returned 1
	[0209.940] GetFileType (hFile=0x170) returned 0x1
	[0209.940] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=26160) returned 1
	[0209.940] WriteFile (in: hFile=0x170, lpBuffer=0xc0002ae000*, nNumberOfBytesToWrite=0x6630, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc0002ae000*, lpNumberOfBytesWritten=0xc000231ccc*=0x6630, lpOverlapped=0xc000231ce8) returned 1
	[0209.941] GetFileType (hFile=0x170) returned 0x1
	[0209.941] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6630, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=26160) returned 1
	[0209.941] GetFileType (hFile=0x170) returned 0x1
	[0209.941] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000231ca0*=26160) returned 1
	[0209.941] WriteFile (in: hFile=0x170, lpBuffer=0xc0002cae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000231ccc, lpOverlapped=0xc000231ce8 | out: lpBuffer=0xc0002cae00*, lpNumberOfBytesWritten=0xc000231ccc*=0x22a, lpOverlapped=0xc000231ce8) returned 1
	[0209.942] GetFileType (hFile=0x170) returned 0x1
	[0209.942] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x6630, lpNewFilePointer=0xc000231ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000231ca0*=26160) returned 1
	[0209.942] CloseHandle (hObject=0x170) returned 1
	[0209.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf.egmwv")) returned 0x20
	[0209.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0209.946] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.960] SetEvent (hEvent=0xc0) returned 1
	[0209.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg")) returned 0x20
	[0209.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x20) returned 1
	[0209.962] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.egmwv"), dwFlags=0x1) returned 1
	[0209.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0209.989] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0209.990] ReadFile (in: hFile=0x170, lpBuffer=0xc000104000, nNumberOfBytesToRead=0x1bf2, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000104000*, lpNumberOfBytesRead=0xc000389cec*=0x1bf2, lpOverlapped=0x0) returned 1
	[0209.998] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6440 | out: pbBuffer=0xc0002b6440) returned 1
	[0209.998] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b645a | out: pbBuffer=0xc0002b645a) returned 1
	[0209.998] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000326b02 | out: pbBuffer=0xc000326b02) returned 1
	[0209.998] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000326bc7 | out: pbBuffer=0xc000326bc7) returned 1
	[0209.998] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6480 | out: pbBuffer=0xc0002b6480) returned 1
	[0209.998] GetFileType (hFile=0x170) returned 0x1
	[0209.999] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=7154) returned 1
	[0209.999] WriteFile (in: hFile=0x170, lpBuffer=0xc000444000*, nNumberOfBytesToWrite=0x1bf2, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc000444000*, lpNumberOfBytesWritten=0xc000235ccc*=0x1bf2, lpOverlapped=0xc000235ce8) returned 1
	[0209.999] GetFileType (hFile=0x170) returned 0x1
	[0210.000] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1bf2, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=7154) returned 1
	[0210.000] GetFileType (hFile=0x170) returned 0x1
	[0210.000] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000235ca0*=7154) returned 1
	[0210.000] WriteFile (in: hFile=0x170, lpBuffer=0xc000430700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000235ccc, lpOverlapped=0xc000235ce8 | out: lpBuffer=0xc000430700*, lpNumberOfBytesWritten=0xc000235ccc*=0x233, lpOverlapped=0xc000235ce8) returned 1
	[0210.000] GetFileType (hFile=0x170) returned 0x1
	[0210.001] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1bf2, lpNewFilePointer=0xc000235ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000235ca0*=7154) returned 1
	[0210.001] CloseHandle (hObject=0x170) returned 1
	[0210.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.egmwv")) returned 0x20
	[0210.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.003] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.017] SetEvent (hEvent=0xc0) returned 1
	[0210.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf")) returned 0x20
	[0210.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x20) returned 1
	[0210.020] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.048] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0210.048] ReadFile (in: hFile=0x170, lpBuffer=0xc00030a000, nNumberOfBytesToRead=0x55ba, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00030a000*, lpNumberOfBytesRead=0xc00038dcec*=0x55ba, lpOverlapped=0x0) returned 1
	[0210.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d00 | out: pbBuffer=0xc000052d00) returned 1
	[0210.053] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000112502 | out: pbBuffer=0xc000112502) returned 1
	[0210.053] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000112510 | out: pbBuffer=0xc000112510) returned 1
	[0210.054] SetEvent (hEvent=0xc0) returned 1
	[0210.054] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d40 | out: pbBuffer=0xc000052d40) returned 1
	[0210.054] GetFileType (hFile=0x170) returned 0x1
	[0210.054] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000269ca0*=21946) returned 1
	[0210.055] WriteFile (in: hFile=0x170, lpBuffer=0xc0004ca000*, nNumberOfBytesToWrite=0x55ba, lpNumberOfBytesWritten=0xc000269ccc, lpOverlapped=0xc000269ce8 | out: lpBuffer=0xc0004ca000*, lpNumberOfBytesWritten=0xc000269ccc*=0x55ba, lpOverlapped=0xc000269ce8) returned 1
	[0210.055] GetFileType (hFile=0x170) returned 0x1
	[0210.055] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x55ba, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000269ca0*=21946) returned 1
	[0210.056] GetFileType (hFile=0x170) returned 0x1
	[0210.056] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000269ca0*=21946) returned 1
	[0210.056] WriteFile (in: hFile=0x170, lpBuffer=0xc000118e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000269ccc, lpOverlapped=0xc000269ce8 | out: lpBuffer=0xc000118e00*, lpNumberOfBytesWritten=0xc000269ccc*=0x233, lpOverlapped=0xc000269ce8) returned 1
	[0210.056] GetFileType (hFile=0x170) returned 0x1
	[0210.056] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x55ba, lpNewFilePointer=0xc000269ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000269ca0*=21946) returned 1
	[0210.056] CloseHandle (hObject=0x170) returned 1
	[0210.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf.egmwv")) returned 0x20
	[0210.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.064] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.067] SetEvent (hEvent=0xc0) returned 1
	[0210.067] SetEvent (hEvent=0x150) returned 1
	[0210.067] SwitchToThread () returned 1
	[0210.069] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.074] SetEvent (hEvent=0x150) returned 1
	[0210.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg")) returned 0x20
	[0210.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x20) returned 1
	[0210.075] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.109] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0210.109] ReadFile (in: hFile=0x178, lpBuffer=0xc00026e000, nNumberOfBytesToRead=0xabad, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00026e000*, lpNumberOfBytesRead=0xc000423cec*=0xabad, lpOverlapped=0x0) returned 1
	[0210.116] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0210.116] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ca | out: pbBuffer=0xc0004142ca) returned 1
	[0210.116] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001c02 | out: pbBuffer=0xc000001c02) returned 1
	[0210.116] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000001c86 | out: pbBuffer=0xc000001c86) returned 1
	[0210.117] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142f0 | out: pbBuffer=0xc0004142f0) returned 1
	[0210.117] GetFileType (hFile=0x178) returned 0x1
	[0210.117] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001efca0*=43949) returned 1
	[0210.118] WriteFile (in: hFile=0x178, lpBuffer=0xc0002c2000*, nNumberOfBytesToWrite=0xabad, lpNumberOfBytesWritten=0xc0001efccc, lpOverlapped=0xc0001efce8 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesWritten=0xc0001efccc*=0xabad, lpOverlapped=0xc0001efce8) returned 1
	[0210.118] GetFileType (hFile=0x178) returned 0x1
	[0210.118] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xabad, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001efca0*=43949) returned 1
	[0210.119] GetFileType (hFile=0x178) returned 0x1
	[0210.119] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001efca0*=43949) returned 1
	[0210.119] WriteFile (in: hFile=0x178, lpBuffer=0xc00019ce00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0xc0001efccc, lpOverlapped=0xc0001efce8 | out: lpBuffer=0xc00019ce00*, lpNumberOfBytesWritten=0xc0001efccc*=0x239, lpOverlapped=0xc0001efce8) returned 1
	[0210.119] GetFileType (hFile=0x178) returned 0x1
	[0210.119] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xabad, lpNewFilePointer=0xc0001efca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001efca0*=43949) returned 1
	[0210.119] CloseHandle (hObject=0x178) returned 1
	[0210.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.egmwv")) returned 0x20
	[0210.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.123] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf")) returned 0x20
	[0210.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x20) returned 1
	[0210.130] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.185] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0210.185] ReadFile (in: hFile=0x170, lpBuffer=0xc00042c000, nNumberOfBytesToRead=0x5ee4, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042c000*, lpNumberOfBytesRead=0xc000425cec*=0x5ee4, lpOverlapped=0x0) returned 1
	[0210.192] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062a0 | out: pbBuffer=0xc0002062a0) returned 1
	[0210.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002062ba | out: pbBuffer=0xc0002062ba) returned 1
	[0210.193] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215c02 | out: pbBuffer=0xc000215c02) returned 1
	[0210.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215cc0 | out: pbBuffer=0xc000215cc0) returned 1
	[0210.193] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062e0 | out: pbBuffer=0xc0002062e0) returned 1
	[0210.193] GetFileType (hFile=0x170) returned 0x1
	[0210.193] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ebca0*=24292) returned 1
	[0210.194] WriteFile (in: hFile=0x170, lpBuffer=0xc0003b4000*, nNumberOfBytesToWrite=0x5ee4, lpNumberOfBytesWritten=0xc0001ebccc, lpOverlapped=0xc0001ebce8 | out: lpBuffer=0xc0003b4000*, lpNumberOfBytesWritten=0xc0001ebccc*=0x5ee4, lpOverlapped=0xc0001ebce8) returned 1
	[0210.194] GetFileType (hFile=0x170) returned 0x1
	[0210.194] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x5ee4, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ebca0*=24292) returned 1
	[0210.194] GetFileType (hFile=0x170) returned 0x1
	[0210.195] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001ebca0*=24292) returned 1
	[0210.195] WriteFile (in: hFile=0x170, lpBuffer=0xc00043ee00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0001ebccc, lpOverlapped=0xc0001ebce8 | out: lpBuffer=0xc00043ee00*, lpNumberOfBytesWritten=0xc0001ebccc*=0x233, lpOverlapped=0xc0001ebce8) returned 1
	[0210.195] GetFileType (hFile=0x170) returned 0x1
	[0210.195] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x5ee4, lpNewFilePointer=0xc0001ebca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001ebca0*=24292) returned 1
	[0210.196] CloseHandle (hObject=0x170) returned 1
	[0210.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf.egmwv")) returned 0x20
	[0210.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.200] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.211] SetEvent (hEvent=0x148) returned 1
	[0210.211] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.216] SetEvent (hEvent=0x150) returned 1
	[0210.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf")) returned 0x20
	[0210.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x20) returned 1
	[0210.220] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.246] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0210.247] ReadFile (in: hFile=0xe0, lpBuffer=0xc000104000, nNumberOfBytesToRead=0x9114, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000104000*, lpNumberOfBytesRead=0xc000389cec*=0x9114, lpOverlapped=0x0) returned 1
	[0210.252] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0210.252] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b612a | out: pbBuffer=0xc0002b612a) returned 1
	[0210.255] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000112802 | out: pbBuffer=0xc000112802) returned 1
	[0210.255] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001128ba | out: pbBuffer=0xc0001128ba) returned 1
	[0210.255] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0210.256] GetFileType (hFile=0xe0) returned 0x1
	[0210.256] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=37140) returned 1
	[0210.256] WriteFile (in: hFile=0xe0, lpBuffer=0xc0002c2000*, nNumberOfBytesToWrite=0x9114, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc0002c2000*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x9114, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.257] GetFileType (hFile=0xe0) returned 0x1
	[0210.257] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x9114, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=37140) returned 1
	[0210.257] GetFileType (hFile=0xe0) returned 0x1
	[0210.258] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001a1ca0*=37140) returned 1
	[0210.258] WriteFile (in: hFile=0xe0, lpBuffer=0xc000465500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001a1ccc, lpOverlapped=0xc0001a1ce8 | out: lpBuffer=0xc000465500*, lpNumberOfBytesWritten=0xc0001a1ccc*=0x22a, lpOverlapped=0xc0001a1ce8) returned 1
	[0210.258] GetFileType (hFile=0xe0) returned 0x1
	[0210.258] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x9114, lpNewFilePointer=0xc0001a1ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001a1ca0*=37140) returned 1
	[0210.258] CloseHandle (hObject=0xe0) returned 1
	[0210.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf.egmwv")) returned 0x20
	[0210.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.261] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.263] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.275] SetEvent (hEvent=0x148) returned 1
	[0210.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf")) returned 0x20
	[0210.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x20) returned 1
	[0210.276] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.301] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0210.301] ReadFile (in: hFile=0xe0, lpBuffer=0xc000376000, nNumberOfBytesToRead=0x9b8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc000389cec*=0x9b8, lpOverlapped=0x0) returned 1
	[0210.307] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414430 | out: pbBuffer=0xc000414430) returned 1
	[0210.307] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041444a | out: pbBuffer=0xc00041444a) returned 1
	[0210.307] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002b1f02 | out: pbBuffer=0xc0002b1f02) returned 1
	[0210.307] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b1f07 | out: pbBuffer=0xc0002b1f07) returned 1
	[0210.307] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414470 | out: pbBuffer=0xc000414470) returned 1
	[0210.307] GetFileType (hFile=0xe0) returned 0x1
	[0210.307] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0210.308] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003f5000*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0003f5000*, lpNumberOfBytesWritten=0xc00019dccc*=0x9b8, lpOverlapped=0xc00019dce8) returned 1
	[0210.308] GetFileType (hFile=0xe0) returned 0x1
	[0210.308] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x9b8, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0210.308] GetFileType (hFile=0xe0) returned 0x1
	[0210.308] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0210.309] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003fe700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0003fe700*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0210.309] GetFileType (hFile=0xe0) returned 0x1
	[0210.309] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x9b8, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=2488) returned 1
	[0210.309] CloseHandle (hObject=0xe0) returned 1
	[0210.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf.egmwv")) returned 0x20
	[0210.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.312] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.315] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.318] SetEvent (hEvent=0x148) returned 1
	[0210.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf")) returned 0x20
	[0210.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x20) returned 1
	[0210.320] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.348] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0210.348] ReadFile (in: hFile=0x178, lpBuffer=0xc000220500, nNumberOfBytesToRead=0x23c2, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc000220500*, lpNumberOfBytesRead=0xc000387cec*=0x23c2, lpOverlapped=0x0) returned 1
	[0210.355] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004145d0 | out: pbBuffer=0xc0004145d0) returned 1
	[0210.355] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0f02 | out: pbBuffer=0xc0002c0f02) returned 1
	[0210.355] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0f07 | out: pbBuffer=0xc0002c0f07) returned 1
	[0210.355] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414610 | out: pbBuffer=0xc000414610) returned 1
	[0210.355] GetFileType (hFile=0x178) returned 0x1
	[0210.355] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=9154) returned 1
	[0210.356] WriteFile (in: hFile=0x178, lpBuffer=0xc0001f2000*, nNumberOfBytesToWrite=0x23c2, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0001f2000*, lpNumberOfBytesWritten=0xc00019dccc*=0x23c2, lpOverlapped=0xc00019dce8) returned 1
	[0210.356] GetFileType (hFile=0x178) returned 0x1
	[0210.356] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x23c2, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=9154) returned 1
	[0210.356] GetFileType (hFile=0x178) returned 0x1
	[0210.356] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=9154) returned 1
	[0210.357] WriteFile (in: hFile=0x178, lpBuffer=0xc0001f6000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc0001f6000*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0210.357] GetFileType (hFile=0x178) returned 0x1
	[0210.357] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x23c2, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=9154) returned 1
	[0210.357] CloseHandle (hObject=0x178) returned 1
	[0210.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf.egmwv")) returned 0x20
	[0210.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.384] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf")) returned 0x20
	[0210.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x20) returned 1
	[0210.389] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf.egmwv"), dwFlags=0x1) returned 1
	[0210.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.427] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0210.427] ReadFile (in: hFile=0x170, lpBuffer=0xc0003b3000, nNumberOfBytesToRead=0xf00, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b3000*, lpNumberOfBytesRead=0xc000387cec*=0xf00, lpOverlapped=0x0) returned 1
	[0210.443] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053020 | out: pbBuffer=0xc000053020) returned 1
	[0210.443] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00005303a | out: pbBuffer=0xc00005303a) returned 1
	[0210.443] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003be102 | out: pbBuffer=0xc0003be102) returned 1
	[0210.443] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003be1ba | out: pbBuffer=0xc0003be1ba) returned 1
	[0210.443] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000053060 | out: pbBuffer=0xc000053060) returned 1
	[0210.444] GetFileType (hFile=0x170) returned 0x1
	[0210.444] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3840) returned 1
	[0210.444] WriteFile (in: hFile=0x170, lpBuffer=0xc0003c6000*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c6000*, lpNumberOfBytesWritten=0xc000155ccc*=0xf00, lpOverlapped=0xc000155ce8) returned 1
	[0210.444] GetFileType (hFile=0x170) returned 0x1
	[0210.444] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xf00, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3840) returned 1
	[0210.445] GetFileType (hFile=0x170) returned 0x1
	[0210.445] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3840) returned 1
	[0210.445] WriteFile (in: hFile=0x170, lpBuffer=0xc0003c2380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c2380*, lpNumberOfBytesWritten=0xc000155ccc*=0x224, lpOverlapped=0xc000155ce8) returned 1
	[0210.446] GetFileType (hFile=0x170) returned 0x1
	[0210.446] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xf00, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3840) returned 1
	[0210.446] CloseHandle (hObject=0x170) returned 1
	[0210.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf.egmwv")) returned 0x20
	[0210.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.451] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.465] SetEvent (hEvent=0x148) returned 1
	[0210.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg")) returned 0x20
	[0210.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x20) returned 1
	[0210.467] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.498] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0210.498] ReadFile (in: hFile=0xe0, lpBuffer=0xc000138000, nNumberOfBytesToRead=0xcd2, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000138000*, lpNumberOfBytesRead=0xc00016dcec*=0xcd2, lpOverlapped=0x0) returned 1
	[0210.502] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004148e0 | out: pbBuffer=0xc0004148e0) returned 1
	[0210.502] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00011eb02 | out: pbBuffer=0xc00011eb02) returned 1
	[0210.502] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414920 | out: pbBuffer=0xc000414920) returned 1
	[0210.503] GetFileType (hFile=0xe0) returned 0x1
	[0210.503] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3282) returned 1
	[0210.503] WriteFile (in: hFile=0xe0, lpBuffer=0xc00030e000*, nNumberOfBytesToWrite=0xcd2, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesWritten=0xc00019dccc*=0xcd2, lpOverlapped=0xc00019dce8) returned 1
	[0210.503] GetFileType (hFile=0xe0) returned 0x1
	[0210.503] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xcd2, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3282) returned 1
	[0210.504] GetFileType (hFile=0xe0) returned 0x1
	[0210.504] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00019dca0*=3282) returned 1
	[0210.504] WriteFile (in: hFile=0xe0, lpBuffer=0xc000147180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc00019dccc, lpOverlapped=0xc00019dce8 | out: lpBuffer=0xc000147180*, lpNumberOfBytesWritten=0xc00019dccc*=0x22a, lpOverlapped=0xc00019dce8) returned 1
	[0210.504] GetFileType (hFile=0xe0) returned 0x1
	[0210.504] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0xcd2, lpNewFilePointer=0xc00019dca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00019dca0*=3282) returned 1
	[0210.504] CloseHandle (hObject=0xe0) returned 1
	[0210.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.egmwv")) returned 0x20
	[0210.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.506] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.514] SetEvent (hEvent=0xc0) returned 1
	[0210.515] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.520] SetEvent (hEvent=0x148) returned 1
	[0210.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg")) returned 0x20
	[0210.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x20) returned 1
	[0210.522] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.524] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.564] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000169cc4 | out: lpMode=0xc000169cc4) returned 0
	[0210.564] ReadFile (in: hFile=0xe0, lpBuffer=0xc000068000, nNumberOfBytesToRead=0x2378, lpNumberOfBytesRead=0xc000169cec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesRead=0xc000169cec*=0x2378, lpOverlapped=0x0) returned 1
	[0210.569] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206280 | out: pbBuffer=0xc000206280) returned 1
	[0210.569] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003be902 | out: pbBuffer=0xc0003be902) returned 1
	[0210.569] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003be9c8 | out: pbBuffer=0xc0003be9c8) returned 1
	[0210.570] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002062c0 | out: pbBuffer=0xc0002062c0) returned 1
	[0210.570] GetFileType (hFile=0xe0) returned 0x1
	[0210.570] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=9080) returned 1
	[0210.570] WriteFile (in: hFile=0xe0, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0x2378, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x2378, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.571] GetFileType (hFile=0xe0) returned 0x1
	[0210.571] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2378, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=9080) returned 1
	[0210.571] GetFileType (hFile=0xe0) returned 0x1
	[0210.571] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=9080) returned 1
	[0210.571] WriteFile (in: hFile=0xe0, lpBuffer=0xc00041f500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc00041f500*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x22d, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.571] GetFileType (hFile=0xe0) returned 0x1
	[0210.571] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2378, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=9080) returned 1
	[0210.572] CloseHandle (hObject=0xe0) returned 1
	[0210.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.egmwv")) returned 0x20
	[0210.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.573] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg")) returned 0x20
	[0210.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x20) returned 1
	[0210.579] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.egmwv"), dwFlags=0x1) returned 1
	[0210.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.616] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0210.616] ReadFile (in: hFile=0x178, lpBuffer=0xc00029e000, nNumberOfBytesToRead=0xf39f, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc00029e000*, lpNumberOfBytesRead=0xc000387cec*=0xf39f, lpOverlapped=0x0) returned 1
	[0210.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206740 | out: pbBuffer=0xc000206740) returned 1
	[0210.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020675a | out: pbBuffer=0xc00020675a) returned 1
	[0210.624] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000432a02 | out: pbBuffer=0xc000432a02) returned 1
	[0210.624] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206780 | out: pbBuffer=0xc000206780) returned 1
	[0210.624] GetFileType (hFile=0x178) returned 0x1
	[0210.625] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=62367) returned 1
	[0210.625] WriteFile (in: hFile=0x178, lpBuffer=0xc0003a4000*, nNumberOfBytesToWrite=0xf39f, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc0003a4000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0xf39f, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.626] GetFileType (hFile=0x178) returned 0x1
	[0210.626] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xf39f, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=62367) returned 1
	[0210.626] GetFileType (hFile=0x178) returned 0x1
	[0210.626] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=62367) returned 1
	[0210.626] WriteFile (in: hFile=0x178, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x23f, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.626] GetFileType (hFile=0x178) returned 0x1
	[0210.627] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xf39f, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=62367) returned 1
	[0210.627] CloseHandle (hObject=0x178) returned 1
	[0210.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.egmwv")) returned 0x20
	[0210.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.egmwv", dwFileAttributes=0x21) returned 1
	[0210.631] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif")) returned 0x20
	[0210.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x20) returned 1
	[0210.636] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.673] SetEvent (hEvent=0x70) returned 1
	[0210.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.675] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000387cc4 | out: lpMode=0xc000387cc4) returned 0
	[0210.675] ReadFile (in: hFile=0x170, lpBuffer=0xc0002f2000, nNumberOfBytesToRead=0x62b1, lpNumberOfBytesRead=0xc000387cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesRead=0xc000387cec*=0x62b1, lpOverlapped=0x0) returned 1
	[0210.681] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068f0 | out: pbBuffer=0xc0002068f0) returned 1
	[0210.681] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000433902 | out: pbBuffer=0xc000433902) returned 1
	[0210.681] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004339e4 | out: pbBuffer=0xc0004339e4) returned 1
	[0210.681] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206930 | out: pbBuffer=0xc000206930) returned 1
	[0210.681] GetFileType (hFile=0x170) returned 0x1
	[0210.681] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=25265) returned 1
	[0210.681] WriteFile (in: hFile=0x170, lpBuffer=0xc000100000*, nNumberOfBytesToWrite=0x62b1, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000100000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x62b1, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.682] GetFileType (hFile=0x170) returned 0x1
	[0210.682] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x62b1, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=25265) returned 1
	[0210.682] GetFileType (hFile=0x170) returned 0x1
	[0210.682] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=25265) returned 1
	[0210.682] WriteFile (in: hFile=0x170, lpBuffer=0xc0002cf880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc0002cf880*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x22d, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.683] GetFileType (hFile=0x170) returned 0x1
	[0210.683] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x62b1, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=25265) returned 1
	[0210.683] CloseHandle (hObject=0x170) returned 1
	[0210.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif.egmwv")) returned 0x20
	[0210.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.686] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif")) returned 0x20
	[0210.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x20) returned 1
	[0210.702] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.736] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0210.736] ReadFile (in: hFile=0xe0, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0x2a92, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc00016dcec*=0x2a92, lpOverlapped=0x0) returned 1
	[0210.741] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0210.741] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0210.741] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039402 | out: pbBuffer=0xc000039402) returned 1
	[0210.741] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0210.741] GetFileType (hFile=0xe0) returned 0x1
	[0210.741] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=10898) returned 1
	[0210.741] WriteFile (in: hFile=0xe0, lpBuffer=0xc000268000*, nNumberOfBytesToWrite=0x2a92, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000268000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x2a92, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.742] GetFileType (hFile=0xe0) returned 0x1
	[0210.742] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2a92, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=10898) returned 1
	[0210.742] GetFileType (hFile=0xe0) returned 0x1
	[0210.742] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=10898) returned 1
	[0210.742] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004ad500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0004ad500*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x22a, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.743] GetFileType (hFile=0xe0) returned 0x1
	[0210.743] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2a92, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=10898) returned 1
	[0210.743] CloseHandle (hObject=0xe0) returned 1
	[0210.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif.egmwv")) returned 0x20
	[0210.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.745] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif")) returned 0x20
	[0210.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x20) returned 1
	[0210.758] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0210.836] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0210.836] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0x409f, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000423cec*=0x409f, lpOverlapped=0x0) returned 1
	[0210.842] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142a0 | out: pbBuffer=0xc0004142a0) returned 1
	[0210.842] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004142ba | out: pbBuffer=0xc0004142ba) returned 1
	[0210.842] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000376202 | out: pbBuffer=0xc000376202) returned 1
	[0210.843] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142e0 | out: pbBuffer=0xc0004142e0) returned 1
	[0210.843] GetFileType (hFile=0xe0) returned 0x1
	[0210.843] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=16543) returned 1
	[0210.843] WriteFile (in: hFile=0xe0, lpBuffer=0xc000444000*, nNumberOfBytesToWrite=0x409f, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc000444000*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x409f, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.844] GetFileType (hFile=0xe0) returned 0x1
	[0210.844] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x409f, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=16543) returned 1
	[0210.844] GetFileType (hFile=0xe0) returned 0x1
	[0210.844] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b7ca0*=16543) returned 1
	[0210.844] WriteFile (in: hFile=0xe0, lpBuffer=0xc00032e380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc0004b7ccc, lpOverlapped=0xc0004b7ce8 | out: lpBuffer=0xc00032e380*, lpNumberOfBytesWritten=0xc0004b7ccc*=0x22d, lpOverlapped=0xc0004b7ce8) returned 1
	[0210.844] GetFileType (hFile=0xe0) returned 0x1
	[0210.844] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x409f, lpNewFilePointer=0xc0004b7ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b7ca0*=16543) returned 1
	[0210.845] CloseHandle (hObject=0xe0) returned 1
	[0210.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif.egmwv")) returned 0x20
	[0210.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.846] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.850] SetEvent (hEvent=0xc0) returned 1
	[0210.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif")) returned 0x20
	[0210.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x20) returned 1
	[0210.852] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif.egmwv"), dwFlags=0x1) returned 1
	[0210.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.881] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0210.882] ReadFile (in: hFile=0x170, lpBuffer=0xc0000ac000, nNumberOfBytesToRead=0xf40, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ac000*, lpNumberOfBytesRead=0xc00016dcec*=0xf40, lpOverlapped=0x0) returned 1
	[0210.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0210.889] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c1b02 | out: pbBuffer=0xc0002c1b02) returned 1
	[0210.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1b59 | out: pbBuffer=0xc0002c1b59) returned 1
	[0210.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c1be7 | out: pbBuffer=0xc0002c1be7) returned 1
	[0210.889] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0210.889] GetFileType (hFile=0x170) returned 0x1
	[0210.890] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=3904) returned 1
	[0210.890] WriteFile (in: hFile=0x170, lpBuffer=0xc0000ca000*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0000ca000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0xf40, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.890] GetFileType (hFile=0x170) returned 0x1
	[0210.890] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xf40, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=3904) returned 1
	[0210.890] GetFileType (hFile=0x170) returned 0x1
	[0210.891] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=3904) returned 1
	[0210.891] WriteFile (in: hFile=0x170, lpBuffer=0xc0000e6000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc0000e6000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x227, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.891] GetFileType (hFile=0x170) returned 0x1
	[0210.891] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xf40, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=3904) returned 1
	[0210.892] CloseHandle (hObject=0x170) returned 1
	[0210.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif.egmwv")) returned 0x20
	[0210.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.egmwv", dwFileAttributes=0x21) returned 1
	[0210.897] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp")) returned 0x20
	[0210.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x20) returned 1
	[0210.902] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp.egmwv"), dwFlags=0x1) returned 1
	[0210.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0210.935] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00016dcc4 | out: lpMode=0xc00016dcc4) returned 0
	[0210.936] ReadFile (in: hFile=0x178, lpBuffer=0xc000136000, nNumberOfBytesToRead=0x7b30, lpNumberOfBytesRead=0xc00016dcec, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc00016dcec*=0x7b30, lpOverlapped=0x0) returned 1
	[0210.942] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002068e0 | out: pbBuffer=0xc0002068e0) returned 1
	[0210.943] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003bb202 | out: pbBuffer=0xc0003bb202) returned 1
	[0210.943] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bb210 | out: pbBuffer=0xc0003bb210) returned 1
	[0210.943] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003bb266 | out: pbBuffer=0xc0003bb266) returned 1
	[0210.943] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206920 | out: pbBuffer=0xc000206920) returned 1
	[0210.943] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x1) returned 0x102
	[0210.945] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.945] SetEvent (hEvent=0x70) returned 1
	[0210.945] SetEvent (hEvent=0x90) returned 1
	[0210.945] SetEvent (hEvent=0xc0) returned 1
	[0210.946] GetFileType (hFile=0x178) returned 0x1
	[0210.946] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=31536) returned 1
	[0210.946] WriteFile (in: hFile=0x178, lpBuffer=0xc00023a000*, nNumberOfBytesToWrite=0x7b30, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc00023a000*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x7b30, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.947] GetFileType (hFile=0x178) returned 0x1
	[0210.947] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7b30, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=31536) returned 1
	[0210.947] GetFileType (hFile=0x178) returned 0x1
	[0210.947] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0004b3ca0*=31536) returned 1
	[0210.947] WriteFile (in: hFile=0x178, lpBuffer=0xc000145180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc0004b3ccc, lpOverlapped=0xc0004b3ce8 | out: lpBuffer=0xc000145180*, lpNumberOfBytesWritten=0xc0004b3ccc*=0x230, lpOverlapped=0xc0004b3ce8) returned 1
	[0210.948] GetFileType (hFile=0x178) returned 0x1
	[0210.948] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7b30, lpNewFilePointer=0xc0004b3ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0004b3ca0*=31536) returned 1
	[0210.948] CloseHandle (hObject=0x178) returned 1
	[0210.951] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp.egmwv")) returned 0x20
	[0210.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0210.955] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.962] SetEvent (hEvent=0x150) returned 1
	[0210.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp")) returned 0x20
	[0210.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x20) returned 1
	[0210.968] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp.egmwv"), dwFlags=0x1) returned 1
	[0210.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0210.995] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0210.995] ReadFile (in: hFile=0x170, lpBuffer=0xc00016e000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc00016e000*, lpNumberOfBytesRead=0xc000425cec*=0x7ce0, lpOverlapped=0x0) returned 1
	[0211.000] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206110 | out: pbBuffer=0xc000206110) returned 1
	[0211.000] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020612a | out: pbBuffer=0xc00020612a) returned 1
	[0211.000] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000001302 | out: pbBuffer=0xc000001302) returned 1
	[0211.000] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206150 | out: pbBuffer=0xc000206150) returned 1
	[0211.000] GetFileType (hFile=0x170) returned 0x1
	[0211.000] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=31968) returned 1
	[0211.001] WriteFile (in: hFile=0x170, lpBuffer=0xc0000f6000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x7ce0, lpOverlapped=0xc000155ce8) returned 1
	[0211.001] GetFileType (hFile=0x170) returned 0x1
	[0211.001] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7ce0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=31968) returned 1
	[0211.001] GetFileType (hFile=0x170) returned 0x1
	[0211.001] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=31968) returned 1
	[0211.002] WriteFile (in: hFile=0x170, lpBuffer=0xc0002c9500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0002c9500*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0211.002] GetFileType (hFile=0x170) returned 0x1
	[0211.002] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7ce0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=31968) returned 1
	[0211.002] CloseHandle (hObject=0x170) returned 1
	[0211.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp.egmwv")) returned 0x20
	[0211.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.004] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.014] SetEvent (hEvent=0x150) returned 1
	[0211.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp")) returned 0x20
	[0211.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP", dwFileAttributes=0x20) returned 1
	[0211.016] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.039] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0211.039] ReadFile (in: hFile=0xe0, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc000425cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0211.045] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ec0 | out: pbBuffer=0xc000052ec0) returned 1
	[0211.045] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000376c02 | out: pbBuffer=0xc000376c02) returned 1
	[0211.045] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000376c86 | out: pbBuffer=0xc000376c86) returned 1
	[0211.045] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052f00 | out: pbBuffer=0xc000052f00) returned 1
	[0211.046] GetFileType (hFile=0xe0) returned 0x1
	[0211.046] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.046] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc000351ccc*=0x7db8, lpOverlapped=0xc000351ce8) returned 1
	[0211.047] GetFileType (hFile=0xe0) returned 0x1
	[0211.047] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.047] GetFileType (hFile=0xe0) returned 0x1
	[0211.047] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.047] WriteFile (in: hFile=0xe0, lpBuffer=0xc00013e700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc00013e700*, lpNumberOfBytesWritten=0xc000351ccc*=0x236, lpOverlapped=0xc000351ce8) returned 1
	[0211.048] GetFileType (hFile=0xe0) returned 0x1
	[0211.048] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.048] CloseHandle (hObject=0xe0) returned 1
	[0211.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp.egmwv")) returned 0x20
	[0211.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.050] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.058] SetEvent (hEvent=0x90) returned 1
	[0211.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp")) returned 0x20
	[0211.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP", dwFileAttributes=0x20) returned 1
	[0211.066] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp.egmwv"), dwFlags=0x1) returned 1
	[0211.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.121] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0211.121] ReadFile (in: hFile=0x170, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc000429cec*=0x7db8, lpOverlapped=0x0) returned 1
	[0211.126] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052b60 | out: pbBuffer=0xc000052b60) returned 1
	[0211.126] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0211.126] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ba0 | out: pbBuffer=0xc000052ba0) returned 1
	[0211.126] GetFileType (hFile=0x170) returned 0x1
	[0211.126] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.127] WriteFile (in: hFile=0x170, lpBuffer=0xc0000f6000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0000f6000*, lpNumberOfBytesWritten=0xc000351ccc*=0x7db8, lpOverlapped=0xc000351ce8) returned 1
	[0211.127] GetFileType (hFile=0x170) returned 0x1
	[0211.127] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.127] GetFileType (hFile=0x170) returned 0x1
	[0211.128] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.128] WriteFile (in: hFile=0x170, lpBuffer=0xc000283500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000283500*, lpNumberOfBytesWritten=0xc000351ccc*=0x236, lpOverlapped=0xc000351ce8) returned 1
	[0211.128] GetFileType (hFile=0x170) returned 0x1
	[0211.128] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x7db8, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=32184) returned 1
	[0211.128] CloseHandle (hObject=0x170) returned 1
	[0211.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp.egmwv")) returned 0x20
	[0211.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.egmwv", dwFileAttributes=0x21) returned 1
	[0211.130] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf")) returned 0x20
	[0211.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF", dwFileAttributes=0x20) returned 1
	[0211.136] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.167] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000429cc4 | out: lpMode=0xc000429cc4) returned 0
	[0211.167] ReadFile (in: hFile=0x178, lpBuffer=0xc0002cc000, nNumberOfBytesToRead=0x3ee8, lpNumberOfBytesRead=0xc000429cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002cc000*, lpNumberOfBytesRead=0xc000429cec*=0x3ee8, lpOverlapped=0x0) returned 1
	[0211.173] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0211.173] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000214f02 | out: pbBuffer=0xc000214f02) returned 1
	[0211.173] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000214f24 | out: pbBuffer=0xc000214f24) returned 1
	[0211.174] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0211.174] GetFileType (hFile=0x178) returned 0x1
	[0211.174] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=16104) returned 1
	[0211.174] WriteFile (in: hFile=0x178, lpBuffer=0xc0004ac000*, nNumberOfBytesToWrite=0x3ee8, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0004ac000*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x3ee8, lpOverlapped=0xc0000e9ce8) returned 1
	[0211.175] GetFileType (hFile=0x178) returned 0x1
	[0211.175] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x3ee8, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=16104) returned 1
	[0211.175] GetFileType (hFile=0x178) returned 0x1
	[0211.175] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000e9ca0*=16104) returned 1
	[0211.175] WriteFile (in: hFile=0x178, lpBuffer=0xc0000ed500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000e9ccc, lpOverlapped=0xc0000e9ce8 | out: lpBuffer=0xc0000ed500*, lpNumberOfBytesWritten=0xc0000e9ccc*=0x233, lpOverlapped=0xc0000e9ce8) returned 1
	[0211.176] GetFileType (hFile=0x178) returned 0x1
	[0211.176] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x3ee8, lpNewFilePointer=0xc0000e9ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000e9ca0*=16104) returned 1
	[0211.176] CloseHandle (hObject=0x178) returned 1
	[0211.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf.egmwv")) returned 0x20
	[0211.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.181] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.292] SetEvent (hEvent=0x150) returned 1
	[0211.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf")) returned 0x20
	[0211.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF", dwFileAttributes=0x20) returned 1
	[0211.300] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.334] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0211.335] ReadFile (in: hFile=0xe0, lpBuffer=0xc00042a000, nNumberOfBytesToRead=0x2bd0, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc00042a000*, lpNumberOfBytesRead=0xc000423cec*=0x2bd0, lpOverlapped=0x0) returned 1
	[0211.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0211.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000052eaa | out: pbBuffer=0xc000052eaa) returned 1
	[0211.339] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004c2d02 | out: pbBuffer=0xc0004c2d02) returned 1
	[0211.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004c2d79 | out: pbBuffer=0xc0004c2d79) returned 1
	[0211.339] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004c2da8 | out: pbBuffer=0xc0004c2da8) returned 1
	[0211.340] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0211.340] GetFileType (hFile=0xe0) returned 0x1
	[0211.340] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=11216) returned 1
	[0211.340] WriteFile (in: hFile=0xe0, lpBuffer=0xc000132000*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000132000*, lpNumberOfBytesWritten=0xc000351ccc*=0x2bd0, lpOverlapped=0xc000351ce8) returned 1
	[0211.341] GetFileType (hFile=0xe0) returned 0x1
	[0211.341] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2bd0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=11216) returned 1
	[0211.341] GetFileType (hFile=0xe0) returned 0x1
	[0211.341] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=11216) returned 1
	[0211.341] WriteFile (in: hFile=0xe0, lpBuffer=0xc000128a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000128a80*, lpNumberOfBytesWritten=0xc000351ccc*=0x22d, lpOverlapped=0xc000351ce8) returned 1
	[0211.341] GetFileType (hFile=0xe0) returned 0x1
	[0211.341] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2bd0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=11216) returned 1
	[0211.342] CloseHandle (hObject=0xe0) returned 1
	[0211.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf.egmwv")) returned 0x20
	[0211.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.343] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.355] SetEvent (hEvent=0x150) returned 1
	[0211.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf")) returned 0x20
	[0211.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF", dwFileAttributes=0x20) returned 1
	[0211.357] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.387] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc00038dcc4 | out: lpMode=0xc00038dcc4) returned 0
	[0211.387] ReadFile (in: hFile=0x170, lpBuffer=0xc0000d4000, nNumberOfBytesToRead=0x3264, lpNumberOfBytesRead=0xc00038dcec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d4000*, lpNumberOfBytesRead=0xc00038dcec*=0x3264, lpOverlapped=0x0) returned 1
	[0211.392] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6110 | out: pbBuffer=0xc0002b6110) returned 1
	[0211.392] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039202 | out: pbBuffer=0xc000039202) returned 1
	[0211.393] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6150 | out: pbBuffer=0xc0002b6150) returned 1
	[0211.393] GetFileType (hFile=0x170) returned 0x1
	[0211.393] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=12900) returned 1
	[0211.393] WriteFile (in: hFile=0x170, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0x3264, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc000351ccc*=0x3264, lpOverlapped=0xc000351ce8) returned 1
	[0211.394] GetFileType (hFile=0x170) returned 0x1
	[0211.394] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3264, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=12900) returned 1
	[0211.394] GetFileType (hFile=0x170) returned 0x1
	[0211.394] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=12900) returned 1
	[0211.394] WriteFile (in: hFile=0x170, lpBuffer=0xc00022d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc00022d880*, lpNumberOfBytesWritten=0xc000351ccc*=0x22a, lpOverlapped=0xc000351ce8) returned 1
	[0211.394] GetFileType (hFile=0x170) returned 0x1
	[0211.394] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x3264, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=12900) returned 1
	[0211.395] CloseHandle (hObject=0x170) returned 1
	[0211.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf.egmwv")) returned 0x20
	[0211.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.396] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf")) returned 0x20
	[0211.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF", dwFileAttributes=0x20) returned 1
	[0211.432] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.476] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000425cc4 | out: lpMode=0xc000425cc4) returned 0
	[0211.476] ReadFile (in: hFile=0xe0, lpBuffer=0xc000068000, nNumberOfBytesToRead=0x5c2c, lpNumberOfBytesRead=0xc000425cec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesRead=0xc000425cec*=0x5c2c, lpOverlapped=0x0) returned 1
	[0211.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6420 | out: pbBuffer=0xc0002b6420) returned 1
	[0211.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002b643a | out: pbBuffer=0xc0002b643a) returned 1
	[0211.481] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004c2902 | out: pbBuffer=0xc0004c2902) returned 1
	[0211.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004c296a | out: pbBuffer=0xc0004c296a) returned 1
	[0211.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004c29c4 | out: pbBuffer=0xc0004c29c4) returned 1
	[0211.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0004c29d3 | out: pbBuffer=0xc0004c29d3) returned 1
	[0211.481] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b6460 | out: pbBuffer=0xc0002b6460) returned 1
	[0211.481] GetFileType (hFile=0xe0) returned 0x1
	[0211.482] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=23596) returned 1
	[0211.482] WriteFile (in: hFile=0xe0, lpBuffer=0xc000352000*, nNumberOfBytesToWrite=0x5c2c, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000352000*, lpNumberOfBytesWritten=0xc000351ccc*=0x5c2c, lpOverlapped=0xc000351ce8) returned 1
	[0211.482] GetFileType (hFile=0xe0) returned 0x1
	[0211.482] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5c2c, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=23596) returned 1
	[0211.482] GetFileType (hFile=0xe0) returned 0x1
	[0211.483] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000351ca0*=23596) returned 1
	[0211.483] WriteFile (in: hFile=0xe0, lpBuffer=0xc000076a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000351ccc, lpOverlapped=0xc000351ce8 | out: lpBuffer=0xc000076a80*, lpNumberOfBytesWritten=0xc000351ccc*=0x22d, lpOverlapped=0xc000351ce8) returned 1
	[0211.483] GetFileType (hFile=0xe0) returned 0x1
	[0211.483] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x5c2c, lpNewFilePointer=0xc000351ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000351ca0*=23596) returned 1
	[0211.483] CloseHandle (hObject=0xe0) returned 1
	[0211.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf.egmwv")) returned 0x20
	[0211.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.487] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf")) returned 0x20
	[0211.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF", dwFileAttributes=0x20) returned 1
	[0211.493] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.525] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0211.525] ReadFile (in: hFile=0x178, lpBuffer=0xc0003f2000, nNumberOfBytesToRead=0xd74, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003f2000*, lpNumberOfBytesRead=0xc000423cec*=0xd74, lpOverlapped=0x0) returned 1
	[0211.531] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d10 | out: pbBuffer=0xc000052d10) returned 1
	[0211.531] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0001ad902 | out: pbBuffer=0xc0001ad902) returned 1
	[0211.531] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0001ad979 | out: pbBuffer=0xc0001ad979) returned 1
	[0211.531] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052d50 | out: pbBuffer=0xc000052d50) returned 1
	[0211.531] GetFileType (hFile=0x178) returned 0x1
	[0211.531] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3444) returned 1
	[0211.532] WriteFile (in: hFile=0x178, lpBuffer=0xc000412000*, nNumberOfBytesToWrite=0xd74, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000412000*, lpNumberOfBytesWritten=0xc000155ccc*=0xd74, lpOverlapped=0xc000155ce8) returned 1
	[0211.532] GetFileType (hFile=0x178) returned 0x1
	[0211.532] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xd74, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3444) returned 1
	[0211.532] GetFileType (hFile=0x178) returned 0x1
	[0211.532] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=3444) returned 1
	[0211.533] WriteFile (in: hFile=0x178, lpBuffer=0xc0003fee00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003fee00*, lpNumberOfBytesWritten=0xc000155ccc*=0x22d, lpOverlapped=0xc000155ce8) returned 1
	[0211.533] GetFileType (hFile=0x178) returned 0x1
	[0211.533] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xd74, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=3444) returned 1
	[0211.533] CloseHandle (hObject=0x178) returned 1
	[0211.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf.egmwv")) returned 0x20
	[0211.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.537] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf")) returned 0x20
	[0211.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF", dwFileAttributes=0x20) returned 1
	[0211.544] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.580] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0211.580] ReadFile (in: hFile=0x170, lpBuffer=0xc000261000, nNumberOfBytesToRead=0x2bdc, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc000261000*, lpNumberOfBytesRead=0xc000423cec*=0x2bdc, lpOverlapped=0x0) returned 1
	[0211.586] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0211.586] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc00026c802 | out: pbBuffer=0xc00026c802) returned 1
	[0211.586] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00026c86e | out: pbBuffer=0xc00026c86e) returned 1
	[0211.586] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0211.587] GetFileType (hFile=0x170) returned 0x1
	[0211.587] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=11228) returned 1
	[0211.587] WriteFile (in: hFile=0x170, lpBuffer=0xc0001ce000*, nNumberOfBytesToWrite=0x2bdc, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesWritten=0xc0000bfccc*=0x2bdc, lpOverlapped=0xc0000bfce8) returned 1
	[0211.587] GetFileType (hFile=0x170) returned 0x1
	[0211.588] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2bdc, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=11228) returned 1
	[0211.588] GetFileType (hFile=0x170) returned 0x1
	[0211.588] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000bfca0*=11228) returned 1
	[0211.588] WriteFile (in: hFile=0x170, lpBuffer=0xc00027c700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc0000bfccc, lpOverlapped=0xc0000bfce8 | out: lpBuffer=0xc00027c700*, lpNumberOfBytesWritten=0xc0000bfccc*=0x233, lpOverlapped=0xc0000bfce8) returned 1
	[0211.588] GetFileType (hFile=0x170) returned 0x1
	[0211.589] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2bdc, lpNewFilePointer=0xc0000bfca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000bfca0*=11228) returned 1
	[0211.589] CloseHandle (hObject=0x170) returned 1
	[0211.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf.egmwv")) returned 0x20
	[0211.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.593] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.607] SetEvent (hEvent=0xe4) returned 1
	[0211.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf")) returned 0x20
	[0211.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF", dwFileAttributes=0x20) returned 1
	[0211.609] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.643] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0211.643] ReadFile (in: hFile=0xe0, lpBuffer=0xc000288000, nNumberOfBytesToRead=0x1714, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000288000*, lpNumberOfBytesRead=0xc000389cec*=0x1714, lpOverlapped=0x0) returned 1
	[0211.648] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206100 | out: pbBuffer=0xc000206100) returned 1
	[0211.648] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000039302 | out: pbBuffer=0xc000039302) returned 1
	[0211.648] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206140 | out: pbBuffer=0xc000206140) returned 1
	[0211.648] GetFileType (hFile=0xe0) returned 0x1
	[0211.648] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5908) returned 1
	[0211.649] WriteFile (in: hFile=0xe0, lpBuffer=0xc000290000*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000290000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1714, lpOverlapped=0xc000155ce8) returned 1
	[0211.649] GetFileType (hFile=0xe0) returned 0x1
	[0211.649] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1714, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5908) returned 1
	[0211.649] GetFileType (hFile=0xe0) returned 0x1
	[0211.649] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=5908) returned 1
	[0211.649] WriteFile (in: hFile=0xe0, lpBuffer=0xc0001f7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0001f7880*, lpNumberOfBytesWritten=0xc000155ccc*=0x22a, lpOverlapped=0xc000155ce8) returned 1
	[0211.650] GetFileType (hFile=0xe0) returned 0x1
	[0211.650] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1714, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=5908) returned 1
	[0211.650] CloseHandle (hObject=0xe0) returned 1
	[0211.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf.egmwv")) returned 0x20
	[0211.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.652] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.663] SetEvent (hEvent=0x150) returned 1
	[0211.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf")) returned 0x20
	[0211.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF", dwFileAttributes=0x20) returned 1
	[0211.666] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.691] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.693] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0211.693] ReadFile (in: hFile=0xe0, lpBuffer=0xc000470000, nNumberOfBytesToRead=0x2d14, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc000470000*, lpNumberOfBytesRead=0xc000389cec*=0x2d14, lpOverlapped=0x0) returned 1
	[0211.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414110 | out: pbBuffer=0xc000414110) returned 1
	[0211.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00041412a | out: pbBuffer=0xc00041412a) returned 1
	[0211.700] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0002c0d02 | out: pbBuffer=0xc0002c0d02) returned 1
	[0211.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0d39 | out: pbBuffer=0xc0002c0d39) returned 1
	[0211.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002c0dba | out: pbBuffer=0xc0002c0dba) returned 1
	[0211.700] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414150 | out: pbBuffer=0xc000414150) returned 1
	[0211.701] GetFileType (hFile=0xe0) returned 0x1
	[0211.701] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001fdca0*=11540) returned 1
	[0211.701] WriteFile (in: hFile=0xe0, lpBuffer=0xc00015e000*, nNumberOfBytesToWrite=0x2d14, lpNumberOfBytesWritten=0xc0001fdccc, lpOverlapped=0xc0001fdce8 | out: lpBuffer=0xc00015e000*, lpNumberOfBytesWritten=0xc0001fdccc*=0x2d14, lpOverlapped=0xc0001fdce8) returned 1
	[0211.701] GetFileType (hFile=0xe0) returned 0x1
	[0211.701] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2d14, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001fdca0*=11540) returned 1
	[0211.702] GetFileType (hFile=0xe0) returned 0x1
	[0211.702] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0001fdca0*=11540) returned 1
	[0211.702] WriteFile (in: hFile=0xe0, lpBuffer=0xc000071500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0xc0001fdccc, lpOverlapped=0xc0001fdce8 | out: lpBuffer=0xc000071500*, lpNumberOfBytesWritten=0xc0001fdccc*=0x22a, lpOverlapped=0xc0001fdce8) returned 1
	[0211.702] GetFileType (hFile=0xe0) returned 0x1
	[0211.702] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2d14, lpNewFilePointer=0xc0001fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0001fdca0*=11540) returned 1
	[0211.702] CloseHandle (hObject=0xe0) returned 1
	[0211.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf.egmwv")) returned 0x20
	[0211.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.705] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.709] SetEvent (hEvent=0x150) returned 1
	[0211.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf")) returned 0x20
	[0211.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF", dwFileAttributes=0x20) returned 1
	[0211.710] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0211.737] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0211.737] ReadFile (in: hFile=0x178, lpBuffer=0xc0003a2000, nNumberOfBytesToRead=0x3dd8, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a2000*, lpNumberOfBytesRead=0xc000389cec*=0x3dd8, lpOverlapped=0x0) returned 1
	[0211.743] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052e90 | out: pbBuffer=0xc000052e90) returned 1
	[0211.743] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000332c02 | out: pbBuffer=0xc000332c02) returned 1
	[0211.743] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000332c94 | out: pbBuffer=0xc000332c94) returned 1
	[0211.743] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000332cc1 | out: pbBuffer=0xc000332cc1) returned 1
	[0211.744] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000052ed0 | out: pbBuffer=0xc000052ed0) returned 1
	[0211.744] GetFileType (hFile=0x178) returned 0x1
	[0211.745] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=15832) returned 1
	[0211.745] WriteFile (in: hFile=0x178, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x3dd8, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc000201ccc*=0x3dd8, lpOverlapped=0xc000201ce8) returned 1
	[0211.745] GetFileType (hFile=0x178) returned 0x1
	[0211.745] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x3dd8, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=15832) returned 1
	[0211.746] GetFileType (hFile=0x178) returned 0x1
	[0211.746] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000201ca0*=15832) returned 1
	[0211.746] WriteFile (in: hFile=0x178, lpBuffer=0xc0000b6700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000201ccc, lpOverlapped=0xc000201ce8 | out: lpBuffer=0xc0000b6700*, lpNumberOfBytesWritten=0xc000201ccc*=0x233, lpOverlapped=0xc000201ce8) returned 1
	[0211.746] GetFileType (hFile=0x178) returned 0x1
	[0211.747] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x3dd8, lpNewFilePointer=0xc000201ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000201ca0*=15832) returned 1
	[0211.747] CloseHandle (hObject=0x178) returned 1
	[0211.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf.egmwv")) returned 0x20
	[0211.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.757] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf")) returned 0x20
	[0211.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF", dwFileAttributes=0x20) returned 1
	[0211.762] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0211.794] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0211.794] ReadFile (in: hFile=0x170, lpBuffer=0xc0002f2000, nNumberOfBytesToRead=0x18b0, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f2000*, lpNumberOfBytesRead=0xc000389cec*=0x18b0, lpOverlapped=0x0) returned 1
	[0211.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62b0 | out: pbBuffer=0xc0002b62b0) returned 1
	[0211.799] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0003e7a02 | out: pbBuffer=0xc0003e7a02) returned 1
	[0211.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003e7ab0 | out: pbBuffer=0xc0003e7ab0) returned 1
	[0211.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0003e7ade | out: pbBuffer=0xc0003e7ade) returned 1
	[0211.799] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002b62f0 | out: pbBuffer=0xc0002b62f0) returned 1
	[0211.800] GetFileType (hFile=0x170) returned 0x1
	[0211.800] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=6320) returned 1
	[0211.800] WriteFile (in: hFile=0x170, lpBuffer=0xc00026a000*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc00026a000*, lpNumberOfBytesWritten=0xc0000fdccc*=0x18b0, lpOverlapped=0xc0000fdce8) returned 1
	[0211.800] GetFileType (hFile=0x170) returned 0x1
	[0211.800] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x18b0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=6320) returned 1
	[0211.801] GetFileType (hFile=0x170) returned 0x1
	[0211.801] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc0000fdca0*=6320) returned 1
	[0211.801] WriteFile (in: hFile=0x170, lpBuffer=0xc000304e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc0000fdccc, lpOverlapped=0xc0000fdce8 | out: lpBuffer=0xc000304e00*, lpNumberOfBytesWritten=0xc0000fdccc*=0x227, lpOverlapped=0xc0000fdce8) returned 1
	[0211.801] GetFileType (hFile=0x170) returned 0x1
	[0211.801] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x18b0, lpNewFilePointer=0xc0000fdca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc0000fdca0*=6320) returned 1
	[0211.801] CloseHandle (hObject=0x170) returned 1
	[0211.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf.egmwv")) returned 0x20
	[0211.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.805] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf")) returned 0x20
	[0211.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF", dwFileAttributes=0x20) returned 1
	[0211.819] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.871] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000423cc4 | out: lpMode=0xc000423cc4) returned 0
	[0211.871] ReadFile (in: hFile=0xe0, lpBuffer=0xc0003b8000, nNumberOfBytesToRead=0x1f38, lpNumberOfBytesRead=0xc000423cec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b8000*, lpNumberOfBytesRead=0xc000423cec*=0x1f38, lpOverlapped=0x0) returned 1
	[0211.876] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206410 | out: pbBuffer=0xc000206410) returned 1
	[0211.876] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00020642a | out: pbBuffer=0xc00020642a) returned 1
	[0211.876] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000215502 | out: pbBuffer=0xc000215502) returned 1
	[0211.876] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc000215536 | out: pbBuffer=0xc000215536) returned 1
	[0211.876] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206450 | out: pbBuffer=0xc000206450) returned 1
	[0211.876] GetFileType (hFile=0xe0) returned 0x1
	[0211.876] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7992) returned 1
	[0211.877] WriteFile (in: hFile=0xe0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x1f38, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000155ccc*=0x1f38, lpOverlapped=0xc000155ce8) returned 1
	[0211.877] GetFileType (hFile=0xe0) returned 0x1
	[0211.877] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1f38, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7992) returned 1
	[0211.877] GetFileType (hFile=0xe0) returned 0x1
	[0211.877] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=7992) returned 1
	[0211.878] WriteFile (in: hFile=0xe0, lpBuffer=0xc0003c8a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0003c8a80*, lpNumberOfBytesWritten=0xc000155ccc*=0x230, lpOverlapped=0xc000155ce8) returned 1
	[0211.878] GetFileType (hFile=0xe0) returned 0x1
	[0211.878] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1f38, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=7992) returned 1
	[0211.878] CloseHandle (hObject=0xe0) returned 1
	[0211.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf.egmwv")) returned 0x20
	[0211.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.880] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.891] SetEvent (hEvent=0x150) returned 1
	[0211.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf")) returned 0x20
	[0211.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF", dwFileAttributes=0x20) returned 1
	[0211.893] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf.egmwv"), dwFlags=0x1) returned 1
	[0211.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0
	[0211.918] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0211.918] ReadFile (in: hFile=0xe0, lpBuffer=0xc00021b000, nNumberOfBytesToRead=0x2d40, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc00021b000*, lpNumberOfBytesRead=0xc000389cec*=0x2d40, lpOverlapped=0x0) returned 1
	[0211.924] SetEvent (hEvent=0x150) returned 1
	[0211.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0002065c0 | out: pbBuffer=0xc0002065c0) returned 1
	[0211.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc0002065da | out: pbBuffer=0xc0002065da) returned 1
	[0211.925] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc000144202 | out: pbBuffer=0xc000144202) returned 1
	[0211.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x1, pbBuffer=0xc00014424d | out: pbBuffer=0xc00014424d) returned 1
	[0211.925] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000206600 | out: pbBuffer=0xc000206600) returned 1
	[0211.925] GetFileType (hFile=0xe0) returned 0x1
	[0211.925] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=11584) returned 1
	[0211.926] WriteFile (in: hFile=0xe0, lpBuffer=0xc0004c6000*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc0004c6000*, lpNumberOfBytesWritten=0xc000155ccc*=0x2d40, lpOverlapped=0xc000155ce8) returned 1
	[0211.926] GetFileType (hFile=0xe0) returned 0x1
	[0211.926] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2d40, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=11584) returned 1
	[0211.926] GetFileType (hFile=0xe0) returned 0x1
	[0211.926] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc000155ca0*=11584) returned 1
	[0211.927] WriteFile (in: hFile=0xe0, lpBuffer=0xc000148380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0xc000155ccc, lpOverlapped=0xc000155ce8 | out: lpBuffer=0xc000148380*, lpNumberOfBytesWritten=0xc000155ccc*=0x227, lpOverlapped=0xc000155ce8) returned 1
	[0211.927] GetFileType (hFile=0xe0) returned 0x1
	[0211.927] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x2d40, lpNewFilePointer=0xc000155ca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc000155ca0*=11584) returned 1
	[0211.927] CloseHandle (hObject=0xe0) returned 1
	[0211.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf.egmwv")) returned 0x20
	[0211.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0211.934] SwitchToThread () returned 1
	[0211.936] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.942] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.968] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.985] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.994] SetEvent (hEvent=0x148) returned 1
	[0211.994] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0211.999] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.011] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.035] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.052] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.069] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.085] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.106] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.126] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.146] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.157] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.188] SetEvent (hEvent=0x150) returned 1
	[0212.189] SetEvent (hEvent=0x90) returned 1
	[0212.189] SetEvent (hEvent=0xc0) returned 1
	[0212.189] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x1) returned 0x0
	[0212.192] SetEvent (hEvent=0x150) returned 1
	[0212.192] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x1) returned 0x0
	[0212.194] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.294] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.507] SetEvent (hEvent=0xe4) returned 1
	[0212.507] SetEvent (hEvent=0x54) returned 1
	[0212.507] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf")) returned 0x20
	[0212.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF", dwFileAttributes=0x20) returned 1
	[0212.561] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf.egmwv"), dwFlags=0x1) returned 1
	[0212.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf.egmwv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180
	[0212.704] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0xc000389cc4 | out: lpMode=0xc000389cc4) returned 0
	[0212.704] ReadFile (in: hFile=0x180, lpBuffer=0xc0002e8000, nNumberOfBytesToRead=0x571c, lpNumberOfBytesRead=0xc000389cec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e8000*, lpNumberOfBytesRead=0xc000389cec*=0x571c, lpOverlapped=0x0) returned 1
	[0212.710] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc0004142b0 | out: pbBuffer=0xc0004142b0) returned 1
	[0212.710] CryptGenRandom (in: hProv=0x885010, dwLen=0xea, pbBuffer=0xc0004bd202 | out: pbBuffer=0xc0004bd202) returned 1
	[0212.711] CryptGenRandom (in: hProv=0x885010, dwLen=0x10, pbBuffer=0xc000414490 | out: pbBuffer=0xc000414490) returned 1
	[0212.711] GetFileType (hFile=0x180) returned 0x1
	[0212.711] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=22300) returned 1
	[0212.711] WriteFile (in: hFile=0x180, lpBuffer=0xc0002fc000*, nNumberOfBytesToWrite=0x571c, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0002fc000*, lpNumberOfBytesWritten=0xc00017fccc*=0x571c, lpOverlapped=0xc00017fce8) returned 1
	[0212.712] GetFileType (hFile=0x180) returned 0x1
	[0212.712] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x571c, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=22300) returned 1
	[0212.712] GetFileType (hFile=0x180) returned 0x1
	[0212.712] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x1 | out: lpNewFilePointer=0xc00017fca0*=22300) returned 1
	[0212.712] WriteFile (in: hFile=0x180, lpBuffer=0xc0000bee00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0xc00017fccc, lpOverlapped=0xc00017fce8 | out: lpBuffer=0xc0000bee00*, lpNumberOfBytesWritten=0xc00017fccc*=0x230, lpOverlapped=0xc00017fce8) returned 1
	[0212.712] GetFileType (hFile=0x180) returned 0x1
	[0212.713] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x571c, lpNewFilePointer=0xc00017fca0, dwMoveMethod=0x0 | out: lpNewFilePointer=0xc00017fca0*=22300) returned 1
	[0212.713] CloseHandle (hObject=0x180) returned 1
	[0212.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF.egmwv" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf.egmwv")) returned 0x20
	[0212.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF.egmwv", dwFileAttributes=0x21) returned 1
	[0212.716] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.800] SetEvent (hEvent=0x14c) returned 1
	[0212.800] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.821] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) 

Process:
	id = "2"
	image_name = "sc.exe"
	filename = "c:\\windows\\system32\\sc.exe"
	page_root = "0x3327a000"
	os_pid = "0x8e0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xb5c"
	cmd_line = "sc queryex type= service"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 6
	os_tid = 0xad0

	[0059.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x14fdb0 | out: lpSystemTimeAsFileTime=0x14fdb0*(dwLowDateTime=0x87a99c00, dwHighDateTime=0x1d5dcd8)) 
	[0059.056] GetCurrentProcessId () returned 0x8e0
	[0059.056] GetCurrentThreadId () returned 0xad0
	[0059.056] GetTickCount () returned 0x1158d14
	[0059.056] QueryPerformanceCounter (in: lpPerformanceCount=0x14fdb8 | out: lpPerformanceCount=0x14fdb8*=20022127211) returned 1
	[0059.056] GetModuleHandleW (lpModuleName=0x0) returned 0xfffb0000
	[0059.057] __set_app_type (_Type=0x1) 
	[0059.057] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfffb7228) returned 0x0
	[0059.057] __wgetmainargs (in: _Argc=0xfffbb604, _Argv=0xfffbb610, _Env=0xfffbb608, _DoWildCard=0, _StartInfo=0xfffbb050 | out: _Argc=0xfffbb604, _Argv=0xfffbb610, _Env=0xfffbb608) returned 0
	[0059.059] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
	[0059.067] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0059.067] GetStdHandle (nStdHandle=0xfffffff5) returned 0xa0
	[0059.067] wcsncmp (_String1="qu", _String2="\\\\", _MaxCount=0x2) returned 21
	[0059.067] _wcsicmp (_String1="queryex", _String2="query") returned 101
	[0059.067] _wcsicmp (_String1="queryex", _String2="queryex") returned 0
	[0059.067] LocalAlloc (uFlags=0x0, uBytes=0x1000) returned 0x317d30
	[0059.068] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x314340
	[0059.089] EnumServicesStatusExW (in: hSCManager=0x314340, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x317d30, cbBufSize=0x1000, pcbBytesNeeded=0x14fd0c, lpServicesReturned=0x14fcf4, lpResumeHandle=0x14fcf0, pszGroupName=0x0 | out: lpServices=0x317d30, pcbBytesNeeded=0x14fd0c, lpServicesReturned=0x14fcf4, lpResumeHandle=0x14fcf0) returned 0
	[0059.099] GetLastError () returned 0xea
	[0059.099] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.099] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.099] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.099] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.099] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.099] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.099] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.099] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.099] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.100] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1c2
	[0059.105] GetFileType (hFile=0xa0) returned 0x3
	[0059.105] LocalAlloc (uFlags=0x0, uBytes=0x384) returned 0x31c530
	[0059.105] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Appinfo\r\nDISPLAY_NAME: Application Information\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=450, lpMultiByteStr=0x31c530, cbMultiByte=900, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Appinfo\r\nDISPLAY_NAME: Application Information\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 450
	[0059.105] WriteFile (in: hFile=0xa0, lpBuffer=0x31c530*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c530*, lpNumberOfBytesWritten=0x14fa48*=0x1c2, lpOverlapped=0x0) returned 1
	[0059.105] LocalFree (hMem=0x31c530) returned 0x0
	[0059.105] LocalFree (hMem=0x31c190) returned 0x0
	[0059.106] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.106] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.106] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.106] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.106] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.106] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.106] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.106] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.106] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.106] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1d6
	[0059.106] GetFileType (hFile=0xa0) returned 0x3
	[0059.107] LocalAlloc (uFlags=0x0, uBytes=0x3ac) returned 0x31c550
	[0059.107] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: AudioEndpointBuilder\r\nDISPLAY_NAME: Windows Audio Endpoint Builder\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=470, lpMultiByteStr=0x31c550, cbMultiByte=940, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: AudioEndpointBuilder\r\nDISPLAY_NAME: Windows Audio Endpoint Builder\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 470
	[0059.107] WriteFile (in: hFile=0xa0, lpBuffer=0x31c550*, nNumberOfBytesToWrite=0x1d6, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c550*, lpNumberOfBytesWritten=0x14fa48*=0x1d6, lpOverlapped=0x0) returned 1
	[0059.107] LocalFree (hMem=0x31c550) returned 0x0
	[0059.107] LocalFree (hMem=0x31c190) returned 0x0
	[0059.107] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.107] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.107] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.107] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.107] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.107] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.107] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.108] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.108] _itow (in: _Dest=0x2c8, _Radix=1375184 | out: _Dest=0x2c8) returned="712"
	[0059.108] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1b9
	[0059.108] GetFileType (hFile=0xa0) returned 0x3
	[0059.108] LocalAlloc (uFlags=0x0, uBytes=0x372) returned 0x31c520
	[0059.108] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: AudioSrv\r\nDISPLAY_NAME: Windows Audio\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n", cchWideChar=441, lpMultiByteStr=0x31c520, cbMultiByte=882, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: AudioSrv\r\nDISPLAY_NAME: Windows Audio\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n     : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 441
	[0059.108] WriteFile (in: hFile=0xa0, lpBuffer=0x31c520*, nNumberOfBytesToWrite=0x1b9, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c520*, lpNumberOfBytesWritten=0x14fa48*=0x1b9, lpOverlapped=0x0) returned 1
	[0059.108] LocalFree (hMem=0x31c520) returned 0x0
	[0059.108] LocalFree (hMem=0x31c190) returned 0x0
	[0059.108] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.108] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.108] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.108] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.108] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.109] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.109] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.109] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.109] _itow (in: _Dest=0x4c4, _Radix=1375184 | out: _Dest=0x4c4) returned="1220"
	[0059.109] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1bd
	[0059.109] GetFileType (hFile=0xa0) returned 0x3
	[0059.109] LocalAlloc (uFlags=0x0, uBytes=0x37a) returned 0x31c520
	[0059.109] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: BFE\r\nDISPLAY_NAME: Base Filtering Engine\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1220\r\n        FLAGS              : \r\n", cchWideChar=445, lpMultiByteStr=0x31c520, cbMultiByte=890, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: BFE\r\nDISPLAY_NAME: Base Filtering Engine\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1220\r\n        FLAGS              : \r\n : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 445
	[0059.109] WriteFile (in: hFile=0xa0, lpBuffer=0x31c520*, nNumberOfBytesToWrite=0x1bd, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c520*, lpNumberOfBytesWritten=0x14fa48*=0x1bd, lpOverlapped=0x0) returned 1
	[0059.109] LocalFree (hMem=0x31c520) returned 0x0
	[0059.109] LocalFree (hMem=0x31c190) returned 0x0
	[0059.110] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.110] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.110] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.110] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.110] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.110] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.110] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.110] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.110] _itow (in: _Dest=0x218, _Radix=1375184 | out: _Dest=0x218) returned="536"
	[0059.110] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1c2
	[0059.110] GetFileType (hFile=0xa0) returned 0x3
	[0059.110] LocalAlloc (uFlags=0x0, uBytes=0x384) returned 0x31c530
	[0059.110] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: CryptSvc\r\nDISPLAY_NAME: Cryptographic Services\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n", cchWideChar=450, lpMultiByteStr=0x31c530, cbMultiByte=900, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: CryptSvc\r\nDISPLAY_NAME: Cryptographic Services\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n              : 824\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 450
	[0059.110] WriteFile (in: hFile=0xa0, lpBuffer=0x31c530*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c530*, lpNumberOfBytesWritten=0x14fa48*=0x1c2, lpOverlapped=0x0) returned 1
	[0059.111] LocalFree (hMem=0x31c530) returned 0x0
	[0059.111] LocalFree (hMem=0x31c190) returned 0x0
	[0059.111] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.111] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.111] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.111] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.111] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.111] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.111] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.111] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.111] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.111] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1bb
	[0059.111] GetFileType (hFile=0xa0) returned 0x3
	[0059.112] LocalAlloc (uFlags=0x0, uBytes=0x376) returned 0x31c520
	[0059.112] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: CscService\r\nDISPLAY_NAME: Offline Files\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=443, lpMultiByteStr=0x31c520, cbMultiByte=886, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: CscService\r\nDISPLAY_NAME: Offline Files\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\nFLAGS              : \r\n              : 824\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 443
	[0059.112] WriteFile (in: hFile=0xa0, lpBuffer=0x31c520*, nNumberOfBytesToWrite=0x1bb, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c520*, lpNumberOfBytesWritten=0x14fa48*=0x1bb, lpOverlapped=0x0) returned 1
	[0059.112] LocalFree (hMem=0x31c520) returned 0x0
	[0059.112] LocalFree (hMem=0x31c190) returned 0x0
	[0059.112] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.112] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.112] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.112] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.112] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.112] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.112] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.112] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.112] _itow (in: _Dest=0x250, _Radix=1375184 | out: _Dest=0x250) returned="592"
	[0059.112] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1ce
	[0059.113] GetFileType (hFile=0xa0) returned 0x3
	[0059.113] LocalAlloc (uFlags=0x0, uBytes=0x39c) returned 0x31c540
	[0059.113] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: DcomLaunch\r\nDISPLAY_NAME: DCOM Server Process Launcher\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\n", cchWideChar=462, lpMultiByteStr=0x31c540, cbMultiByte=924, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: DcomLaunch\r\nDISPLAY_NAME: DCOM Server Process Launcher\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\n FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 462
	[0059.113] WriteFile (in: hFile=0xa0, lpBuffer=0x31c540*, nNumberOfBytesToWrite=0x1ce, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c540*, lpNumberOfBytesWritten=0x14fa48*=0x1ce, lpOverlapped=0x0) returned 1
	[0059.113] LocalFree (hMem=0x31c540) returned 0x0
	[0059.113] LocalFree (hMem=0x31c190) returned 0x0
	[0059.113] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.113] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.113] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.113] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.113] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.113] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.114] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.114] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.114] _itow (in: _Dest=0x2c8, _Radix=1375184 | out: _Dest=0x2c8) returned="712"
	[0059.114] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1b3
	[0059.114] GetFileType (hFile=0xa0) returned 0x3
	[0059.114] LocalAlloc (uFlags=0x0, uBytes=0x366) returned 0x31c510
	[0059.114] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Dhcp\r\nDISPLAY_NAME: DHCP Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n", cchWideChar=435, lpMultiByteStr=0x31c510, cbMultiByte=870, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Dhcp\r\nDISPLAY_NAME: DHCP Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n   : 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\n FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 435
	[0059.114] WriteFile (in: hFile=0xa0, lpBuffer=0x31c510*, nNumberOfBytesToWrite=0x1b3, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c510*, lpNumberOfBytesWritten=0x14fa48*=0x1b3, lpOverlapped=0x0) returned 1
	[0059.114] LocalFree (hMem=0x31c510) returned 0x0
	[0059.114] LocalFree (hMem=0x31c190) returned 0x0
	[0059.114] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.114] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.114] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.115] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.115] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.115] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.115] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.115] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.115] _itow (in: _Dest=0x218, _Radix=1375184 | out: _Dest=0x218) returned="536"
	[0059.115] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1b6
	[0059.115] GetFileType (hFile=0xa0) returned 0x3
	[0059.115] LocalAlloc (uFlags=0x0, uBytes=0x36c) returned 0x31c510
	[0059.115] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Dnscache\r\nDISPLAY_NAME: DNS Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n", cchWideChar=438, lpMultiByteStr=0x31c510, cbMultiByte=876, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Dnscache\r\nDISPLAY_NAME: DNS Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n: 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\n FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 438
	[0059.115] WriteFile (in: hFile=0xa0, lpBuffer=0x31c510*, nNumberOfBytesToWrite=0x1b6, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c510*, lpNumberOfBytesWritten=0x14fa48*=0x1b6, lpOverlapped=0x0) returned 1
	[0059.116] LocalFree (hMem=0x31c510) returned 0x0
	[0059.116] LocalFree (hMem=0x31c190) returned 0x0
	[0059.116] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.116] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.116] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.116] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.116] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.116] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.116] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.116] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.116] _itow (in: _Dest=0x4c4, _Radix=1375184 | out: _Dest=0x4c4) returned="1220"
	[0059.116] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="손1") returned 0x1c1
	[0059.116] GetFileType (hFile=0xa0) returned 0x3
	[0059.116] LocalAlloc (uFlags=0x0, uBytes=0x382) returned 0x31c560
	[0059.117] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: DPS\r\nDISPLAY_NAME: Diagnostic Policy Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1220\r\n        FLAGS              : \r\n", cchWideChar=449, lpMultiByteStr=0x31c560, cbMultiByte=898, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: DPS\r\nDISPLAY_NAME: Diagnostic Policy Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1220\r\n        FLAGS              : \r\n : \r\n", lpUsedDefaultChar=0x0) returned 449
	[0059.117] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1c1, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1c1, lpOverlapped=0x0) returned 1
	[0059.118] LocalFree (hMem=0x31c560) returned 0x0
	[0059.118] LocalFree (hMem=0x31c190) returned 0x0
	[0059.118] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.118] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.118] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.118] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.118] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.118] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.118] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.118] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.118] _itow (in: _Dest=0x2c8, _Radix=1375184 | out: _Dest=0x2c8) returned="712"
	[0059.118] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1bd
	[0059.119] GetFileType (hFile=0xa0) returned 0x3
	[0059.119] LocalAlloc (uFlags=0x0, uBytes=0x37a) returned 0x31c560
	[0059.119] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: eventlog\r\nDISPLAY_NAME: Windows Event Log\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n", cchWideChar=445, lpMultiByteStr=0x31c560, cbMultiByte=890, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: eventlog\r\nDISPLAY_NAME: Windows Event Log\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n: \r\n : \r\n", lpUsedDefaultChar=0x0) returned 445
	[0059.119] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bd, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bd, lpOverlapped=0x0) returned 1
	[0059.130] LocalFree (hMem=0x31c560) returned 0x0
	[0059.130] LocalFree (hMem=0x320530) returned 0x0
	[0059.130] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.130] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.130] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.130] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.130] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.130] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.130] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.130] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.130] _itow (in: _Dest=0x3f8, _Radix=1375184 | out: _Dest=0x3f8) returned="1016"
	[0059.130] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c1
	[0059.130] GetFileType (hFile=0xa0) returned 0x3
	[0059.131] LocalAlloc (uFlags=0x0, uBytes=0x382) returned 0x31c560
	[0059.131] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: EventSystem\r\nDISPLAY_NAME: COM+ Event System\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n", cchWideChar=449, lpMultiByteStr=0x31c560, cbMultiByte=898, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: EventSystem\r\nDISPLAY_NAME: COM+ Event System\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n : \r\n", lpUsedDefaultChar=0x0) returned 449
	[0059.131] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1c1, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1c1, lpOverlapped=0x0) returned 1
	[0059.131] LocalFree (hMem=0x31c560) returned 0x0
	[0059.131] LocalFree (hMem=0x320530) returned 0x0
	[0059.131] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.131] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.131] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.131] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.131] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.131] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.131] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.131] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.132] _itow (in: _Dest=0x5cc, _Radix=1375184 | out: _Dest=0x5cc) returned="1484"
	[0059.132] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c8
	[0059.132] GetFileType (hFile=0xa0) returned 0x3
	[0059.132] LocalAlloc (uFlags=0x0, uBytes=0x390) returned 0x31c190
	[0059.132] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: FontCache\r\nDISPLAY_NAME: Windows Font Cache Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1484\r\n        FLAGS              : \r\n", cchWideChar=456, lpMultiByteStr=0x31c190, cbMultiByte=912, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: FontCache\r\nDISPLAY_NAME: Windows Font Cache Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1484\r\n        FLAGS              : \r\nU", lpUsedDefaultChar=0x0) returned 456
	[0059.132] WriteFile (in: hFile=0xa0, lpBuffer=0x31c190*, nNumberOfBytesToWrite=0x1c8, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c190*, lpNumberOfBytesWritten=0x14fa48*=0x1c8, lpOverlapped=0x0) returned 1
	[0059.133] LocalFree (hMem=0x31c190) returned 0x0
	[0059.133] LocalFree (hMem=0x320530) returned 0x0
	[0059.133] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.133] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.133] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.133] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.133] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.134] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.134] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.134] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.134] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.134] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1bf
	[0059.134] GetFileType (hFile=0xa0) returned 0x3
	[0059.134] LocalAlloc (uFlags=0x0, uBytes=0x37e) returned 0x31c560
	[0059.134] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: gpsvc\r\nDISPLAY_NAME: Group Policy Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=447, lpMultiByteStr=0x31c560, cbMultiByte=894, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: gpsvc\r\nDISPLAY_NAME: Group Policy Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n\r\n : \r\n", lpUsedDefaultChar=0x0) returned 447
	[0059.134] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bf, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bf, lpOverlapped=0x0) returned 1
	[0059.134] LocalFree (hMem=0x31c560) returned 0x0
	[0059.134] LocalFree (hMem=0x320530) returned 0x0
	[0059.135] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.135] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.135] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.135] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.135] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.135] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.135] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.135] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.135] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.135] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1b5
	[0059.135] GetFileType (hFile=0xa0) returned 0x3
	[0059.136] LocalAlloc (uFlags=0x0, uBytes=0x36a) returned 0x31c190
	[0059.136] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: iphlpsvc\r\nDISPLAY_NAME: IP Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=437, lpMultiByteStr=0x31c190, cbMultiByte=874, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: iphlpsvc\r\nDISPLAY_NAME: IP Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\nS              : \r\nU", lpUsedDefaultChar=0x0) returned 437
	[0059.136] WriteFile (in: hFile=0xa0, lpBuffer=0x31c190*, nNumberOfBytesToWrite=0x1b5, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c190*, lpNumberOfBytesWritten=0x14fa48*=0x1b5, lpOverlapped=0x0) returned 1
	[0059.136] LocalFree (hMem=0x31c190) returned 0x0
	[0059.136] LocalFree (hMem=0x320530) returned 0x0
	[0059.136] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.136] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.136] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.136] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.136] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.136] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.136] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.136] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.136] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.137] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1b2
	[0059.137] GetFileType (hFile=0xa0) returned 0x3
	[0059.137] LocalAlloc (uFlags=0x0, uBytes=0x364) returned 0x31c190
	[0059.137] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: LanmanServer\r\nDISPLAY_NAME: Server\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=434, lpMultiByteStr=0x31c190, cbMultiByte=868, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: LanmanServer\r\nDISPLAY_NAME: Server\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n \r\nS              : \r\nU", lpUsedDefaultChar=0x0) returned 434
	[0059.137] WriteFile (in: hFile=0xa0, lpBuffer=0x31c190*, nNumberOfBytesToWrite=0x1b2, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c190*, lpNumberOfBytesWritten=0x14fa48*=0x1b2, lpOverlapped=0x0) returned 1
	[0059.137] LocalFree (hMem=0x31c190) returned 0x0
	[0059.137] LocalFree (hMem=0x320530) returned 0x0
	[0059.137] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.138] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.138] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.138] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.138] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.138] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.138] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.138] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.138] _itow (in: _Dest=0x218, _Radix=1375184 | out: _Dest=0x218) returned="536"
	[0059.138] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1bc
	[0059.138] GetFileType (hFile=0xa0) returned 0x3
	[0059.139] LocalAlloc (uFlags=0x0, uBytes=0x378) returned 0x31c560
	[0059.139] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: LanmanWorkstation\r\nDISPLAY_NAME: Workstation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n", cchWideChar=444, lpMultiByteStr=0x31c560, cbMultiByte=888, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: LanmanWorkstation\r\nDISPLAY_NAME: Workstation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n \r\n\r\n : \r\n", lpUsedDefaultChar=0x0) returned 444
	[0059.139] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bc, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bc, lpOverlapped=0x0) returned 1
	[0059.139] LocalFree (hMem=0x31c560) returned 0x0
	[0059.139] LocalFree (hMem=0x320530) returned 0x0
	[0059.139] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.139] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.139] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.139] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.139] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.139] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.139] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.140] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.140] _itow (in: _Dest=0x2c8, _Radix=1375184 | out: _Dest=0x2c8) returned="712"
	[0059.140] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c0
	[0059.140] GetFileType (hFile=0xa0) returned 0x3
	[0059.140] LocalAlloc (uFlags=0x0, uBytes=0x380) returned 0x31c560
	[0059.140] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: lmhosts\r\nDISPLAY_NAME: TCP/IP NetBIOS Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n", cchWideChar=448, lpMultiByteStr=0x31c560, cbMultiByte=896, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: lmhosts\r\nDISPLAY_NAME: TCP/IP NetBIOS Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n\n : \r\n", lpUsedDefaultChar=0x0) returned 448
	[0059.140] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1c0, lpOverlapped=0x0) returned 1
	[0059.146] LocalFree (hMem=0x31c560) returned 0x0
	[0059.146] LocalFree (hMem=0x320530) returned 0x0
	[0059.147] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.147] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.147] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.147] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.147] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.147] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.147] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.147] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.147] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.147] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c3
	[0059.147] GetFileType (hFile=0xa0) returned 0x3
	[0059.148] LocalAlloc (uFlags=0x0, uBytes=0x386) returned 0x31c560
	[0059.148] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: MMCSS\r\nDISPLAY_NAME: Multimedia Class Scheduler\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=451, lpMultiByteStr=0x31c560, cbMultiByte=902, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: MMCSS\r\nDISPLAY_NAME: Multimedia Class Scheduler\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n \r\n", lpUsedDefaultChar=0x0) returned 451
	[0059.148] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1c3, lpOverlapped=0x0) returned 1
	[0059.148] LocalFree (hMem=0x31c560) returned 0x0
	[0059.148] LocalFree (hMem=0x320530) returned 0x0
	[0059.148] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.148] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.148] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.148] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.148] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.148] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.148] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.148] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.148] _itow (in: _Dest=0x4c4, _Radix=1375184 | out: _Dest=0x4c4) returned="1220"
	[0059.149] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1bb
	[0059.149] GetFileType (hFile=0xa0) returned 0x3
	[0059.149] LocalAlloc (uFlags=0x0, uBytes=0x376) returned 0x31c560
	[0059.149] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: MpsSvc\r\nDISPLAY_NAME: Windows Firewall\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1220\r\n        FLAGS              : \r\n", cchWideChar=443, lpMultiByteStr=0x31c560, cbMultiByte=886, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: MpsSvc\r\nDISPLAY_NAME: Windows Firewall\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1220\r\n        FLAGS              : \r\n    : \r\n \r\n", lpUsedDefaultChar=0x0) returned 443
	[0059.149] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bb, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bb, lpOverlapped=0x0) returned 1
	[0059.149] LocalFree (hMem=0x31c560) returned 0x0
	[0059.149] LocalFree (hMem=0x320530) returned 0x0
	[0059.149] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.149] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.150] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.150] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.150] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.150] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.150] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.150] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.150] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.150] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1bd
	[0059.150] GetFileType (hFile=0xa0) returned 0x3
	[0059.150] LocalAlloc (uFlags=0x0, uBytes=0x37a) returned 0x31c560
	[0059.150] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Netman\r\nDISPLAY_NAME: Network Connections\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=445, lpMultiByteStr=0x31c560, cbMultiByte=890, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Netman\r\nDISPLAY_NAME: Network Connections\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n  : \r\n \r\n", lpUsedDefaultChar=0x0) returned 445
	[0059.150] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bd, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bd, lpOverlapped=0x0) returned 1
	[0059.151] LocalFree (hMem=0x31c560) returned 0x0
	[0059.151] LocalFree (hMem=0x320530) returned 0x0
	[0059.151] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.151] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.151] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.151] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.151] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.151] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.151] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.151] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.151] _itow (in: _Dest=0x3f8, _Radix=1375184 | out: _Dest=0x3f8) returned="1016"
	[0059.151] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c1
	[0059.151] GetFileType (hFile=0xa0) returned 0x3
	[0059.152] LocalAlloc (uFlags=0x0, uBytes=0x382) returned 0x31c560
	[0059.152] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: netprofm\r\nDISPLAY_NAME: Network List Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n", cchWideChar=449, lpMultiByteStr=0x31c560, cbMultiByte=898, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: netprofm\r\nDISPLAY_NAME: Network List Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n\r\n \r\n", lpUsedDefaultChar=0x0) returned 449
	[0059.152] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1c1, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1c1, lpOverlapped=0x0) returned 1
	[0059.152] LocalFree (hMem=0x31c560) returned 0x0
	[0059.152] LocalFree (hMem=0x320530) returned 0x0
	[0059.152] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.152] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.152] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.152] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.152] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.152] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.153] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.153] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.153] _itow (in: _Dest=0x218, _Radix=1375184 | out: _Dest=0x218) returned="536"
	[0059.156] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c4
	[0059.156] GetFileType (hFile=0xa0) returned 0x3
	[0059.156] LocalAlloc (uFlags=0x0, uBytes=0x388) returned 0x31c560
	[0059.156] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: NlaSvc\r\nDISPLAY_NAME: Network Location Awareness\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n", cchWideChar=452, lpMultiByteStr=0x31c560, cbMultiByte=904, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: NlaSvc\r\nDISPLAY_NAME: Network Location Awareness\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 536\r\n        FLAGS              : \r\n\r\n", lpUsedDefaultChar=0x0) returned 452
	[0059.156] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1c4, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1c4, lpOverlapped=0x0) returned 1
	[0059.157] LocalFree (hMem=0x31c560) returned 0x0
	[0059.157] LocalFree (hMem=0x320530) returned 0x0
	[0059.157] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.157] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.157] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.157] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.157] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.157] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.157] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.157] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.157] _itow (in: _Dest=0x3f8, _Radix=1375184 | out: _Dest=0x3f8) returned="1016"
	[0059.157] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c7
	[0059.157] GetFileType (hFile=0xa0) returned 0x3
	[0059.157] LocalAlloc (uFlags=0x0, uBytes=0x38e) returned 0x31c190
	[0059.158] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: nsi\r\nDISPLAY_NAME: Network Store Interface Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n", cchWideChar=455, lpMultiByteStr=0x31c190, cbMultiByte=910, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: nsi\r\nDISPLAY_NAME: Network Store Interface Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n\nU", lpUsedDefaultChar=0x0) returned 455
	[0059.158] WriteFile (in: hFile=0xa0, lpBuffer=0x31c190*, nNumberOfBytesToWrite=0x1c7, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c190*, lpNumberOfBytesWritten=0x14fa48*=0x1c7, lpOverlapped=0x0) returned 1
	[0059.158] LocalFree (hMem=0x31c190) returned 0x0
	[0059.158] LocalFree (hMem=0x320530) returned 0x0
	[0059.158] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.158] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.158] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.158] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.158] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.158] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.158] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.158] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.158] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.159] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1d1
	[0059.159] GetFileType (hFile=0xa0) returned 0x3
	[0059.159] LocalAlloc (uFlags=0x0, uBytes=0x3a2) returned 0x3208f0
	[0059.159] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: PcaSvc\r\nDISPLAY_NAME: Program Compatibility Assistant Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=465, lpMultiByteStr=0x3208f0, cbMultiByte=930, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: PcaSvc\r\nDISPLAY_NAME: Program Compatibility Assistant Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 465
	[0059.159] WriteFile (in: hFile=0xa0, lpBuffer=0x3208f0*, nNumberOfBytesToWrite=0x1d1, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x3208f0*, lpNumberOfBytesWritten=0x14fa48*=0x1d1, lpOverlapped=0x0) returned 1
	[0059.159] LocalFree (hMem=0x3208f0) returned 0x0
	[0059.159] LocalFree (hMem=0x320530) returned 0x0
	[0059.159] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.159] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.159] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.159] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.159] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.159] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.159] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.160] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.160] _itow (in: _Dest=0x250, _Radix=1375184 | out: _Dest=0x250) returned="592"
	[0059.160] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1bd
	[0059.160] GetFileType (hFile=0xa0) returned 0x3
	[0059.160] LocalAlloc (uFlags=0x0, uBytes=0x37a) returned 0x31c560
	[0059.160] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: PlugPlay\r\nDISPLAY_NAME: Plug and Play\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\n", cchWideChar=445, lpMultiByteStr=0x31c560, cbMultiByte=890, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: PlugPlay\r\nDISPLAY_NAME: Plug and Play\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\n   : \r\n\r\n", lpUsedDefaultChar=0x0) returned 445
	[0059.160] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bd, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bd, lpOverlapped=0x0) returned 1
	[0059.160] LocalFree (hMem=0x31c560) returned 0x0
	[0059.160] LocalFree (hMem=0x320530) returned 0x0
	[0059.160] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.160] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.160] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.160] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.161] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.161] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.161] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.161] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.161] _itow (in: _Dest=0x250, _Radix=1375184 | out: _Dest=0x250) returned="592"
	[0059.161] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1b2
	[0059.161] GetFileType (hFile=0xa0) returned 0x3
	[0059.161] LocalAlloc (uFlags=0x0, uBytes=0x364) returned 0x31c190
	[0059.161] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Power\r\nDISPLAY_NAME: Power\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\n", cchWideChar=434, lpMultiByteStr=0x31c190, cbMultiByte=868, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Power\r\nDISPLAY_NAME: Power\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 592\r\n        FLAGS              : \r\nAGS              : \r\n\nU", lpUsedDefaultChar=0x0) returned 434
	[0059.161] WriteFile (in: hFile=0xa0, lpBuffer=0x31c190*, nNumberOfBytesToWrite=0x1b2, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c190*, lpNumberOfBytesWritten=0x14fa48*=0x1b2, lpOverlapped=0x0) returned 1
	[0059.161] LocalFree (hMem=0x31c190) returned 0x0
	[0059.161] LocalFree (hMem=0x320530) returned 0x0
	[0059.161] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.161] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.161] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.162] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.162] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.162] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.162] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.162] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.162] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.162] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1bf
	[0059.162] GetFileType (hFile=0xa0) returned 0x3
	[0059.162] LocalAlloc (uFlags=0x0, uBytes=0x37e) returned 0x31c560
	[0059.162] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: ProfSvc\r\nDISPLAY_NAME: User Profile Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=447, lpMultiByteStr=0x31c560, cbMultiByte=894, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: ProfSvc\r\nDISPLAY_NAME: User Profile Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n : \r\n\r\n", lpUsedDefaultChar=0x0) returned 447
	[0059.162] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bf, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bf, lpOverlapped=0x0) returned 1
	[0059.162] LocalFree (hMem=0x31c560) returned 0x0
	[0059.162] LocalFree (hMem=0x320530) returned 0x0
	[0059.163] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.163] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.163] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.163] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.163] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.163] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.163] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.163] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.163] _itow (in: _Dest=0x294, _Radix=1375184 | out: _Dest=0x294) returned="660"
	[0059.163] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="԰2") returned 0x1c7
	[0059.163] GetFileType (hFile=0xa0) returned 0x3
	[0059.163] LocalAlloc (uFlags=0x0, uBytes=0x38e) returned 0x320900
	[0059.164] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: RpcEptMapper\r\nDISPLAY_NAME: RPC Endpoint Mapper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 660\r\n        FLAGS              : \r\n", cchWideChar=455, lpMultiByteStr=0x320900, cbMultiByte=910, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: RpcEptMapper\r\nDISPLAY_NAME: RPC Endpoint Mapper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 660\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 455
	[0059.164] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1c7, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1c7, lpOverlapped=0x0) returned 1
	[0059.164] LocalFree (hMem=0x320900) returned 0x0
	[0059.164] LocalFree (hMem=0x320530) returned 0x0
	[0059.164] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.164] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.164] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.164] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.164] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.165] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.165] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.165] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.165] _itow (in: _Dest=0x294, _Radix=1375184 | out: _Dest=0x294) returned="660"
	[0059.165] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1c8
	[0059.165] GetFileType (hFile=0xa0) returned 0x3
	[0059.165] LocalAlloc (uFlags=0x0, uBytes=0x390) returned 0x320900
	[0059.165] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: RpcSs\r\nDISPLAY_NAME: Remote Procedure Call (RPC)\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 660\r\n        FLAGS              : \r\n", cchWideChar=456, lpMultiByteStr=0x320900, cbMultiByte=912, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: RpcSs\r\nDISPLAY_NAME: Remote Procedure Call (RPC)\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 660\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 456
	[0059.165] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1c8, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1c8, lpOverlapped=0x0) returned 1
	[0059.165] LocalFree (hMem=0x320900) returned 0x0
	[0059.165] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.165] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.165] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.166] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.166] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.166] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.166] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.166] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.166] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.166] _itow (in: _Dest=0x1e0, _Radix=1375184 | out: _Dest=0x1e0) returned="480"
	[0059.166] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1dc
	[0059.166] GetFileType (hFile=0xa0) returned 0x3
	[0059.166] LocalAlloc (uFlags=0x0, uBytes=0x3b8) returned 0x324ca0
	[0059.166] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SamSs\r\nDISPLAY_NAME: Security Accounts Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 480\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n", cchWideChar=476, lpMultiByteStr=0x324ca0, cbMultiByte=952, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SamSs\r\nDISPLAY_NAME: Security Accounts Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 480\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n", lpUsedDefaultChar=0x0) returned 476
	[0059.166] WriteFile (in: hFile=0xa0, lpBuffer=0x324ca0*, nNumberOfBytesToWrite=0x1dc, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x324ca0*, lpNumberOfBytesWritten=0x14fa48*=0x1dc, lpOverlapped=0x0) returned 1
	[0059.167] LocalFree (hMem=0x324ca0) returned 0x0
	[0059.167] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.167] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.167] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.167] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.167] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.167] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.167] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.167] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.167] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.167] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.167] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1ba
	[0059.167] GetFileType (hFile=0xa0) returned 0x3
	[0059.167] LocalAlloc (uFlags=0x0, uBytes=0x374) returned 0x31c560
	[0059.168] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Schedule\r\nDISPLAY_NAME: Task Scheduler\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=442, lpMultiByteStr=0x31c560, cbMultiByte=884, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Schedule\r\nDISPLAY_NAME: Task Scheduler\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n : \r\n : \r\n\r\n", lpUsedDefaultChar=0x0) returned 442
	[0059.168] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1ba, lpOverlapped=0x0) returned 1
	[0059.168] LocalFree (hMem=0x31c560) returned 0x0
	[0059.168] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.168] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.168] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.168] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.168] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.168] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.168] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.168] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.168] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.190] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.191] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1c9
	[0059.191] GetFileType (hFile=0xa0) returned 0x3
	[0059.191] LocalAlloc (uFlags=0x0, uBytes=0x392) returned 0x320900
	[0059.191] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SENS\r\nDISPLAY_NAME: System Event Notification Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=457, lpMultiByteStr=0x320900, cbMultiByte=914, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SENS\r\nDISPLAY_NAME: System Event Notification Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 457
	[0059.191] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1c9, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1c9, lpOverlapped=0x0) returned 1
	[0059.192] LocalFree (hMem=0x320900) returned 0x0
	[0059.192] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.192] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.192] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.192] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.192] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.192] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.192] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.192] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.192] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.193] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.193] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1cc
	[0059.193] GetFileType (hFile=0xa0) returned 0x3
	[0059.193] LocalAlloc (uFlags=0x0, uBytes=0x398) returned 0x320900
	[0059.193] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: ShellHWDetection\r\nDISPLAY_NAME: Shell Hardware Detection\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=460, lpMultiByteStr=0x320900, cbMultiByte=920, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: ShellHWDetection\r\nDISPLAY_NAME: Shell Hardware Detection\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 460
	[0059.193] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1cc, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1cc, lpOverlapped=0x0) returned 1
	[0059.193] LocalFree (hMem=0x320900) returned 0x0
	[0059.193] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.193] _itow (in: _Dest=0x110, _Radix=1375208 | out: _Dest=0x110) returned="110"
	[0059.193] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.193] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.194] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.194] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.194] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.194] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.194] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.194] _itow (in: _Dest=0x46c, _Radix=1375184 | out: _Dest=0x46c) returned="1132"
	[0059.194] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1c5
	[0059.194] GetFileType (hFile=0xa0) returned 0x3
	[0059.194] LocalAlloc (uFlags=0x0, uBytes=0x38a) returned 0x320900
	[0059.194] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Spooler\r\nDISPLAY_NAME: Print Spooler\r\n        TYPE               : 110  WIN32_OWN_PROCESS  (interactive)\r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1132\r\n        FLAGS              : \r\n", cchWideChar=453, lpMultiByteStr=0x320900, cbMultiByte=906, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Spooler\r\nDISPLAY_NAME: Print Spooler\r\n        TYPE               : 110  WIN32_OWN_PROCESS  (interactive)\r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1132\r\n        FLAGS              : \r\n   : \r\n", lpUsedDefaultChar=0x0) returned 453
	[0059.194] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1c5, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1c5, lpOverlapped=0x0) returned 1
	[0059.194] LocalFree (hMem=0x320900) returned 0x0
	[0059.194] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.194] EnumServicesStatusExW (in: hSCManager=0x314340, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x317d30, cbBufSize=0x1000, pcbBytesNeeded=0x14fd0c, lpServicesReturned=0x14fcf4, lpResumeHandle=0x14fcf0, pszGroupName=0x0 | out: lpServices=0x317d30, pcbBytesNeeded=0x14fd0c, lpServicesReturned=0x14fcf4, lpResumeHandle=0x14fcf0) returned 1
	[0059.200] _itow (in: _Dest=0x10, _Radix=1375208 | out: _Dest=0x10) returned="10"
	[0059.200] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.200] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.200] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.200] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.200] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.200] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.200] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.201] _itow (in: _Dest=0x674, _Radix=1375184 | out: _Dest=0x674) returned="1652"
	[0059.201] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1bc
	[0059.201] GetFileType (hFile=0xa0) returned 0x3
	[0059.201] LocalAlloc (uFlags=0x0, uBytes=0x378) returned 0x31c560
	[0059.201] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: sppsvc\r\nDISPLAY_NAME: Software Protection\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1652\r\n        FLAGS              : \r\n", cchWideChar=444, lpMultiByteStr=0x31c560, cbMultiByte=888, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: sppsvc\r\nDISPLAY_NAME: Software Protection\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1652\r\n        FLAGS              : \r\n \r\n : \r\n\r\n", lpUsedDefaultChar=0x0) returned 444
	[0059.202] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bc, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bc, lpOverlapped=0x0) returned 1
	[0059.202] LocalFree (hMem=0x31c560) returned 0x0
	[0059.202] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.202] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.202] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.202] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.202] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.203] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.203] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.203] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.203] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.203] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.203] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1b5
	[0059.203] GetFileType (hFile=0xa0) returned 0x3
	[0059.204] LocalAlloc (uFlags=0x0, uBytes=0x36a) returned 0x31c560
	[0059.204] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SysMain\r\nDISPLAY_NAME: Superfetch\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=437, lpMultiByteStr=0x31c560, cbMultiByte=874, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SysMain\r\nDISPLAY_NAME: Superfetch\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n   : \r\n \r\n : \r\n\r\n", lpUsedDefaultChar=0x0) returned 437
	[0059.204] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1b5, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1b5, lpOverlapped=0x0) returned 1
	[0059.204] LocalFree (hMem=0x31c560) returned 0x0
	[0059.204] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.204] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.204] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.205] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.205] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.205] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.205] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.205] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.205] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.205] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.205] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1b0
	[0059.206] GetFileType (hFile=0xa0) returned 0x3
	[0059.206] LocalAlloc (uFlags=0x0, uBytes=0x360) returned 0x320530
	[0059.206] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Themes\r\nDISPLAY_NAME: Themes\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=432, lpMultiByteStr=0x320530, cbMultiByte=864, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Themes\r\nDISPLAY_NAME: Themes\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\nA", lpUsedDefaultChar=0x0) returned 432
	[0059.206] WriteFile (in: hFile=0xa0, lpBuffer=0x320530*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320530*, lpNumberOfBytesWritten=0x14fa48*=0x1b0, lpOverlapped=0x0) returned 1
	[0059.207] LocalFree (hMem=0x320530) returned 0x0
	[0059.207] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.207] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.207] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.207] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.207] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.207] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.207] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.207] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.207] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.207] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.207] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1ca
	[0059.207] GetFileType (hFile=0xa0) returned 0x3
	[0059.208] LocalAlloc (uFlags=0x0, uBytes=0x394) returned 0x320900
	[0059.208] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: TrkWks\r\nDISPLAY_NAME: Distributed Link Tracking Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=458, lpMultiByteStr=0x320900, cbMultiByte=916, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: TrkWks\r\nDISPLAY_NAME: Distributed Link Tracking Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n\r\n", lpUsedDefaultChar=0x0) returned 458
	[0059.208] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1ca, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1ca, lpOverlapped=0x0) returned 1
	[0059.208] LocalFree (hMem=0x320900) returned 0x0
	[0059.208] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.208] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.208] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.208] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.208] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.208] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.209] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.209] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.209] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.209] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.209] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1cf
	[0059.209] GetFileType (hFile=0xa0) returned 0x3
	[0059.209] LocalAlloc (uFlags=0x0, uBytes=0x39e) returned 0x320900
	[0059.209] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: UxSms\r\nDISPLAY_NAME: Desktop Window Manager Session Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=463, lpMultiByteStr=0x320900, cbMultiByte=926, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: UxSms\r\nDISPLAY_NAME: Desktop Window Manager Session Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 463
	[0059.209] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1cf, lpOverlapped=0x0) returned 1
	[0059.209] LocalFree (hMem=0x320900) returned 0x0
	[0059.210] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.210] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.210] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.210] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.210] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.210] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.210] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.210] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.210] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.210] _itow (in: _Dest=0x3f8, _Radix=1375184 | out: _Dest=0x3f8) returned="1016"
	[0059.210] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1ca
	[0059.210] GetFileType (hFile=0xa0) returned 0x3
	[0059.211] LocalAlloc (uFlags=0x0, uBytes=0x394) returned 0x320900
	[0059.211] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WdiServiceHost\r\nDISPLAY_NAME: Diagnostic Service Host\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n", cchWideChar=458, lpMultiByteStr=0x320900, cbMultiByte=916, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WdiServiceHost\r\nDISPLAY_NAME: Diagnostic Service Host\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n : \r\n", lpUsedDefaultChar=0x0) returned 458
	[0059.211] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1ca, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1ca, lpOverlapped=0x0) returned 1
	[0059.211] LocalFree (hMem=0x320900) returned 0x0
	[0059.211] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.211] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.211] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.211] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.211] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.212] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.212] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.212] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.212] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.212] _itow (in: _Dest=0x338, _Radix=1375184 | out: _Dest=0x338) returned="824"
	[0059.212] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1c7
	[0059.212] GetFileType (hFile=0xa0) returned 0x3
	[0059.212] LocalAlloc (uFlags=0x0, uBytes=0x38e) returned 0x320900
	[0059.213] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WdiSystemHost\r\nDISPLAY_NAME: Diagnostic System Host\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n", cchWideChar=455, lpMultiByteStr=0x320900, cbMultiByte=910, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WdiSystemHost\r\nDISPLAY_NAME: Diagnostic System Host\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 824\r\n        FLAGS              : \r\n \r\n : \r\n", lpUsedDefaultChar=0x0) returned 455
	[0059.213] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1c7, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1c7, lpOverlapped=0x0) returned 1
	[0059.213] LocalFree (hMem=0x320900) returned 0x0
	[0059.213] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.213] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.213] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.213] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.213] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.213] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.213] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.213] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.213] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.214] _itow (in: _Dest=0x738, _Radix=1375184 | out: _Dest=0x738) returned="1848"
	[0059.214] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1be
	[0059.214] GetFileType (hFile=0xa0) returned 0x3
	[0059.214] LocalAlloc (uFlags=0x0, uBytes=0x37c) returned 0x31c560
	[0059.214] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WinDefend\r\nDISPLAY_NAME: Windows Defender\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1848\r\n        FLAGS              : \r\n", cchWideChar=446, lpMultiByteStr=0x31c560, cbMultiByte=892, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WinDefend\r\nDISPLAY_NAME: Windows Defender\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1848\r\n        FLAGS              : \r\n\n : \r\n\r\n", lpUsedDefaultChar=0x0) returned 446
	[0059.214] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1be, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1be, lpOverlapped=0x0) returned 1
	[0059.216] LocalFree (hMem=0x31c560) returned 0x0
	[0059.216] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.216] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.216] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.216] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.216] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.216] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.217] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.217] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.217] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.217] _itow (in: _Dest=0x3f8, _Radix=1375184 | out: _Dest=0x3f8) returned="1016"
	[0059.217] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1e0
	[0059.217] GetFileType (hFile=0xa0) returned 0x3
	[0059.217] LocalAlloc (uFlags=0x0, uBytes=0x3c0) returned 0x324cb0
	[0059.217] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WinHttpAutoProxySvc\r\nDISPLAY_NAME: WinHTTP Web Proxy Auto-Discovery Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n", cchWideChar=480, lpMultiByteStr=0x324cb0, cbMultiByte=960, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WinHttpAutoProxySvc\r\nDISPLAY_NAME: WinHTTP Web Proxy Auto-Discovery Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1016\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 480
	[0059.217] WriteFile (in: hFile=0xa0, lpBuffer=0x324cb0*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x324cb0*, lpNumberOfBytesWritten=0x14fa48*=0x1e0, lpOverlapped=0x0) returned 1
	[0059.217] LocalFree (hMem=0x324cb0) returned 0x0
	[0059.217] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.217] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.217] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.218] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.218] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.218] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.218] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.218] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.218] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.218] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.218] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1c9
	[0059.218] GetFileType (hFile=0xa0) returned 0x3
	[0059.218] LocalAlloc (uFlags=0x0, uBytes=0x392) returned 0x320900
	[0059.218] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Winmgmt\r\nDISPLAY_NAME: Windows Management Instrumentation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=457, lpMultiByteStr=0x320900, cbMultiByte=914, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Winmgmt\r\nDISPLAY_NAME: Windows Management Instrumentation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n\n : \r\n", lpUsedDefaultChar=0x0) returned 457
	[0059.218] WriteFile (in: hFile=0xa0, lpBuffer=0x320900*, nNumberOfBytesToWrite=0x1c9, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x320900*, lpNumberOfBytesWritten=0x14fa48*=0x1c9, lpOverlapped=0x0) returned 1
	[0059.220] LocalFree (hMem=0x320900) returned 0x0
	[0059.220] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.220] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.220] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.220] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.221] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.221] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.221] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.221] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.221] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.221] _itow (in: _Dest=0x2c8, _Radix=1375184 | out: _Dest=0x2c8) returned="712"
	[0059.221] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1b9
	[0059.221] GetFileType (hFile=0xa0) returned 0x3
	[0059.221] LocalAlloc (uFlags=0x0, uBytes=0x372) returned 0x31c560
	[0059.221] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: wscsvc\r\nDISPLAY_NAME: Security Center\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n", cchWideChar=441, lpMultiByteStr=0x31c560, cbMultiByte=882, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: wscsvc\r\nDISPLAY_NAME: Security Center\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 712\r\n        FLAGS              : \r\n : \r\n\n : \r\n\r\n", lpUsedDefaultChar=0x0) returned 441
	[0059.221] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1b9, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1b9, lpOverlapped=0x0) returned 1
	[0059.222] LocalFree (hMem=0x31c560) returned 0x0
	[0059.222] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.222] _itow (in: _Dest=0x20, _Radix=1375208 | out: _Dest=0x20) returned="20"
	[0059.222] _itow (in: _Dest=0x4, _Radix=1375232 | out: _Dest=0x4) returned="4"
	[0059.222] _itow (in: _Dest=0x0, _Radix=1375160 | out: _Dest=0x0) returned="0"
	[0059.222] _itow (in: _Dest=0x0, _Radix=1375112 | out: _Dest=0x0) returned="0"
	[0059.222] _itow (in: _Dest=0x0, _Radix=1375040 | out: _Dest=0x0) returned="0"
	[0059.222] _itow (in: _Dest=0x0, _Radix=1375064 | out: _Dest=0x0) returned="0"
	[0059.222] _itow (in: _Dest=0x0, _Radix=1375088 | out: _Dest=0x0) returned="0"
	[0059.222] _itow (in: _Dest=0x0, _Radix=1375136 | out: _Dest=0x0) returned="0"
	[0059.222] _itow (in: _Dest=0x370, _Radix=1375184 | out: _Dest=0x370) returned="880"
	[0059.223] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x14faa0, nSize=0x2, Arguments=0x14fab0 | out: lpBuffer="䣐2") returned 0x1bd
	[0059.223] GetFileType (hFile=0xa0) returned 0x3
	[0059.223] LocalAlloc (uFlags=0x0, uBytes=0x37a) returned 0x31c560
	[0059.223] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: wuauserv\r\nDISPLAY_NAME: Windows Update\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n", cchWideChar=445, lpMultiByteStr=0x31c560, cbMultiByte=890, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: wuauserv\r\nDISPLAY_NAME: Windows Update\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 880\r\n        FLAGS              : \r\n\n\n : \r\n\r\n", lpUsedDefaultChar=0x0) returned 445
	[0059.223] WriteFile (in: hFile=0xa0, lpBuffer=0x31c560*, nNumberOfBytesToWrite=0x1bd, lpNumberOfBytesWritten=0x14fa48, lpOverlapped=0x0 | out: lpBuffer=0x31c560*, lpNumberOfBytesWritten=0x14fa48*=0x1bd, lpOverlapped=0x0) returned 1
	[0059.223] LocalFree (hMem=0x31c560) returned 0x0
	[0059.223] LocalFree (hMem=0x3248d0) returned 0x0
	[0059.223] LocalFree (hMem=0x317d30) returned 0x0
	[0059.224] CloseServiceHandle (hSCObject=0x314340) returned 1
	[0059.234] exit (_Code=0) 

Thread:
	id = 7
	os_tid = 0xa90


Process:
	id = "3"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x3363f000"
	os_pid = "0xb10"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xb5c"
	cmd_line = "vssadmin delete shadows /all /quiet"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 8
	os_tid = 0xb50


Thread:
	id = 11
	os_tid = 0x750


Thread:
	id = 12
	os_tid = 0x700


Thread:
	id = 13
	os_tid = 0x424


Thread:
	id = 14
	os_tid = 0x7d8


Process:
	id = "4"
	image_name = "vssvc.exe"
	filename = "c:\\windows\\system32\\vssvc.exe"
	page_root = "0x33d26000"
	os_pid = "0x24c"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b7e890"
	monitor_reason = "rpc_server"
	parent_id = "3"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\system32\\vssvc.exe"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:00070437" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 15
	os_tid = 0x82c


Thread:
	id = 16
	os_tid = 0x81c


Thread:
	id = 17
	os_tid = 0x80c


Thread:
	id = 18
	os_tid = 0x484

	[0064.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xeadc20 | out: lpSystemTimeAsFileTime=0xeadc20*(dwLowDateTime=0x89763610, dwHighDateTime=0x1d5dcd8)) 
	[0064.394] GetCurrentProcessId () returned 0x24c
	[0064.394] GetCurrentThreadId () returned 0x484
	[0064.394] GetTickCount () returned 0x11598e6
	[0064.394] QueryPerformanceCounter (in: lpPerformanceCount=0xeadc28 | out: lpPerformanceCount=0xeadc28*=20555923582) returned 1
	[0064.394] malloc (_Size=0x100) returned 0x458e80

Thread:
	id = 19
	os_tid = 0x770


Thread:
	id = 20
	os_tid = 0x788


Thread:
	id = 21
	os_tid = 0x10c


Thread:
	id = 22
	os_tid = 0x894


Thread:
	id = 47
	os_tid = 0x9b0


Process:
	id = "5"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x3382b000"
	os_pid = "0x860"
	os_integrity_level = "0x4000"
	os_privileges = "0x60814080"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:000709ce" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 23
	os_tid = 0x8ec


Thread:
	id = 24
	os_tid = 0x8dc


Thread:
	id = 25
	os_tid = 0x8cc


Thread:
	id = 26
	os_tid = 0x8bc


Thread:
	id = 27
	os_tid = 0x8ac


Thread:
	id = 28
	os_tid = 0x878


Thread:
	id = 48
	os_tid = 0xbf8